Skip to content
  • MySensors
  • OpenHardware.io
  • Categories
  • Recent
  • Tags
  • Popular
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo
  1. Home
  2. Development
  3. Wrong instructions on gateway for personalizer?

Wrong instructions on gateway for personalizer?

Scheduled Pinned Locked Moved Development
20 Posts 4 Posters 1.8k Views 4 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S sineverba

    Sorry for title not very clear.

    I have gateway and nodes with version 2.2.0 rc2.

    I set security and signing on it with:

    sudo mysgw --set-soft-hmac-key=CA425435D5765F2A96B97A10B38 && sudo mysgw --set-soft-serial-key=B821E72AB && sudo mysgw --set-aes-key=FC50FB78398514EA
    

    The answer from PI for SOFT HMAC KEY is:

    The next line is intended to be used in SecurityPersonalizer.ino:
    #define MY_SOFT_HMAC_KEY	0XCA,0X42,0X54,0X35,0X5F,0X2A,0XB,0X38
    

    But in security personalizer we have

    #define MY_HMAC_KEY

    And I use exactly this last one. Missing the "soft" from personalizer or wrong PI or am I totally wrong?

    AnticimexA Offline
    AnticimexA Offline
    Anticimex
    Contest Winner
    wrote on last edited by
    #3

    @sineverba on the topic on what the mysgw app replies for you to put in the personalizer, yes, it seem they are out of alignment. I am working on refactoring some of the simple password flags and will re-do documentation on those. I will have a look at the rPi keywords at the same time to verify they are in sync.
    Thanks for reporting. If you would like, please report a bug for this on github.

    Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

    1 Reply Last reply
    0
    • AnticimexA Anticimex

      @sineverba it looks to me that you fork several instances of mysgw. Should it not be called once with all the arguments? I am not very involved in the rPi port so I am not sure how arguments to mysgw take effekt. If they are stored in some NVM emulated space or if they are just cashes in runtime, so it might be correct use, but to me it looks really strange from a Linux point of view to call mysgw several times, with one argument every time. @marceloaqno might be able to give the final word on this.

      S Offline
      S Offline
      sineverba
      Hardware Contributor
      wrote on last edited by
      #4

      @anticimex With the "&&" you are basically launch 3 instructions with one row. It is the same thing that you launch first command and press enter. Wait for compute, type 2nd and press enter and so on...

      So, do you confirm they are out of alignment? If yes, I open the bug on github.

      Thank you!

      AnticimexA 1 Reply Last reply
      0
      • S sineverba

        @anticimex With the "&&" you are basically launch 3 instructions with one row. It is the same thing that you launch first command and press enter. Wait for compute, type 2nd and press enter and so on...

        So, do you confirm they are out of alignment? If yes, I open the bug on github.

        Thank you!

        AnticimexA Offline
        AnticimexA Offline
        Anticimex
        Contest Winner
        wrote on last edited by
        #5

        @sineverba right, but I thought mysgw actually started the GW. It does not matter, the issue here is that the output from mysgw suggests changes in the security personalizer which are not there anymore so it needs to be updated. So yes, please report a bug on it.

        Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

        1 Reply Last reply
        0
        • pepsonP Offline
          pepsonP Offline
          pepson
          wrote on last edited by
          #6

          Hi
          Is any place where we can found step by step manual how secure and singin gateway and nodes ? I use radio RFM69HW.

          AnticimexA 1 Reply Last reply
          0
          • pepsonP pepson

            Hi
            Is any place where we can found step by step manual how secure and singin gateway and nodes ? I use radio RFM69HW.

            AnticimexA Offline
            AnticimexA Offline
            Anticimex
            Contest Winner
            wrote on last edited by
            #7

            @pepson https://www.mysensors.org/apidocs/group__MySigninggrpPub.html

            Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

            1 Reply Last reply
            0
            • pepsonP Offline
              pepsonP Offline
              pepson
              wrote on last edited by
              #8

              I found this
              https://forum.mysensors.org/topic/4803/building-a-raspberry-pi-gateway/350

              But how use it on my Gateway on RPi3 with radio RFM69HW ? I think about point number 1... Because --my-rfm69-encryption-enable not reconized......

              AnticimexA gohanG 2 Replies Last reply
              0
              • pepsonP pepson

                I found this
                https://forum.mysensors.org/topic/4803/building-a-raspberry-pi-gateway/350

                But how use it on my Gateway on RPi3 with radio RFM69HW ? I think about point number 1... Because --my-rfm69-encryption-enable not reconized......

                AnticimexA Offline
                AnticimexA Offline
                Anticimex
                Contest Winner
                wrote on last edited by
                #9

                @pepson you asked about signing? Encryption is a different thing. @marceloaqno?

                Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                1 Reply Last reply
                0
                • pepsonP Offline
                  pepsonP Offline
                  pepson
                  wrote on last edited by
                  #10

                  But for what is signing and for what is encryption ?

                  AnticimexA 1 Reply Last reply
                  0
                  • pepsonP pepson

                    But for what is signing and for what is encryption ?

                    AnticimexA Offline
                    AnticimexA Offline
                    Anticimex
                    Contest Winner
                    wrote on last edited by
                    #11

                    @pepson Could you rephrase that question please? I don't understand it. Have you read the documentation I linked to?

                    Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                    1 Reply Last reply
                    0
                    • pepsonP pepson

                      I found this
                      https://forum.mysensors.org/topic/4803/building-a-raspberry-pi-gateway/350

                      But how use it on my Gateway on RPi3 with radio RFM69HW ? I think about point number 1... Because --my-rfm69-encryption-enable not reconized......

                      gohanG Offline
                      gohanG Offline
                      gohan
                      Mod
                      wrote on last edited by
                      #12

                      @pepson said in Wrong instructions on gateway for personalizer?:

                      But how use it on my Gateway on RPi3 with radio RFM69HW ? I think about point number 1... Because --my-rfm69-encryption-enable not reconized......

                      You need to uncomment the //#define MY_RFM69_ENABLE_ENCRYPTION in myconfig.h on the RPI and recompile the gw.

                      AnticimexA 2 Replies Last reply
                      0
                      • gohanG gohan

                        @pepson said in Wrong instructions on gateway for personalizer?:

                        But how use it on my Gateway on RPi3 with radio RFM69HW ? I think about point number 1... Because --my-rfm69-encryption-enable not reconized......

                        You need to uncomment the //#define MY_RFM69_ENABLE_ENCRYPTION in myconfig.h on the RPI and recompile the gw.

                        AnticimexA Offline
                        AnticimexA Offline
                        Anticimex
                        Contest Winner
                        wrote on last edited by
                        #13

                        @gohan I suggest you avoid hacking in MyConfig.h. Just define what you need in the sketch prior to including MyConfig.h instead. MyConfig.h provide default values. Most of these are designed to be overridden. That way, you only need to change your ino file and not mess with the library code. If you have multiple sketches using the same library they will inherit anything you hack on the common code (like MyConfig.h) and that is not necessarily what you want.

                        Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                        1 Reply Last reply
                        0
                        • gohanG gohan

                          @pepson said in Wrong instructions on gateway for personalizer?:

                          But how use it on my Gateway on RPi3 with radio RFM69HW ? I think about point number 1... Because --my-rfm69-encryption-enable not reconized......

                          You need to uncomment the //#define MY_RFM69_ENABLE_ENCRYPTION in myconfig.h on the RPI and recompile the gw.

                          AnticimexA Offline
                          AnticimexA Offline
                          Anticimex
                          Contest Winner
                          wrote on last edited by
                          #14

                          @gohan furthermore, for rPi, configuration is handled with the configure tool. Not MyConfig.h.

                          Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                          1 Reply Last reply
                          0
                          • gohanG Offline
                            gohanG Offline
                            gohan
                            Mod
                            wrote on last edited by
                            #15

                            what is then the rfm69 encryption command? I didn't find it and the one I set in myconfig actually does the job.

                            AnticimexA 1 Reply Last reply
                            0
                            • gohanG gohan

                              what is then the rfm69 encryption command? I didn't find it and the one I set in myconfig actually does the job.

                              AnticimexA Offline
                              AnticimexA Offline
                              Anticimex
                              Contest Winner
                              wrote on last edited by Anticimex
                              #16

                              @gohan well, that is indeed strange because the entire feature is not existing (see here: https://github.com/mysensors/MySensors/pull/1054)
                              Please don't give incorrect advice on security topics.
                              Where have you found the flag you mention?

                              Edit: wrong radio and pr, I mean this: https://github.com/mysensors/MySensors/pull/1056

                              Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                              1 Reply Last reply
                              0
                              • gohanG Offline
                                gohanG Offline
                                gohan
                                Mod
                                wrote on last edited by
                                #17

                                On line 753 of myconfig.h

                                AnticimexA 1 Reply Last reply
                                0
                                • gohanG gohan

                                  On line 753 of myconfig.h

                                  AnticimexA Offline
                                  AnticimexA Offline
                                  Anticimex
                                  Contest Winner
                                  wrote on last edited by
                                  #18

                                  @gohan see my edit

                                  Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                                  1 Reply Last reply
                                  0
                                  • gohanG Offline
                                    gohanG Offline
                                    gohan
                                    Mod
                                    wrote on last edited by
                                    #19

                                    I don't understand what you want me to do

                                    AnticimexA 1 Reply Last reply
                                    0
                                    • gohanG gohan

                                      I don't understand what you want me to do

                                      AnticimexA Offline
                                      AnticimexA Offline
                                      Anticimex
                                      Contest Winner
                                      wrote on last edited by
                                      #20

                                      @gohan don't suggest people hack in MyConfig.h because it's the wrong thing to do.

                                      Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

                                      1 Reply Last reply
                                      0
                                      Reply
                                      • Reply as topic
                                      Log in to reply
                                      • Oldest to Newest
                                      • Newest to Oldest
                                      • Most Votes


                                      14

                                      Online

                                      11.7k

                                      Users

                                      11.2k

                                      Topics

                                      113.1k

                                      Posts


                                      Copyright 2025 TBD   |   Forum Guidelines   |   Privacy Policy   |   Terms of Service
                                      • Login

                                      • Don't have an account? Register

                                      • Login or register to search.
                                      • First post
                                        Last post
                                      0
                                      • MySensors
                                      • OpenHardware.io
                                      • Categories
                                      • Recent
                                      • Tags
                                      • Popular