Commit 9a3aa3c9 authored May 04, 2020 by David Brown Committed by Johan Hedberg May 28, 2020

updatehub: Require peer verification with DTLS

DTLS without peer verification offers no security whatsoever (and is
arguably worse than not using DTLS in the first place).

Change the verification option to require this peer verification. To
use this, it may be necessary to install and use a root certificate.

Signed-off-by: David Brown <david.brown@linaro.org>

parent 137ebbc4

lib/updatehub/updatehub.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -162,7 +162,7 @@ static bool start_coap_client(void)
		}

		#if defined(CONFIG_UPDATEHUB_DTLS)
		int verify = TLS_PEER_VERIFY_NONE;
		int verify = TLS_PEER_VERIFY_REQUIRED;
		sec_tag_t sec_list[] = { CA_CERTIFICATE_TAG };
		int protocol = IPPROTO_DTLS_1_2;
		char port[] = "5684";