Skip to content
  • MySensors
  • OpenHardware.io
  • Categories
  • Recent
  • Tags
  • Popular
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo
  1. Home
  2. Development
  3. Wrong instructions on gateway for personalizer?

Wrong instructions on gateway for personalizer?

Scheduled Pinned Locked Moved Development
20 Posts 4 Posters 1.8k Views 4 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S sineverba

    Sorry for title not very clear.

    I have gateway and nodes with version 2.2.0 rc2.

    I set security and signing on it with:

    sudo mysgw --set-soft-hmac-key=CA425435D5765F2A96B97A10B38 && sudo mysgw --set-soft-serial-key=B821E72AB && sudo mysgw --set-aes-key=FC50FB78398514EA
    

    The answer from PI for SOFT HMAC KEY is:

    The next line is intended to be used in SecurityPersonalizer.ino:
    #define MY_SOFT_HMAC_KEY	0XCA,0X42,0X54,0X35,0X5F,0X2A,0XB,0X38
    

    But in security personalizer we have

    #define MY_HMAC_KEY

    And I use exactly this last one. Missing the "soft" from personalizer or wrong PI or am I totally wrong?

    AnticimexA Offline
    AnticimexA Offline
    Anticimex
    Contest Winner
    wrote on last edited by
    #2

    @sineverba it looks to me that you fork several instances of mysgw. Should it not be called once with all the arguments? I am not very involved in the rPi port so I am not sure how arguments to mysgw take effekt. If they are stored in some NVM emulated space or if they are just cashes in runtime, so it might be correct use, but to me it looks really strange from a Linux point of view to call mysgw several times, with one argument every time. @marceloaqno might be able to give the final word on this.

    Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

    S 1 Reply Last reply
    0
    • S sineverba

      Sorry for title not very clear.

      I have gateway and nodes with version 2.2.0 rc2.

      I set security and signing on it with:

      sudo mysgw --set-soft-hmac-key=CA425435D5765F2A96B97A10B38 && sudo mysgw --set-soft-serial-key=B821E72AB && sudo mysgw --set-aes-key=FC50FB78398514EA
      

      The answer from PI for SOFT HMAC KEY is:

      The next line is intended to be used in SecurityPersonalizer.ino:
      #define MY_SOFT_HMAC_KEY	0XCA,0X42,0X54,0X35,0X5F,0X2A,0XB,0X38
      

      But in security personalizer we have

      #define MY_HMAC_KEY

      And I use exactly this last one. Missing the "soft" from personalizer or wrong PI or am I totally wrong?

      AnticimexA Offline
      AnticimexA Offline
      Anticimex
      Contest Winner
      wrote on last edited by
      #3

      @sineverba on the topic on what the mysgw app replies for you to put in the personalizer, yes, it seem they are out of alignment. I am working on refactoring some of the simple password flags and will re-do documentation on those. I will have a look at the rPi keywords at the same time to verify they are in sync.
      Thanks for reporting. If you would like, please report a bug for this on github.

      Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

      1 Reply Last reply
      0
      • AnticimexA Anticimex

        @sineverba it looks to me that you fork several instances of mysgw. Should it not be called once with all the arguments? I am not very involved in the rPi port so I am not sure how arguments to mysgw take effekt. If they are stored in some NVM emulated space or if they are just cashes in runtime, so it might be correct use, but to me it looks really strange from a Linux point of view to call mysgw several times, with one argument every time. @marceloaqno might be able to give the final word on this.

        S Offline
        S Offline
        sineverba
        Hardware Contributor
        wrote on last edited by
        #4

        @anticimex With the "&&" you are basically launch 3 instructions with one row. It is the same thing that you launch first command and press enter. Wait for compute, type 2nd and press enter and so on...

        So, do you confirm they are out of alignment? If yes, I open the bug on github.

        Thank you!

        AnticimexA 1 Reply Last reply
        0
        • S sineverba

          @anticimex With the "&&" you are basically launch 3 instructions with one row. It is the same thing that you launch first command and press enter. Wait for compute, type 2nd and press enter and so on...

          So, do you confirm they are out of alignment? If yes, I open the bug on github.

          Thank you!

          AnticimexA Offline
          AnticimexA Offline
          Anticimex
          Contest Winner
          wrote on last edited by
          #5

          @sineverba right, but I thought mysgw actually started the GW. It does not matter, the issue here is that the output from mysgw suggests changes in the security personalizer which are not there anymore so it needs to be updated. So yes, please report a bug on it.

          Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

          1 Reply Last reply
          0
          • pepsonP Offline
            pepsonP Offline
            pepson
            wrote on last edited by
            #6

            Hi
            Is any place where we can found step by step manual how secure and singin gateway and nodes ? I use radio RFM69HW.

            AnticimexA 1 Reply Last reply
            0
            • pepsonP pepson

              Hi
              Is any place where we can found step by step manual how secure and singin gateway and nodes ? I use radio RFM69HW.

              AnticimexA Offline
              AnticimexA Offline
              Anticimex
              Contest Winner
              wrote on last edited by
              #7

              @pepson https://www.mysensors.org/apidocs/group__MySigninggrpPub.html

              Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

              1 Reply Last reply
              0
              • pepsonP Offline
                pepsonP Offline
                pepson
                wrote on last edited by
                #8

                I found this
                https://forum.mysensors.org/topic/4803/building-a-raspberry-pi-gateway/350

                But how use it on my Gateway on RPi3 with radio RFM69HW ? I think about point number 1... Because --my-rfm69-encryption-enable not reconized......

                AnticimexA gohanG 2 Replies Last reply
                0
                • pepsonP pepson

                  I found this
                  https://forum.mysensors.org/topic/4803/building-a-raspberry-pi-gateway/350

                  But how use it on my Gateway on RPi3 with radio RFM69HW ? I think about point number 1... Because --my-rfm69-encryption-enable not reconized......

                  AnticimexA Offline
                  AnticimexA Offline
                  Anticimex
                  Contest Winner
                  wrote on last edited by
                  #9

                  @pepson you asked about signing? Encryption is a different thing. @marceloaqno?

                  Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                  1 Reply Last reply
                  0
                  • pepsonP Offline
                    pepsonP Offline
                    pepson
                    wrote on last edited by
                    #10

                    But for what is signing and for what is encryption ?

                    AnticimexA 1 Reply Last reply
                    0
                    • pepsonP pepson

                      But for what is signing and for what is encryption ?

                      AnticimexA Offline
                      AnticimexA Offline
                      Anticimex
                      Contest Winner
                      wrote on last edited by
                      #11

                      @pepson Could you rephrase that question please? I don't understand it. Have you read the documentation I linked to?

                      Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                      1 Reply Last reply
                      0
                      • pepsonP pepson

                        I found this
                        https://forum.mysensors.org/topic/4803/building-a-raspberry-pi-gateway/350

                        But how use it on my Gateway on RPi3 with radio RFM69HW ? I think about point number 1... Because --my-rfm69-encryption-enable not reconized......

                        gohanG Offline
                        gohanG Offline
                        gohan
                        Mod
                        wrote on last edited by
                        #12

                        @pepson said in Wrong instructions on gateway for personalizer?:

                        But how use it on my Gateway on RPi3 with radio RFM69HW ? I think about point number 1... Because --my-rfm69-encryption-enable not reconized......

                        You need to uncomment the //#define MY_RFM69_ENABLE_ENCRYPTION in myconfig.h on the RPI and recompile the gw.

                        AnticimexA 2 Replies Last reply
                        0
                        • gohanG gohan

                          @pepson said in Wrong instructions on gateway for personalizer?:

                          But how use it on my Gateway on RPi3 with radio RFM69HW ? I think about point number 1... Because --my-rfm69-encryption-enable not reconized......

                          You need to uncomment the //#define MY_RFM69_ENABLE_ENCRYPTION in myconfig.h on the RPI and recompile the gw.

                          AnticimexA Offline
                          AnticimexA Offline
                          Anticimex
                          Contest Winner
                          wrote on last edited by
                          #13

                          @gohan I suggest you avoid hacking in MyConfig.h. Just define what you need in the sketch prior to including MyConfig.h instead. MyConfig.h provide default values. Most of these are designed to be overridden. That way, you only need to change your ino file and not mess with the library code. If you have multiple sketches using the same library they will inherit anything you hack on the common code (like MyConfig.h) and that is not necessarily what you want.

                          Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                          1 Reply Last reply
                          0
                          • gohanG gohan

                            @pepson said in Wrong instructions on gateway for personalizer?:

                            But how use it on my Gateway on RPi3 with radio RFM69HW ? I think about point number 1... Because --my-rfm69-encryption-enable not reconized......

                            You need to uncomment the //#define MY_RFM69_ENABLE_ENCRYPTION in myconfig.h on the RPI and recompile the gw.

                            AnticimexA Offline
                            AnticimexA Offline
                            Anticimex
                            Contest Winner
                            wrote on last edited by
                            #14

                            @gohan furthermore, for rPi, configuration is handled with the configure tool. Not MyConfig.h.

                            Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                            1 Reply Last reply
                            0
                            • gohanG Offline
                              gohanG Offline
                              gohan
                              Mod
                              wrote on last edited by
                              #15

                              what is then the rfm69 encryption command? I didn't find it and the one I set in myconfig actually does the job.

                              AnticimexA 1 Reply Last reply
                              0
                              • gohanG gohan

                                what is then the rfm69 encryption command? I didn't find it and the one I set in myconfig actually does the job.

                                AnticimexA Offline
                                AnticimexA Offline
                                Anticimex
                                Contest Winner
                                wrote on last edited by Anticimex
                                #16

                                @gohan well, that is indeed strange because the entire feature is not existing (see here: https://github.com/mysensors/MySensors/pull/1054)
                                Please don't give incorrect advice on security topics.
                                Where have you found the flag you mention?

                                Edit: wrong radio and pr, I mean this: https://github.com/mysensors/MySensors/pull/1056

                                Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                                1 Reply Last reply
                                0
                                • gohanG Offline
                                  gohanG Offline
                                  gohan
                                  Mod
                                  wrote on last edited by
                                  #17

                                  On line 753 of myconfig.h

                                  AnticimexA 1 Reply Last reply
                                  0
                                  • gohanG gohan

                                    On line 753 of myconfig.h

                                    AnticimexA Offline
                                    AnticimexA Offline
                                    Anticimex
                                    Contest Winner
                                    wrote on last edited by
                                    #18

                                    @gohan see my edit

                                    Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                                    1 Reply Last reply
                                    0
                                    • gohanG Offline
                                      gohanG Offline
                                      gohan
                                      Mod
                                      wrote on last edited by
                                      #19

                                      I don't understand what you want me to do

                                      AnticimexA 1 Reply Last reply
                                      0
                                      • gohanG gohan

                                        I don't understand what you want me to do

                                        AnticimexA Offline
                                        AnticimexA Offline
                                        Anticimex
                                        Contest Winner
                                        wrote on last edited by
                                        #20

                                        @gohan don't suggest people hack in MyConfig.h because it's the wrong thing to do.

                                        Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                                        1 Reply Last reply
                                        0
                                        Reply
                                        • Reply as topic
                                        Log in to reply
                                        • Oldest to Newest
                                        • Newest to Oldest
                                        • Most Votes


                                        14

                                        Online

                                        11.7k

                                        Users

                                        11.2k

                                        Topics

                                        113.1k

                                        Posts


                                        Copyright 2025 TBD   |   Forum Guidelines   |   Privacy Policy   |   Terms of Service
                                        • Login

                                        • Don't have an account? Register

                                        • Login or register to search.
                                        • First post
                                          Last post
                                        0
                                        • MySensors
                                        • OpenHardware.io
                                        • Categories
                                        • Recent
                                        • Tags
                                        • Popular