3. Raspberry Gateway 2.1.1 + signing

Raspberry Gateway 2.1.1 + signing

  • t3chie

    The Gateway code on Raspberry seems to work only when signing is not used.
    Is that something known?

    In addition, I had to explicitly name the architecture and comment out one line in core/MySigningAtsha204Soft.cpp to get the debug signing output working:

    #ifdef linux
    #define __FlashStringHelper char
    // #define MY_SERIALDEVICE.print debug
    #endif

    My configure options were:
    ./configure --my-gateway=ethernet
    --soc=BCM2836
    --my-transport=nrf24
    --my-rf24-ce-pin=22
    --my-rf24-cs-pin=24
    --my-rf24-irq-pin=15
    --my-rf24-pa-level=RF24_PA_LOW
    --my-leds-err-pin=12
    --my-leds-rx-pin=16
    --my-leds-tx-pin=18
    --my-signing=software
    --my-signing-request-signatures
    --my-signing-request-gw-signatures-from-all
    --my-rf24-encryption-enabled
    --my-rf24-channel=70
    --my-debug=enable
    --my-signing-debug

    Tested with a Raspberry 1 and 2.

    0 Anticimex 2 Replies
  • Anticimex
    Contest Winner

    @t3chie hi, this is not known (at least to me). I don't have a rPi setup so I have not been able to verify. @marceloaqno do you know what the current status is? If I remember correctly, you tested the latest signing improvements package successfully on rPi, right?

    0 t3chie 1 Reply
  • Anticimex
    Contest Winner

    @t3chie btw, the option my-signing-request-gw-signatures-from-all is obsolete. It is the default behavior now. At least if you are on latest development branch.

    0
  • t3chie

    @Anticimex I am happy to test whatever you want me to do. I "think" my wiring is correct as it works when signing is not used. I can post debug output from the Gateway for both (signed and unsigned) if that helps.
    Should I give the dev branch a try?

    0 Anticimex 1 Reply
  • Anticimex
    Contest Winner

    @t3chie ah you are on master? That's interesting because that should work. Yes, please give the devel branch a try. Could be that full signing support for rPi never made it in the latest release.

    0 t3chie 1 Reply
  • t3chie

    @Anticimex That is different but still not working. The architecture autodetection works. The signing debug does compile, too. But when I am starting up a node the gateway reports:

    mysgw: Starting gateway...
    mysgw: Protocol version - 2.2.0-beta
    mysgw: MCO:BGN:INIT GW,CP=RNNG-SQX,VER=2.2.0-beta
    mysgw: !SGN:PER:TAMPERED
    mysgw: !SGN:INI:BND FAIL
    mysgw: TSF:LRT:OK
    mysgw: TSM:INIT
    mysgw: TSF:WUR:MS=0
    mysgw: TSM:INIT:TSP OK
    mysgw: TSM:INIT:GW MODE
    mysgw: TSM:READY:ID=0,PAR=0,DIS=0
    mysgw: MCO:REG:NOT NEEDED
    mysgw: Listening for connections on 0.0.0.0:5003
    mysgw: MCO:BGN:STP
    mysgw: MCO:BGN:INIT OK,TSP=1
    mysgw: TSF:MSG:READ,118-205-14,s=1,c=2,t=118,pt=6,l=0,sg=1:
    mysgw: TSF:MSG:REL MSG
    mysgw: !TSF:RTE:14 UNKNOWN
    mysgw: SGN:SGN:118!=0 NUS
    mysgw: !TSF:MSG:SEND,118-0-14-14,s=1,c=2,t=118,pt=6,l=0,sg=1,ft=0,st=NACK:
    mysgw: TSF:MSG:READ,138-29-188,s=181,c=6,t=66,pt=5,l=16,sg=0:3636023473
    mysgw: TSF:MSG:REL MSG
    mysgw: !TSF:RTE:188 UNKNOWN
    mysgw: SGN:SGN:138!=0 NUS
    mysgw: !TSF:MSG:SEND,138-0-188-188,s=181,c=6,t=66,pt=5,l=16,sg=0,ft=0,st=NACK:3636023473
    mysgw: TSF:MSG:READ,184-237-134,s=214,c=0,t=229,pt=6,l=13,sg=1:5A403EDF050D2265DF00000000
    mysgw: !TSF:MSG:PVER,3=2
    mysgw: TSF:MSG:READ,233-187-65,s=93,c=1,t=52,pt=1,l=1,sg=1:222
    mysgw: !TSF:MSG:PVER,1=2
    mysgw: TSF:MSG:READ,177-160-211,s=159,c=6,t=135,pt=4,l=11,sg=1:-2047481336
    mysgw: !TSF:MSG:PVER,0=2
    mysgw: TSF:MSG:READ,166-111-53,s=187,c=3,t=196,pt=5,l=9,sg=0:204581490
    mysgw: TSF:MSG:REL MSG
    mysgw: !TSF:RTE:53 UNKNOWN
    mysgw: SGN:SGN:166!=0 NUS
    mysgw: !TSF:MSG:SEND,166-0-53-53,s=187,c=3,t=196,pt=5,l=9,sg=0,ft=0,st=NACK:204581490

    The only node on that radio channel is ID 100 and if I disable signing, the same setup is reporting:

    mysgw: Starting gateway...
    mysgw: Protocol version - 2.2.0-beta
    mysgw: MCO:BGN:INIT GW,CP=RNNG--Q-,VER=2.2.0-beta
    mysgw: TSF:LRT:OK
    mysgw: TSM:INIT
    mysgw: TSF:WUR:MS=0
    mysgw: TSM:INIT:TSP OK
    mysgw: TSM:INIT:GW MODE
    mysgw: TSM:READY:ID=0,PAR=0,DIS=0
    mysgw: MCO:REG:NOT NEEDED
    mysgw: Listening for connections on 0.0.0.0:5003
    mysgw: MCO:BGN:STP
    mysgw: MCO:BGN:INIT OK,TSP=1
    mysgw: TSF:MSG:READ,100-100-255,s=255,c=3,t=7,pt=0,l=0,sg=0:
    mysgw: TSF:MSG:BC
    mysgw: TSF:MSG:FPAR REQ,ID=100
    mysgw: TSF:CKU:OK,FCTRL
    mysgw: TSF:MSG:GWL OK
    mysgw: TSF:MSG:SEND,0-0-100-100,s=255,c=3,t=8,pt=1,l=1,sg=0,ft=0,st=OK:0
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=24,pt=1,l=1,sg=0:1
    mysgw: TSF:MSG:PINGED,ID=100,HP=1
    mysgw: TSF:MSG:SEND,0-0-100-100,s=255,c=3,t=25,pt=1,l=1,sg=0,ft=0,st=OK:1
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=15,pt=6,l=2,sg=0:0101
    mysgw: TSF:MSG:SEND,0-0-100-100,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0100
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=0,t=17,pt=0,l=5,sg=0:2.1.1
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=6,pt=1,l=1,sg=0:0
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=11,pt=0,l=13,sg=0:Motion Sensor
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=12,pt=0,l=3,sg=0:1.0
    mysgw: TSF:MSG:READ,100-100-0,s=1,c=0,t=1,pt=0,l=0,sg=0:
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=26,pt=1,l=1,sg=0:2
    mysgw: TSF:MSG:SEND,0-0-100-100,s=255,c=3,t=27,pt=1,l=1,sg=0,ft=0,st=OK:1

    0 Anticimex 1 Reply
  • Anticimex
    Contest Winner

    @t3chie looks like the personalization has not finished successfully. How do you store the hmac key to the rPi? If you don't use the personalizer sketch you either need to write the checksum yourself or disable the checksum validation. It could be that the method for personalizing on rPi does not calculate and store a checksum. So either that has to change, or the checksum check should be disabled on rPi/Linux.

    0 t3chie 1 Reply
  • t3chie

    @Anticimex Sorry for that - when I changed Pi's I forgot to personalize the GW. But that didn't made it working:
    mysgw: Starting gateway...
    mysgw: Protocol version - 2.2.0-beta
    mysgw: MCO:BGN:INIT GW,CP=RNNG-SQX,VER=2.2.0-beta
    mysgw: !SGN:PER:TAMPERED
    mysgw: !SGN:INI:BND FAIL
    mysgw: TSF:LRT:OK
    mysgw: TSM:INIT
    mysgw: TSF:WUR:MS=0
    mysgw: TSM:INIT:TSP OK
    mysgw: TSM:INIT:GW MODE
    mysgw: TSM:READY:ID=0,PAR=0,DIS=0
    mysgw: MCO:REG:NOT NEEDED
    mysgw: Listening for connections on 0.0.0.0:5003
    mysgw: MCO:BGN:STP
    mysgw: MCO:BGN:INIT OK,TSP=1
    mysgw: TSF:MSG:READ,118-205-14,s=1,c=2,t=118,pt=6,l=0,sg=1:
    mysgw: TSF:MSG:REL MSG
    mysgw: !TSF:RTE:14 UNKNOWN
    mysgw: SGN:SGN:118!=0 NUS
    mysgw: !TSF:MSG:SEND,118-0-14-14,s=1,c=2,t=118,pt=6,l=0,sg=1,ft=0,st=NACK:
    mysgw: TSF:MSG:READ,138-29-188,s=181,c=6,t=66,pt=5,l=16,sg=0:3636023473
    mysgw: TSF:MSG:REL MSG
    mysgw: !TSF:RTE:188 UNKNOWN
    mysgw: SGN:SGN:138!=0 NUS
    mysgw: !TSF:MSG:SEND,138-0-188-188,s=181,c=6,t=66,pt=5,l=16,sg=0,ft=0,st=NACK:3636023473
    mysgw: TSF:MSG:READ,184-237-134,s=214,c=0,t=229,pt=6,l=13,sg=1:5A403EDF050D2265DF00000000
    mysgw: !TSF:MSG:PVER,3=2
    mysgw: TSF:MSG:READ,233-187-65,s=93,c=1,t=52,pt=1,l=1,sg=1:222
    mysgw: !TSF:MSG:PVER,1=2
    mysgw: TSF:MSG:READ,177-160-211,s=159,c=6,t=135,pt=4,l=11,sg=1:-2047481336
    mysgw: !TSF:MSG:PVER,0=2
    mysgw: TSF:MSG:READ,166-111-53,s=187,c=3,t=196,pt=5,l=9,sg=0:204581490
    mysgw: TSF:MSG:REL MSG
    mysgw: !TSF:RTE:53 UNKNOWN
    mysgw: SGN:SGN:166!=0 NUS
    mysgw: !TSF:MSG:SEND,166-0-53-53,s=187,c=3,t=196,pt=5,l=9,sg=0,ft=0,st=NACK:204581490
    mysgw: TSF:MSG:READ,223-72-13,s=199,c=4,t=110,pt=5,l=4,sg=0:3736138177
    mysgw: !TSF:MSG:PVER,1=2
    mysgw: TSF:MSG:READ,151-70-68,s=120,c=3,t=166,pt=0,l=15,sg=1:?rQ?0??
    mysgw: !TSF:MSG:PVER,0=2

    Isn't the Node ID reported changing between random values although it should only see ID 100 ?

    0 Anticimex 1 Reply
  • Anticimex
    Contest Winner

    @t3chie it still reports !SGN:PER:TAMPERED so my original question(s) are still valid 🙂

    0 t3chie 1 Reply
  • t3chie

    @Anticimex I use:

    ./bin/mysgw --set-soft-hmac-key D94AB9BF54D266CA517C23C870FF7A6...
    ./bin/mysgw --set-soft-serial-key 2200002200...

    How can I calculate the checksum or disable it?

    0 Anticimex 1 Reply
  • Anticimex
    Contest Winner

    @t3chie just comment https://github.com/mysensors/MySensors/blob/development/core/MySigningAtsha204Soft.cpp#L127

    I'm pretty sure the problem is that on Linux, a checksum is never calculated, so I will patch the init function of the software signing backend to ignore that calculation on Linux.
    I do also note that you seem to get NACKs. I can already now say that those have to go away for signing to work. See here.

    0 t3chie 1 Reply
  • t3chie

    @Anticimex Have tried to comment out line 127, but as you said no joy. I know that the radio I am using is not the best but I am still not sure if the HW is the culprit here.

    I have put that RF24 module onto a Nano with itead RF Shield and loaded a 2.1.1 Gateway Sketch including signing - that works against the same node I am testing the Pi.
    I am using the interrupt variant of the Pi cabling - could that be the problem?

    0 Anticimex 1 Reply
  • Anticimex
    Contest Winner

    @t3chie if you read the troubleshooting guide which I linked to, the topmost and most common issue is radio problems and these are not signing related. They are because you have a flaky radio connection (reasons could be many, and there are a ton of threads on the forum that discuss these). You see these when you enable signing because then full size messages are transmitted and not the relatively small messages you typically transmit.

    0 t3chie 1 Reply
  • t3chie

    @Anticimex Well, I have read all troubleshooting material many times and agree that mostly it is HW. This time however it was stupidity on my side!
    I mixed up signing with encryption on the Pi compile time flags.
    To summarize:
    On 2.1.1, the architecture needs to be set and signing works (have not tested encryption yet).
    On dev, architecture needs to be left alone (not set) and checksum calculation needs to be commented out (line 127 of MySigningAtsha204Soft.cpp).

    0 Anticimex 2 Replies
  • Anticimex
    Contest Winner

    @t3chie ah, ok. Yes, those NUS messages indicated that something was really mixed up 🙂
    I will file a pull request to fix the checksum issue. Thanks for reporting!

    0
  • Anticimex
    Contest Winner

    @t3chie Could I ask you a big favour to test my PR on your linux gw and node?
    https://github.com/mysensors/MySensors/pull/885

    0 t3chie 1 Reply
  • t3chie

    @Anticimex Sure, can do.
    Would you refresh my memory - how can I check out the tree with that pullrequest?

    0 Anticimex 1 Reply
  • Anticimex
    Contest Winner

    @t3chie thanks!
    git checkout -b fallberg-signing development
    git pull https://github.com/fallberg/MySensors.git signing

    0 t3chie 1 Reply
  • t3chie

    @Anticimex I did:
    git clone https://github.com/mysensors/MySensors.git --branch development
    cd MySensors
    git pull https://github.com/fallberg/MySensors.git signing

    Then compile with:
    ./configure --my-gateway=ethernet
    --my-transport=nrf24
    --my-rf24-ce-pin=22
    --my-rf24-cs-pin=24
    --my-rf24-irq-pin=15
    --my-rf24-pa-level=RF24_PA_LOW
    --my-leds-err-pin=12
    --my-leds-rx-pin=16
    --my-leds-tx-pin=18
    --my-rf24-channel=76
    --my-debug=enable
    --my-signing=software
    --my-signing-request-signatures
    --my-signing-request-gw-signatures-from-all
    --my-signing-debug

    Result with one node restarting while others are already running:

    mysgw: TSF:MSG:READ,100-100-255,s=255,c=3,t=7,pt=0,l=0,sg=0:
    mysgw: TSF:MSG:BC
    mysgw: TSF:MSG:FPAR REQ,ID=100
    mysgw: TSF:PNG:SEND,TO=0
    mysgw: TSF:CKU:OK
    mysgw: TSF:MSG:GWL OK
    mysgw: SGN:SKP:MSG CMD=3,TYPE=8
    mysgw: TSF:MSG:SEND,0-0-100-100,s=255,c=3,t=8,pt=1,l=1,sg=1,ft=0,st=OK:0
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=24,pt=1,l=1,sg=0:1
    mysgw: SGN:SKP:MSG CMD=3,TYPE=24
    mysgw: TSF:MSG:PINGED,ID=100,HP=1
    mysgw: SGN:SKP:MSG CMD=3,TYPE=25
    mysgw: TSF:MSG:SEND,0-0-100-100,s=255,c=3,t=25,pt=1,l=1,sg=1,ft=0,st=OK:1
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=15,pt=6,l=2,sg=0:0101
    mysgw: SGN:SKP:MSG CMD=3,TYPE=15
    mysgw: SGN:PRE:SGN REQ,FROM=100
    mysgw: !SGN:PRE:WHI NREQ,FROM=100 REJ
    mysgw: SGN:PRE:SGN REQ,TO=100
    mysgw: SGN:PRE:WHI NREQ,TO=100
    mysgw: SGN:SKP:MSG CMD=3,TYPE=15
    mysgw: TSF:MSG:SEND,0-0-100-100,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0101
    mysgw: SGN:PRE:XMT,TO=100
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=16,pt=0,l=0,sg=0:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: !SGN:NCE:GEN
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=16,pt=0,l=0,sg=0:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: !SGN:NCE:GEN
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=16,pt=0,l=0,sg=0:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: !SGN:NCE:GEN
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=16,pt=0,l=0,sg=0:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: !SGN:NCE:GEN
    mysgw: TSF:MSG:READ,100-100-0,s=1,c=3,t=16,pt=0,l=0,sg=0:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: !SGN:NCE:GEN
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=26,pt=1,l=1,sg=0:2
    mysgw: SGN:SKP:MSG CMD=3,TYPE=26
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: TSF:MSG:SEND,0-0-100-100,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
    mysgw: SGN:SGN:NCE REQ,TO=100
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=17,pt=6,l=25,sg=1:<NONCE>
    mysgw: SGN:SKP:MSG CMD=3,TYPE=17
    mysgw: SGN:NCE:FROM=100
    mysgw: SGN:BND:NONCE=4BD28D2B47813291B354D4A856B07E7A6B496CF86FA2FF969D7C2D115FAC09DF
    mysgw: SGN:BND:HMAC=07FF305FFEB4D1489C3C9BA63A281890DDD850573B406FB691C09C23DC12DD00
    mysgw: SGN:BND:SIG WHI,ID=0
    mysgw: SGN:BND:SIG WHI,SERIAL=000000000000000000
    mysgw: SGN:SGN:SGN
    mysgw: TSF:MSG:SEND,0-0-100-100,s=255,c=3,t=27,pt=1,l=1,sg=1,ft=0,st=OK:1

    Looks OK for me, right?

    0 Anticimex 3 Replies
  • Anticimex
    Contest Winner

    @t3chie I think so. There are a few errors in the log though but I am not sure if that is due to other nodes on your network not being configured properly.

    0
  • Anticimex
    Contest Winner

    @t3chie it also looks like your gw is not always succeeding in generating nonces.

    0
  • Anticimex
    Contest Winner

    @t3chie could you please include the startup messages from the gateway? Looks like it still does not initialize properly. It should not have a problem generating nonces if it thinks personalization is OK.

    0 t3chie 1 Reply
  • t3chie

    @Anticimex

    mysgw: Starting gateway...
    mysgw: Protocol version - 2.2.0-beta
    mysgw: MCO:BGN:INIT GW,CP=RNNG-SQ-,VER=2.2.0-beta
    mysgw: SGN:PER:OK
    mysgw: SGN:PER:OK
    mysgw: TSF:LRT:OK
    mysgw: TSM:INIT
    mysgw: TSF:WUR:MS=0
    mysgw: TSM:INIT:TSP OK
    mysgw: TSM:INIT:GW MODE
    mysgw: TSM:READY:ID=0,PAR=0,DIS=0
    mysgw: MCO:REG:NOT NEEDED
    mysgw: Listening for connections on 0.0.0.0:5003
    mysgw: MCO:BGN:STP
    mysgw: MCO:BGN:INIT OK,TSP=1
    mysgw: New connection from 127.0.0.1
    mysgw: Client 0 connected
    mysgw: Client 0: 255;255;3;0;20;
    mysgw: SGN:SKP:MSG CMD=3,TYPE=20
    mysgw: TSF:MSG:SEND,0-0-255-255,s=255,c=3,t=20,pt=0,l=0,sg=0,ft=0,st=OK:
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: TSF:MSG:READ,198-198-0,s=255,c=3,t=21,pt=1,l=1,sg=0:0
    mysgw: SGN:SKP:MSG CMD=3,TYPE=21
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: TSF:MSG:READ,100-100-255,s=255,c=3,t=7,pt=0,l=0,sg=0:
    mysgw: TSF:MSG:BC
    mysgw: TSF:MSG:FPAR REQ,ID=100
    mysgw: TSF:PNG:SEND,TO=0
    mysgw: TSF:CKU:OK
    mysgw: TSF:MSG:GWL OK
    mysgw: SGN:SKP:MSG CMD=3,TYPE=8
    mysgw: TSF:MSG:SEND,0-0-100-100,s=255,c=3,t=8,pt=1,l=1,sg=0,ft=0,st=OK:0
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=24,pt=1,l=1,sg=0:1
    mysgw: SGN:SKP:MSG CMD=3,TYPE=24
    mysgw: TSF:MSG:PINGED,ID=100,HP=1
    mysgw: SGN:SKP:MSG CMD=3,TYPE=25
    mysgw: TSF:MSG:SEND,0-0-100-100,s=255,c=3,t=25,pt=1,l=1,sg=0,ft=0,st=OK:1
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=15,pt=6,l=2,sg=0:0101
    mysgw: SGN:SKP:MSG CMD=3,TYPE=15
    mysgw: SGN:PRE:SGN REQ,FROM=100
    mysgw: !SGN:PRE:WHI NREQ,FROM=100 REJ
    mysgw: SGN:PRE:SGN REQ,TO=100
    mysgw: SGN:PRE:WHI NREQ,TO=100
    mysgw: SGN:SKP:MSG CMD=3,TYPE=15
    mysgw: TSF:MSG:SEND,0-0-100-100,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0101
    mysgw: SGN:PRE:XMT,TO=100
    mysgw: TSF:MSG:READ,100-100-0,s=255,c=3,t=16,pt=0,l=0,sg=0:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: !SGN:NCE:GEN
    mysgw: Client 0: 0;255;3;0;2;

    PS:
    I am on Skype with the same Nick if you want more synchronous communication.

    0 Anticimex 3 Replies
  • Anticimex
    Contest Winner

    @t3chie hm, odd. And you get the validation message twice. I must have messed something up. I'll have a closer look tonight and get back to you. Thanks for helping out!

    0
  • Anticimex
    Contest Winner

    @t3chie I believe I found the issue on my pr. Sloppy coding is all I can say... I will notify you once I have resolved it. In the meantime you can delete your copy of my branch (I tend to force push to my pull requests).

    git checkout development
git branch -D fallberg-signing
    0
  • Anticimex
    Contest Winner

    @t3chie I've pushed updates now. It should resolve the problems. I accidentally excluded the part where the backends are initialized, and there are safeguards against that so it refused to calculate nonces for signing. You should now get a "SGN:INI:BND OK" after "SGN:PER:OK"

    0 t3chie 1 Reply
  • t3chie

    @Anticimex I have checked out the signing branch and recompiled:

    root@automation:/usr/local/src/MySensors# ./bin/mysgw -d
    mysgw: Starting gateway...
    mysgw: Protocol version - 2.2.0-beta
    mysgw: MCO:BGN:INIT GW,CP=RNNG-SQ-,VER=2.2.0-beta
    mysgw: SGN:PER:OK
    mysgw: SGN:INI:BND OK
    mysgw: TSF:LRT:OK
    mysgw: TSM:INIT
    mysgw: TSF:WUR:MS=0
    mysgw: TSM:INIT:TSP OK
    mysgw: TSM:INIT:GW MODE
    mysgw: TSM:READY:ID=0,PAR=0,DIS=0
    mysgw: MCO:REG:NOT NEEDED
    mysgw: Listening for connections on 0.0.0.0:5003
    mysgw: MCO:BGN:STP
    mysgw: MCO:BGN:INIT OK,TSP=1
    mysgw: New connection from 127.0.0.1
    mysgw: Client 0 connected
    mysgw: Client 0 disconnected
    mysgw: Ethernet client disconnected.
    mysgw: New connection from 127.0.0.1
    mysgw: Client 0 connected
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: Client 0: 255;255;3;0;20;
    mysgw: SGN:SKP:MSG CMD=3,TYPE=20
    mysgw: TSF:MSG:SEND,0-0-255-255,s=255,c=3,t=20,pt=0,l=0,sg=0,ft=0,st=OK:
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: TSF:MSG:READ,101-101-255,s=255,c=3,t=7,pt=0,l=0,sg=0:
    mysgw: TSF:MSG:BC
    mysgw: TSF:MSG:FPAR REQ,ID=101
    mysgw: TSF:PNG:SEND,TO=0
    mysgw: TSF:CKU:OK
    mysgw: TSF:MSG:GWL OK
    mysgw: SGN:SKP:MSG CMD=3,TYPE=8
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=8,pt=1,l=1,sg=0,ft=0,st=OK:0
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=3,t=24,pt=1,l=1,sg=0:1
    mysgw: SGN:SKP:MSG CMD=3,TYPE=24
    mysgw: TSF:MSG:PINGED,ID=101,HP=1
    mysgw: SGN:SKP:MSG CMD=3,TYPE=25
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=25,pt=1,l=1,sg=0,ft=0,st=OK:1
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=3,t=15,pt=6,l=2,sg=0:0101
    mysgw: SGN:SKP:MSG CMD=3,TYPE=15
    mysgw: SGN:PRE:SGN REQ,FROM=101
    mysgw: SGN:PRE:SGN REQ,TO=101
    mysgw: SGN:PRE:WHI NREQ,TO=101
    mysgw: SGN:SKP:MSG CMD=3,TYPE=15
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0101
    mysgw: SGN:PRE:XMT,TO=101
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=3,t=16,pt=0,l=0,sg=0:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: SGN:SKP:MSG CMD=3,TYPE=17
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:<NONCE>
    mysgw: SGN:NCE:XMT,TO=0
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=0,t=17,pt=0,l=5,sg=1:2.1.1
    mysgw: SGN:BND:NONCE=BE1E788A73D8B77B73E8222D5A3631E99FC1157CC969C6A324AAAAAAAAAAAAAA
    mysgw: SGN:BND:HMAC=A50A32E714615D7559D01B4A71B86D59160FAD437C1A0A57C1D6A51BC4410E66
    mysgw: SGN:VER:OK
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: SGN:SKP:MSG CMD=3,TYPE=17
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
    mysgw: SGN:NCE:XMT,TO=0
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=3,t=6,pt=1,l=1,sg=1:0
    mysgw: SGN:BND:NONCE=83B9D811BA4341EEDD7D28B1D0ED0841305E58110879203AE2AAAAAAAAAAAAAA
    mysgw: SGN:BND:HMAC=D48A08AA586888933B2EA56857AE12BB353875C726FC8923CFDBE38C888F5EBB
    mysgw: SGN:VER:OK
    mysgw: Client 0: 101;255;3;0;6;M
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
    mysgw: SGN:SGN:NCE REQ,TO=101
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=3,t=17,pt=6,l=25,sg=0:<NONCE>
    mysgw: SGN:SKP:MSG CMD=3,TYPE=17
    mysgw: SGN:NCE:FROM=101
    mysgw: SGN:BND:NONCE=41DDA29AC9224192AD697FA3D433003E60DC319EA8A6014B60AAAAAAAAAAAAAA
    mysgw: SGN:BND:HMAC=86EAC3CDC63F39CF0F333082CF68A66555468D14BBD4AC3E546F8EE773C580C6
    mysgw: SGN:SGN:SGN
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=6,pt=0,l=1,sg=1,ft=0,st=OK:M
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: SGN:SKP:MSG CMD=3,TYPE=17
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
    mysgw: SGN:NCE:XMT,TO=0
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=3,t=11,pt=0,l=14,sg=1:Nano Motion FW
    mysgw: SGN:BND:NONCE=D3676555B4228F26DC34A6B43947B41439156EA5112DC17370AAAAAAAAAAAAAA
    mysgw: SGN:BND:HMAC=EBF256F5C55B9FE8FB5FE9A7FBB22C569D782DB73998661FD66D639049D1E624
    mysgw: SGN:VER:OK
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: SGN:SKP:MSG CMD=3,TYPE=17
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
    mysgw: SGN:NCE:XMT,TO=0
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=3,t=12,pt=0,l=3,sg=1:1.1
    mysgw: SGN:BND:NONCE=08F1450783D33257E28EC8B01E0ECE93A41D2826F3972F99EBAAAAAAAAAAAAAA
    mysgw: SGN:BND:HMAC=33B02115FA75F8E708B50E825853E80D3A70D5F804FB7E27242B357CF043F8D1
    mysgw: SGN:VER:OK
    mysgw: TSF:MSG:READ,101-101-0,s=1,c=3,t=16,pt=0,l=0,sg=1:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: SGN:SKP:MSG CMD=3,TYPE=17
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
    mysgw: SGN:NCE:XMT,TO=0
    mysgw: TSF:MSG:READ,101-101-0,s=1,c=0,t=6,pt=0,l=0,sg=1:
    mysgw: SGN:BND:NONCE=BAD7253134C6C7F0C0B79FFBF41914B2E0AB59DFDAB7874678AAAAAAAAAAAAAA
    mysgw: SGN:BND:HMAC=5BF1F9D417EB97A3C5E7880F18A839EAA464D21FE6A2F7B2D32A3C3431A7A00B
    mysgw: SGN:VER:OK
    mysgw: TSF:MSG:READ,101-101-0,s=2,c=3,t=16,pt=0,l=0,sg=1:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: SGN:SKP:MSG CMD=3,TYPE=17
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
    mysgw: SGN:NCE:XMT,TO=0
    mysgw: TSF:MSG:READ,101-101-0,s=2,c=0,t=7,pt=0,l=0,sg=1:
    mysgw: SGN:BND:NONCE=70410E6BD4E2E3298F348801747889920E2F5779BC0474A7D2AAAAAAAAAAAAAA
    mysgw: SGN:BND:HMAC=8632A9E570D1EEEBF766CC7E25C82CD06EB58F21FC0ED3CECF8FCD8B84473379
    mysgw: SGN:VER:OK
    mysgw: TSF:MSG:READ,101-101-0,s=4,c=3,t=16,pt=0,l=0,sg=1:
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: SGN:SKP:MSG CMD=3,TYPE=17
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
    mysgw: SGN:NCE:XMT,TO=0
    mysgw: TSF:MSG:READ,101-101-0,s=4,c=0,t=1,pt=0,l=0,sg=1:
    mysgw: SGN:BND:NONCE=54C9C968967021485E45AA2047EA666C63062BFCFFDBC19423AAAAAAAAAAAAAA
    mysgw: SGN:BND:HMAC=1397236B072105342EA4CBBBD555B356C2022B8EB64ABBFA637781F6720483A1
    mysgw: SGN:VER:OK
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=3,t=26,pt=1,l=1,sg=1:2
    mysgw: SGN:SKP:MSG CMD=3,TYPE=26
    mysgw: SGN:SKP:MSG CMD=3,TYPE=16
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
    mysgw: SGN:SGN:NCE REQ,TO=101
    mysgw: TSF:MSG:READ,101-101-0,s=255,c=3,t=17,pt=6,l=25,sg=1:<NONCE>
    mysgw: SGN:SKP:MSG CMD=3,TYPE=17
    mysgw: SGN:NCE:FROM=101
    mysgw: SGN:BND:NONCE=D1294AF646074EC7CCD7CD6B02BC4619EF79B0A915648A6A07AAAAAAAAAAAAAA
    mysgw: SGN:BND:HMAC=127FCE6A3EF3FB0906A20BF3128A318801C5167F215ABAF4EEC0A595AFD373FB
    mysgw: SGN:SGN:SGN
    mysgw: TSF:MSG:SEND,0-0-101-101,s=255,c=3,t=27,pt=1,l=1,sg=1,ft=0,st=OK:1
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: Client 0: 0;255;3;0;2;
    mysgw: Client 0: 0;255;3;0;2;

    0 Anticimex 1 Reply
  • Anticimex
    Contest Winner

    @t3chie looks good to me. I cannot see any errors at least 🙂

    0 t3chie 1 Reply
  • t3chie

    @Anticimex Thanks for your help!

    0
  • MasMat

    Hi guys,
    I read this thread because it was the only the search found ("raspberry signing").
    I'm building a gw (the plan is raspberry 3, rf24). Since it's in a populated area, I want signing (my other project is remote, so no real worries there).
    I'm trying to figure out the configuration part for the Raspberry and some of the options:
    -software signing AND rf24 encryption. Two different things, right? I thought I would just use signing if that's adequate.
    -does master branch work or must I use dev? What's the difference in everyday use?
    -I think pin 7 is usefully located (pro mini) and A5 and A6 less convinient, can I use those for the signing?

    Also, is there a guide or a thread for a noob regarding setting this up? If not, should we start a new thread?

    Thanks guys. I like the info here.

    0 Anticimex 1 Reply
  • Anticimex
    Contest Winner

    @MasMat hi, well, ./configure --help should give you a list of configuration options.
    To my knowledge signing on rPi uses no pins as it is software based and uses the Linux random number generator. So Arduino specific pins make no sense on a rPi.
    For Arduino configurations and signing and encryption in general, there is a signing thread on this forum and the first post of that thread links to doxygen documentation that describe the exact details for both the official MySensors version and the beta version.
    See https://forum.mysensors.org/topic/1021/security-introducing-signing-support-to-mysensors

    0 MasMat 1 Reply
  • MasMat

    @Anticimex Whew! Not a light read that thread. Esp for someone noobish like me. Also it has a lot to do with ATSHA and I was thinking I'd do just software signing.

    The pin idea was for the config - to be used for other nodes. Not gw.

    The quick questions: do I have to use dev branch?
    This way I'll be able to get going and see what roadblocks I hit.

    0 Anticimex 1 Reply
  • Anticimex
    Contest Winner

    @MasMat a generic pin config for the nodes depend on whether you use identical nodes, as the pin assignment is hw specific.

    Regarding signing on rPi, try searching the forum. It has been discussed before, and I don't use rPi myself so I don't remember the exact flags, nor do I remember if the full support for signing on rPi made it into the latest release.
    I know a new release is about to come though.

    0
  • MasMat

    Thanks. I'll keep looking then.
    Most likely my nodes will be almost alike, so that's why I'd rather choose a pin that I hardly ever would use (as opposed to default pin 7).

    0
Log in to reply
 

Suggested Topics

  • andriej


    Controllers •  

    33
  • Sergio Rius


    Bug Reports •  

    11
  • berkseo


    Bug Reports •  

    17
  • GaryStofer


    Bug Reports •  

    3
  • ltigges


    Bug Reports •  

    2
  • d-smes


    Bug Reports •  

    9

39
Online

11.4k
Users

11.1k
Topics

112.6k
Posts



Copyright 2019 Sensnology   |   Forum Guidelines   |   Privacy Policy   |   Terms of Service