search

wso2 / product-iots

Welcome to the WSO2 IoT Server source code! For info on working with the WSO2 IoT Server repository and contributing code, click the link below.
http://wso2.github.io/
Apache License 2.0
184 stars 181 forks source link

WSO2 IoT Server- Server and Device Mutual Authentication #1910

Open prithvi66 opened 5 years ago

prithvi66 commented 5 years ago

Is it possible to enable Mutual SSL Authentication between server and device. As per WSO2 docs, this feature is available but the not the default way. Currently the server is using a one-way authentication where the server certificate is shared with the device but there is no authentication from the device. I would want to implement mutual authentication between device and the server.

I know that WSO2 provides SCEP mechanism for security. I didnt exactly understand whether it is already installed or do we need to perform some extra steps so that the communication between device and server is secure.

I referred to the links below, https://docs.wso2.com/display/IoTS330/Mutual+SSL+Authentication

https://wso2.com/library/articles/2017/09/securing-communication-between-devices-and-the-iot-platform/

Currently working on WSO2 IoT Server 3.3.0

Any help would be appreciated. Thanks

stale[bot] commented 5 years ago

This issue has been automatically marked as stale because it has not had recent activity.