Whitelist not wirking from sensor to gateway

Anticimex

@karelsmits
Your configuration looks good, but I cannot see that the debug output fits what is supposed to be printed for version 2.1.1.
Are you sure your library is in a clean state?
When I look on github for version 2.1.1, I would expect more whitelisting related debug prints.

I also cannot find the "0103" message in the gateway log which should inform it that the node require whitelisting.
The node has received it from the GW I can see though.
So it could be that the node knows about the GWs preference, but the GW does not know that the node also require whitelisting.

The node got configured here:

5184 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0103
5258 Waiting for GW to send signing preferences...
5602 TSF:MSG:READ,0-0-1,s=255,c=3,t=15,pt=6,l=2,sg=0:0103
5662 Skipping security for command 3 type 15
5709 Mark node 0 as one that require signed messages
5765 Mark node 0 as one that require whitelisting

But I don't see anything like that in the GW log. So my guess is that the GW does not salt the signatures properly according to the nodes expectations. So the node fails to verify the messages, while the GW knows that the node will salt the signatures, so it will be able to verify messages from the node.

Could you try to reset the GW and then the node, and see if the node manages to inform the GW properly?

karelsmits

I redid the code, by downloading the latest edition of mysensors (2.1.1 - Latest Release). Here is the error log from the gateway.

Gateway:
0;255;3;0;9;MCO:BGN:INIT GW,CP=RNNGAS-,VER=2.1.1
0;255;3;0;9;TSM:INIT
0;255;3;0;9;TSF:WUR:MS=0
0;255;3;0;9;TSM:INIT:TSP OK
0;255;3;0;9;TSM:INIT:GW MODE
0;255;3;0;9;TSM:READY:ID=0,PAR=0,DIS=0
0;255;3;0;9;MCO:REG:NOT NEEDED
IP: 192.168.0.249
0;255;3;0;9;MCO:BGN:STP
0;255;3;0;9;MCO:BGN:INIT OK,TSP=1
0;255;3;0;9;TSF:MSG:READ,1-1-255,s=255,c=3,t=7,pt=0,l=0,sg=0:
0;255;3;0;9;TSF:MSG:BC
0;255;3;0;9;TSF:MSG:FPAR REQ,ID=1
0;255;3;0;9;TSF:PNG:SEND,TO=0
0;255;3;0;9;TSF:CKU:OK
0;255;3;0;9;TSF:MSG:GWL OK
0;255;3;0;9;Skipping security for command 3 type 8
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=8,pt=1,l=1,sg=0,ft=0,st=OK:0
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=24,pt=1,l=1,sg=0:1
0;255;3;0;9;Skipping security for command 3 type 24
0;255;3;0;9;TSF:MSG:PINGED,ID=1,HP=1
0;255;3;0;9;Skipping security for command 3 type 25
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=25,pt=1,l=1,sg=0,ft=0,st=OK:1
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=15,pt=6,l=2,sg=0:0103
0;255;3;0;9;Skipping security for command 3 type 15
0;255;3;0;9;Mark node 1 as one that require signed messages
0;255;3;0;9;Mark node 1 as one that require whitelisting
0;255;3;0;9;Informing node 1 that we require signatures
0;255;3;0;9;Informing node 1 that we require whitelisting
0;255;3;0;9;Skipping security for command 3 type 15
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0103
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=0:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: 635ADD8607ED079B85C15D6CEF0303ECFD6389962B963EAA0500000000000000
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:635ADD8607ED079B85C15D6CEF0303ECFD6389962B963EAA05
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=0,t=17,pt=0,l=5,sg=1:2.1.1
0;255;3;0;9;Signature in message: 01779AE68396C7000C2AA6302F0DE89070F7D8CB
0;255;3;0;9;Message to process: 01002E0011FF322E312E31
0;255;3;0;9;Current nonce: 635ADD8607ED079B85C15D6CEF0303ECFD6389962B963EAA05AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 2A6B189942AC438855B0FFF007580356C85AAED0C6C2331AA2EBD96AD8D694E5
0;255;3;0;9;SHA256: D159F7F5DD1FE7912ADCC2C67AF7B0B01363C49A04F4CCF3E91E9D8DB5938E01
0;255;3;0;9;Signature bad: 0159F7F5DD1FE7912ADCC2C67AF7B0B01363C49A
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: 701A70E84569482F1E26A0C65DCC936B8248FD88168E723095AAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:701A70E84569482F1E26A0C65DCC936B8248FD88168E723095
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=6,pt=1,l=1,sg=1:0
0;255;3;0;9;Signature in message: 01C9468DBD954A8DC8C7D38B144FD1303CAFD01EB84F3CB6
0;255;3;0;9;Message to process: 01000E2306FF00
0;255;3;0;9;Current nonce: 701A70E84569482F1E26A0C65DCC936B8248FD88168E723095AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 337DDA1FA458CE0BFBCE84CB2531D23A3D7E34AAD2AE87EE090B1DF04DA5B7FA
0;255;3;0;9;SHA256: 5F0BE66667527FF2C4639DE12B6BC39F8D99C00AF30C785D676246CF86FF6046
0;255;3;0;9;Signature bad: 010BE66667527FF2C4639DE12B6BC39F8D99C00AF30C785D
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: CD1F75695EDE349716A2C0939011673583E68955F1226D2845AAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:CD1F75695EDE349716A2C0939011673583E68955F1226D2845
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=11,pt=0,l=14,sg=1:Relay & Button
0;255;3;0;9;Signature in message: 01A2AB3419826F0361B5E6
0;255;3;0;9;Message to process: 010076030BFF52656C6179202620427574746F6E
0;255;3;0;9;Current nonce: CD1F75695EDE349716A2C0939011673583E68955F1226D2845AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 8F08FA3DF87C992BD66F382D912B862536EB79750BE8B7DF2699330FA6204251
0;255;3;0;9;SHA256: 5A123CB37F6CA6D015B6E61D48E1F2F64E3BA890FE614B4C92AE3972B28FE061
0;255;3;0;9;Signature bad: 01123CB37F6CA6D015B6E6
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: 4AA750027BA8D55571FEAB998D9EAA50C11D040628125C3AD3AAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:4AA750027BA8D55571FEAB998D9EAA50C11D040628125C3AD3
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=12,pt=0,l=3,sg=1:1.0
0;255;3;0;9;Signature in message: 0186E4183F7C79D8E810E7B3F1ACBDA258FFEDBF7BFB
0;255;3;0;9;Message to process: 01001E030CFF312E30
0;255;3;0;9;Current nonce: 4AA750027BA8D55571FEAB998D9EAA50C11D040628125C3AD3AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 16142EF6048B9BD4FFB7541F38E250DB3569FDC548E476933255B579668769BE
0;255;3;0;9;SHA256: DB85915DF555538FA84F4F6BF810FC646C2E94B1F0333862ED67F0DC8559A921
0;255;3;0;9;Signature bad: 0185915DF555538FA84F4F6BF810FC646C2E94B1F033
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=5,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: 591F249BF6AA89AFADCF3213B362C2011D78F009E371E2893CAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:591F249BF6AA89AFADCF3213B362C2011D78F009E371E2893C
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=5,c=0,t=3,pt=0,l=0,sg=1:
0;255;3;0;9;Signature in message: 012F3F8F18555E4872180C9A3F6BB69FCBCB520B13A9A5E0BF
0;255;3;0;9;Message to process: 010006000305
0;255;3;0;9;Current nonce: 591F249BF6AA89AFADCF3213B362C2011D78F009E371E2893CAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: AE537B78F59F3BBF57CE197D7233315CD924DC04470F86A4CC92D57184E546D7
0;255;3;0;9;SHA256: 893FCC47C0EBD7EB457456F5498DB1DA0FE7C70B706AABE6D7E94CDA3477B291
0;255;3;0;9;Signature bad: 013FCC47C0EBD7EB457456F5498DB1DA0FE7C70B706AABE6D7
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: E8D883F495AF21515C912E25659740392A47E35A433FDD99E7AAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:E8D883F495AF21515C912E25659740392A47E35A433FDD99E7
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=11,pt=0,l=22,sg=1:TemperatureAndHumidity
0;255;3;0;9;Signature in message: 013680
0;255;3;0;9;Message to process: 0100B6030BFF54656D7065726174757265416E6448756D6964697479
0;255;3;0;9;Current nonce: E8D883F495AF21515C912E25659740392A47E35A433FDD99E7AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 58D0F9A87240B44F6A67C4282BCD28E1D7AD181EE0FB916A56AE931117FBAC43
0;255;3;0;9;SHA256: E6E566363EF09FABD3DA06B632F95B620AE6DFA620BF14254D8A534C05BFE05D
0;255;3;0;9;Signature bad: 01E566
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: 73E9D69B277B1E0BEB5ECAD5CD86DB4B249995508431170B0EAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:73E9D69B277B1E0BEB5ECAD5CD86DB4B249995508431170B0E
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=12,pt=0,l=3,sg=1:1.1
0;255;3;0;9;Signature in message: 0194F9156C1D1CAB891F415C60278725B2A030DC3600
0;255;3;0;9;Message to process: 01001E030CFF312E31
0;255;3;0;9;Current nonce: 73E9D69B277B1E0BEB5ECAD5CD86DB4B249995508431170B0EAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: F2A05E6320CB0143CDD25C862489C3E3B711E654FCDBE93DAC77E5D2226441B3
0;255;3;0;9;SHA256: 6EE086304E95BD00371FAC38825EB122C680B7A4CA6D1CA29C6F7E2D1D0D82A1
0;255;3;0;9;Signature bad: 01E086304E95BD00371FAC38825EB122C680B7A4CA6D
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=0,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: 233BAC8C23F612E195F353CDDA4DC2372C87BC608E6D676878AAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:233BAC8C23F612E195F353CDDA4DC2372C87BC608E6D676878
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=0,c=0,t=7,pt=0,l=0,sg=1:
0;255;3;0;9;Signature in message: 01046A6A668F9A4DA69DE94708162812A50ED241CB9395113B
0;255;3;0;9;Message to process: 010006000700
0;255;3;0;9;Current nonce: 233BAC8C23F612E195F353CDDA4DC2372C87BC608E6D676878AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: A131C90326E31F93B59455FD2152AD491C530667AF46B36BDA9300EFA5EEFD7B
0;255;3;0;9;SHA256: 3BB11EB543513CAA63FDE1D695D4B575B613FA091680AA6769E88A12ABDEC903
0;255;3;0;9;Signature bad: 01B11EB543513CAA63FDE1D695D4B575B613FA091680AA6769
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: 64191BC91B3DE6C290B9E7E1F67800BDB8E974E2EC2C036316AAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:64191BC91B3DE6C290B9E7E1F67800BDB8E974E2EC2C036316
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=0,t=6,pt=0,l=0,sg=1:
0;255;3;0;9;Signature in message: 01D710CFA4D8A468B30FA3BADDD985A6152FD3AE3A32385FCA
0;255;3;0;9;Message to process: 010006000601
0;255;3;0;9;Current nonce: 64191BC91B3DE6C290B9E7E1F67800BDB8E974E2EC2C036316AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 42A9625E80384D4A2F6F2DFF26C67CF8EC53C15AD1F34FF2C5BFE920E907E7A2
0;255;3;0;9;SHA256: 6B5B67E9826562660840EB12BD25592DD94020FDB19DAD0F7C131833FC2EB761
0;255;3;0;9;Signature bad: 015B67E9826562660840EB12BD25592DD94020FDB19DAD0F7C
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=26,pt=1,l=1,sg=1:2
0;255;3;0;9;Skipping security for command 3 type 26
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
0;255;3;0;9;Nonce requested from 1. Waiting...
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=17,pt=6,l=25,sg=0:58D7A7CB82C6F505B3DFA9FDBF9B5F4FA37EC9DD24E8678C97
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;Nonce received from 1.
0;255;3;0;9;Proceeding with signing...
0;255;3;0;9;Message to process: 00010E231BFF01
0;255;3;0;9;Current nonce: 58D7A7CB82C6F505B3DFA9FDBF9B5F4FA37EC9DD24E8678C97AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: B37650AA6C8D0E1B5FAE0707F73A27DA692350D7B2B28E8BD28BF20BF5F29BEF
0;255;3;0;9;SHA256: 49DFDE1EDF6520D9E631ED9273E6078024CB044F6B0DF64AB50F528E8D94A1CA
0;255;3;0;9;Signature in message: 01DFDE1EDF6520D9E631ED9273E6078024CB044F6B0DF64A
0;255;3;0;9;Message signed
0;255;3;0;9;Message to send has been signed
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=27,pt=1,l=1,sg=1,ft=0,st=OK:1
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: 9D2BDD2FACC4709213B5B111A55C8CBEED0E413492D0DD1CDBAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:9D2BDD2FACC4709213B5B111A55C8CBEED0E413492D0DD1CDB
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=1,t=0,pt=7,l=5,sg=1:21.0
0;255;3;0;9;Signature in message: 01E0544023E531C09CFE802850439D34997E85E0
0;255;3;0;9;Message to process: 01002EE100010000A84101
0;255;3;0;9;Current nonce: 9D2BDD2FACC4709213B5B111A55C8CBEED0E413492D0DD1CDBAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 776B37A0659B82546BA948FDD1677DD044FC3280D03AAE99F3B014CEB3A77A3F
0;255;3;0;9;SHA256: 8303F1968F614D18BD23169B7334857E04A586C0520489061280682A86CF73EC
0;255;3;0;9;Signature bad: 0103F1968F614D18BD23169B7334857E04A586C0
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=0,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: A58B01866F7DBF6E248DF75227EB49FBA430BFC144DFB85D4FAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:A58B01866F7DBF6E248DF75227EB49FBA430BFC144DFB85D4F
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=0,c=1,t=1,pt=7,l=5,sg=1:49.0
0;255;3;0;9;Signature in message: 0148A1408041EBB978E098504E6342E2D09DA2F9
0;255;3;0;9;Message to process: 01002EE101000000444201
0;255;3;0;9;Current nonce: A58B01866F7DBF6E248DF75227EB49FBA430BFC144DFB85D4FAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 2E879E98A64074D1C89CCC1391553D6216D59A01B0C8ADBD05D550ED3494C295
0;255;3;0;9;SHA256: 166860778F1647E299AAF08F1521297128246EEA22A9148D2B8E44F940B7CC3D
0;255;3;0;9;Signature bad: 016860778F1647E299AAF08F1521297128246EEA
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL

Sensor node:
0 MCO:BGN:INIT NODE,CP=RNNNAS-,VER=2.1.1
3 MCO:BGN:BFR
5 TSM:INIT
6 TSF:WUR:MS=0
12 TSM:INIT:TSP OK
14 TSM:INIT:STATID=1
16 TSF:SID:OK,ID=1
18 TSM:FPAR
19 Will not sign message for destination 255 as it does not require it
60 TSF:MSG:SEND,1-1-255-255,s=255,c=3,t=7,pt=0,l=0,sg=0,ft=0,st=OK:
531 TSF:MSG:READ,0-0-1,s=255,c=3,t=8,pt=1,l=1,sg=0:0
536 Skipping security for command 3 type 8
539 TSF:MSG:FPAR OK,ID=0,D=1
2067 TSM:FPAR:OK
2068 TSM:ID
2069 TSM:ID:OK
2071 TSM:UPL
2072 Skipping security for command 3 type 24
2078 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=24,pt=1,l=1,sg=0,ft=0,st=OK:1
2097 TSF:MSG:READ,0-0-1,s=255,c=3,t=25,pt=1,l=1,sg=0:1
2102 Skipping security for command 3 type 25
2106 TSF:MSG:PONG RECV,HP=1
2108 TSM:UPL:OK
2110 TSM:READY:ID=1,PAR=0,DIS=1
2113 Signing required
2115 Whitelisting required
2117 Skipping security for command 3 type 15
2123 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0103
2129 Waiting for GW to send signing preferences...
2159 TSF:MSG:READ,0-0-1,s=255,c=3,t=15,pt=6,l=2,sg=0:0103
2164 Skipping security for command 3 type 15
2168 Mark node 0 as one that require signed messages
2173 Mark node 0 as one that require whitelisting
2178 Skipping security for command 3 type 16
2184 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
2190 Nonce requested from 0. Waiting...
2222 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=0:635ADD8607ED079B85C15D6CEF0303ECFD6389962B963EAA05
2231 Skipping security for command 3 type 17
2235 Nonce received from 0.
2238 Proceeding with signing...
Message to process: 01002E0011FF322E312E31
Current nonce: 635ADD8607ED079B85C15D6CEF0303ECFD6389962B963EAA05AAAAAAAAAAAAAA
HMAC: D2C5F779BE860E0BFB66A0F619BACB0B88B9104197DC43FAE0BB91D6F771130E
SHA256: 67779AE68396C7000C2AA6302F0DE89070F7D8CB0DE16284892E168E2B02DDA0
Signature in message: 01779AE68396C7000C2AA6302F0DE89070F7D8CB
2344 Message signed
2352 Message to send has been signed
2357 TSF:MSG:SEND,1-1-0-0,s=255,c=0,t=17,pt=0,l=5,sg=1,ft=0,st=OK:2.1.1
2364 Skipping security for command 3 type 16
2370 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
2376 Nonce requested from 0. Waiting...
2529 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:701A70E84569482F1E26A0C65DCC936B8248FD88168E723095
2538 Skipping security for command 3 type 17
2542 Nonce received from 0.
2545 Proceeding with signing...
Message to process: 01000E2306FF00
Current nonce: 701A70E84569482F1E26A0C65DCC936B8248FD88168E723095AAAAAAAAAAAAAA
HMAC: F0E805F26B0CD17B8282B3DBD98EA50BC4BD7AD5C3B946FF540FDE606ABFA34A
SHA256: 74C9468DBD954A8DC8C7D38B144FD1303CAFD01EB84F3CB6306C4EA3F90D6394
Signature in message: 01C9468DBD954A8DC8C7D38B144FD1303CAFD01EB84F3CB6
2652 Message signed
2659 Message to send has been signed
2665 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=6,pt=1,l=1,sg=1,ft=0,st=OK:0
4671 Skipping security for command 3 type 16
4677 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
4683 Nonce requested from 0. Waiting...
4715 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:CD1F75695EDE349716A2C0939011673583E68955F1226D2845
4725 Skipping security for command 3 type 17
4729 Nonce received from 0.
4731 Proceeding with signing...
Message to process: 010076030BFF52656C6179202620427574746F6E
Current nonce: CD1F75695EDE349716A2C0939011673583E68955F1226D2845AAAAAAAAAAAAAA
HMAC: 0C37B5A3CE49E63747A7298EA8733A27FD8AA4F52FCB188CFC92D9A77881B77F
SHA256: 73A2AB3419826F0361B5E66936FC2F94E0C436E9CB6D61F1C7FA57C8A79A276A
Signature in message: 01A2AB3419826F0361B5E6
4838 Message signed
4845 Message to send has been signed
4851 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=11,pt=0,l=14,sg=1,ft=0,st=OK:Relay & Button
4858 Skipping security for command 3 type 16
4866 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
4872 Nonce requested from 0. Waiting...
5022 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:4AA750027BA8D55571FEAB998D9EAA50C11D040628125C3AD3
5031 Skipping security for command 3 type 17
5036 Nonce received from 0.
5039 Proceeding with signing...
Message to process: 01001E030CFF312E30
Current nonce: 4AA750027BA8D55571FEAB998D9EAA50C11D040628125C3AD3AAAAAAAAAAAAAA
HMAC: 143B7FA1E433427A97AF9085B47418088349385FD64B8A461E99A2FDB2E642A2
SHA256: 3586E4183F7C79D8E810E7B3F1ACBDA258FFEDBF7BFB3CB9B1EAD8A645AF87F2
Signature in message: 0186E4183F7C79D8E810E7B3F1ACBDA258FFEDBF7BFB
5145 Message signed
5152 Message to send has been signed
5158 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=12,pt=0,l=3,sg=1,ft=0,st=OK:1.0
5165 Skipping security for command 3 type 16
5171 TSF:MSG:SEND,1-1-0-0,s=5,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
5177 Nonce requested from 0. Waiting...
5329 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:591F249BF6AA89AFADCF3213B362C2011D78F009E371E2893C
5340 Skipping security for command 3 type 17
5344 Nonce received from 0.
5346 Proceeding with signing...
Message to process: 010006000305
Current nonce: 591F249BF6AA89AFADCF3213B362C2011D78F009E371E2893CAAAAAAAAAAAAAA
HMAC: E73D1E22383313729323B1295ADC66501F0840E4E3AD43BA755D5B556EF6608F
SHA256: 7C2F3F8F18555E4872180C9A3F6BB69FCBCB520B13A9A5E0BF5B8FE4353203C4
Signature in message: 012F3F8F18555E4872180C9A3F6BB69FCBCB520B13A9A5E0BF
5452 Message signed
5459 Message to send has been signed
5466 TSF:MSG:SEND,1-1-0-0,s=5,c=0,t=3,pt=0,l=0,sg=1,ft=0,st=OK:
5472 Skipping security for command 3 type 16
5478 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
5484 Nonce requested from 0. Waiting...
5638 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:E8D883F495AF21515C912E25659740392A47E35A433FDD99E7
5647 Skipping security for command 3 type 17
5651 Nonce received from 0.
5654 Proceeding with signing...
Message to process: 0100B6030BFF54656D7065726174757265416E6448756D6964697479
Current nonce: E8D883F495AF21515C912E25659740392A47E35A433FDD99E7AAAAAAAAAAAAAA
HMAC: 784C2D238D4B5C2233FC45251847A638A292EC4E308BC93A95055DEE5BC5FC14
SHA256: 4136807B84DBF7CF7ABBCCD1CAC78E289FB39E060B699D7A6B10C9C5831994FF
Signature in message: 013680
5761 Message signed
5768 Message to send has been signed
5774 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=11,pt=0,l=22,sg=1,ft=0,st=OK:TemperatureAndHumidity
5782 Skipping security for command 3 type 16
5788 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
5794 Nonce requested from 0. Waiting...
5947 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:73E9D69B277B1E0BEB5ECAD5CD86DB4B249995508431170B0E
5956 Skipping security for command 3 type 17
5960 Nonce received from 0.
5962 Proceeding with signing...
Message to process: 01001E030CFF312E31
Current nonce: 73E9D69B277B1E0BEB5ECAD5CD86DB4B249995508431170B0EAAAAAAAAAAAAAA
HMAC: 378FEA52C9235CADF20041F6ED4FA21FB5FFFAF7B2E104ECD111049D3643B7CD
SHA256: 7494F9156C1D1CAB891F415C60278725B2A030DC3600A2FEDC44E1CB88EE05B6
Signature in message: 0194F9156C1D1CAB891F415C60278725B2A030DC3600
6069 Message signed
6077 Message to send has been signed
6082 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=12,pt=0,l=3,sg=1,ft=0,st=OK:1.1
6089 Skipping security for command 3 type 16
6095 TSF:MSG:SEND,1-1-0-0,s=0,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
6102 Nonce requested from 0. Waiting...
6254 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:233BAC8C23F612E195F353CDDA4DC2372C87BC608E6D676878
6263 Skipping security for command 3 type 17
6267 Nonce received from 0.
6270 Proceeding with signing...
Message to process: 010006000700
Current nonce: 233BAC8C23F612E195F353CDDA4DC2372C87BC608E6D676878AAAAAAAAAAAAAA
HMAC: 65B760FEACE7F3773A162428F31841D7133E7E74E57FB0E4C58F5370EAC2C899
SHA256: 16046A6A668F9A4DA69DE94708162812A50ED241CB9395113BCF2AAFAA8F9F6A
Signature in message: 01046A6A668F9A4DA69DE94708162812A50ED241CB9395113B
6377 Message signed
6384 Message to send has been signed
6390 TSF:MSG:SEND,1-1-0-0,s=0,c=0,t=7,pt=0,l=0,sg=1,ft=0,st=OK:
6395 Skipping security for command 3 type 16
6403 TSF:MSG:SEND,1-1-0-0,s=1,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
6409 Nonce requested from 0. Waiting...
6561 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:64191BC91B3DE6C290B9E7E1F67800BDB8E974E2EC2C036316
6572 Skipping security for command 3 type 17
6576 Nonce received from 0.
6578 Proceeding with signing...
Message to process: 010006000601
Current nonce: 64191BC91B3DE6C290B9E7E1F67800BDB8E974E2EC2C036316AAAAAAAAAAAAAA
HMAC: 9D76E2E5E11AF40E3663096488DBC4C8DF685497CA8C5071A472AC5E3F1F08E0
SHA256: F4D710CFA4D8A468B30FA3BADDD985A6152FD3AE3A32385FCA5BC0698FF98FB3
Signature in message: 01D710CFA4D8A468B30FA3BADDD985A6152FD3AE3A32385FCA
6684 Message signed
6691 Message to send has been signed
6697 TSF:MSG:SEND,1-1-0-0,s=1,c=0,t=6,pt=0,l=0,sg=1,ft=0,st=OK:
6704 MCO:REG:REQ
6705 Skipping security for command 3 type 26
6712 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=26,pt=1,l=1,sg=1,ft=0,st=OK:2
6846 TSF:MSG:READ,0-0-1,s=255,c=3,t=16,pt=0,l=0,sg=0:
6851 Skipping security for command 3 type 16
SHA256: 58D7A7CB82C6F505B3DFA9FDBF9B5F4FA37EC9DD24E8678C9700000000000000
6871 Skipping security for command 3 type 17
6883 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:58D7A7CB82C6F505B3DFA9FDBF9B5F4FA37EC9DD24E8678C97
6893 Transmitted nonce
7026 TSF:MSG:READ,0-0-1,s=255,c=3,t=27,pt=1,l=1,sg=1:1
Signature in message: 01DFDE1EDF6520D9E631ED9273E6078024CB044F6B0DF64A
Message to process: 00010E231BFF01
Current nonce: 58D7A7CB82C6F505B3DFA9FDBF9B5F4FA37EC9DD24E8678C97AAAAAAAAAAAAAA
HMAC: C571E596B10436BEE9D0B919A8291506AAA575DF35440AD067A955F3DD59DC59
SHA256: 8093DAB94D88CD2E779CB207C957276B474CD6D58877337A1F0E06412D098E05
Signature bad: 0193DAB94D88CD2E779CB207C957276B474CD6D58877337A
7141 Signature verification failed!
7149 !TSF:MSG:SIGN VERIFY FAIL
7152 MCO:BGN:STP
7154 MCO:SLP:MS=1000,SMS=0,I1=255,M1=255,I2=255,M2=255
7159 MCO:SLP:TPD
7161 MCO:SLP:WUP=-1
7163 MCO:BGN:INIT OK,TSP=1
7187 Skipping security for command 3 type 16
7194 TSF:MSG:SEND,1-1-0-0,s=1,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
7200 Nonce requested from 0. Waiting...
7232 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:9D2BDD2FACC4709213B5B111A55C8CBEED0E413492D0DD1CDB
7241 Skipping security for command 3 type 17
7245 Nonce received from 0.
7248 Proceeding with signing...
Message to process: 01002EE100010000A84101
Current nonce: 9D2BDD2FACC4709213B5B111A55C8CBEED0E413492D0DD1CDBAAAAAAAAAAAAAA
HMAC: 13318A49861D23D2F161DC7CD30045236A29E6ABEACA8CBAB536D8C489354A94
SHA256: 64E0544023E531C09CFE802850439D34997E85E0549E73CD10AABAC2F5DBDA1E
Signature in message: 01E0544023E531C09CFE802850439D34997E85E0
7355 Message signed
7362 Message to send has been signed
7368 TSF:MSG:SEND,1-1-0-0,s=1,c=1,t=0,pt=7,l=5,sg=1,ft=0,st=OK:21.0
T: 21.00
7374 Skipping security for command 3 type 16
7382 TSF:MSG:SEND,1-1-0-0,s=0,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
7388 Nonce requested from 0. Waiting...
7539 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:A58B01866F7DBF6E248DF75227EB49FBA430BFC144DFB85D4F
7548 Skipping security for command 3 type 17
7553 Nonce received from 0.
7556 Proceeding with signing...
Message to process: 01002EE101000000444201
Current nonce: A58B01866F7DBF6E248DF75227EB49FBA430BFC144DFB85D4FAAAAAAAAAAAAAA
HMAC: 999CC7109C1EABF2BE1E0EBE8E70AC2814D4A797C5D4B2EFEAECAEB0F312394A
SHA256: FB48A1408041EBB978E098504E6342E2D09DA2F9C08E87D8C930344A6261C640
Signature in message: 0148A1408041EBB978E098504E6342E2D09DA2F9
7662 Message signed
7669 Message to send has been signed
7675 TSF:MSG:SEND,1-1-0-0,s=0,c=1,t=1,pt=7,l=5,sg=1,ft=0,st=OK:49.0
H: 49.00
7682 MCO:SLP:MS=60000,SMS=0,I1=255,M1=255,I2=255,M2=255
7687 MCO:SLP:TPD

Could it be that the serial doesn’t match? Even though I copy/pasted the output from SecurityPersonalizer.ino, meaning it maybe did’t save into the EEPROM?

Thanks!

Anticimex

@karelsmits it is very odd. I would expect the log mention whitelisting information. Yet there is nothing in the messages concerning signing that indicate it tries to find a entry or that it does not find an entry. It simply looks like the backend has not realized whitelisting is activated. Still, it communicate the requirements properly.
If you look at the backends (MySigningAtsha204Soft.cpp) there are some conditional behaviour there with is activated if a whitelist is defined.

karelsmits

What would be my options?
Do you by any chance have a sample gateway and a node (both with whitelisting) that I could compare my code with, to see where it has gone wrong.

And also what about how I verify the EEPROM serial-info.

Thank you in advance.

Anticimex

@karelsmits I don't have something from the master branch. But I have verified that the beta (development branch) works with whitelisting. The personalizer dumps the eeprom contents and from the logs you posted above I verified that the contents match the configuration.
Could you try to add some additional prints in the back end to verify it actually executes the whitelisting logic? If I look at github there should be prints that I can't find in your logs. So I suspect the whitelisting management is not fully working, but I am pretty sure it has been verified in the latest release.
You are sure you run a vanilla release without local modifications?

karelsmits

Okay here is the gateway code:

/**
 * The MySensors Arduino library handles the wireless radio link and protocol
 * between your home built sensors/actuators and HA controller of choice.
 * The sensors forms a self healing radio network with optional repeaters. Each
 * repeater and gateway builds a routing tables in EEPROM which keeps track of the
 * network topology allowing messages to be routed to nodes.
 *
 * Created by Henrik Ekblad <henrik.ekblad@mysensors.org>
 * Copyright (C) 2013-2015 Sensnology AB
 * Full contributor list: https://github.com/mysensors/Arduino/graphs/contributors
 *
 * Documentation: http://www.mysensors.org
 * Support Forum: http://forum.mysensors.org
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * version 2 as published by the Free Software Foundation.
 *
 *******************************
 *
 * REVISION HISTORY
 * Version 1.0 - Henrik EKblad
 * Contribution by a-lurker and Anticimex,
 * Contribution by Norbert Truchsess <norbert.truchsess@t-online.de>
 * Contribution by Tomas Hozza <thozza@gmail.com>
 *
 *
 * DESCRIPTION
 * The EthernetGateway sends data received from sensors to the ethernet link.
 * The gateway also accepts input on ethernet interface, which is then sent out to the radio network.
 *
 * The GW code is designed for Arduino 328p / 16MHz.  ATmega168 does not have enough memory to run this program.
 *
 * LED purposes:
 * - To use the feature, uncomment MY_DEFAULT_xxx_LED_PIN in the sketch below
 * - RX (green) - blink fast on radio message recieved. In inclusion mode will blink fast only on presentation recieved
 * - TX (yellow) - blink fast on radio message transmitted. In inclusion mode will blink slowly
 * - ERR (red) - fast blink on error during transmission error or recieve crc error
 *
 * See http://www.mysensors.org/build/ethernet_gateway for wiring instructions.
 *
 */

// Enable debug prints to serial monitor
#define MY_DEBUG
#define MY_DEBUG_VERBOSE_SIGNING

// Enable and select radio type attached
#define MY_RADIO_NRF24
//#define MY_RADIO_RFM69

// Enable gateway ethernet module type
#define MY_GATEWAY_W5100

// W5100 Ethernet module SPI enable (optional if using a shield/module that manages SPI_EN signal)
//#define MY_W5100_SPI_EN 4

// Enable Soft SPI for NRF radio (note different radio wiring is required)
// The W5100 ethernet module seems to have a hard time co-operate with
// radio on the same spi bus.
#if !defined(MY_W5100_SPI_EN) && !defined(ARDUINO_ARCH_SAMD)
#define MY_SOFTSPI
#define MY_SOFT_SPI_SCK_PIN 14
#define MY_SOFT_SPI_MISO_PIN 16
#define MY_SOFT_SPI_MOSI_PIN 15
#endif

// When W5100 is connected we have to move CE/CSN pins for NRF radio
#ifndef MY_RF24_CE_PIN
#define MY_RF24_CE_PIN 5
#endif
#ifndef MY_RF24_CS_PIN
#define MY_RF24_CS_PIN 6
#endif

// Enable to UDP
//#define MY_USE_UDP

#define MY_IP_ADDRESS 192,168,0,249   // If this is disabled, DHCP is used to retrieve address
// Renewal period if using DHCP
//#define MY_IP_RENEWAL_INTERVAL 60000
// The port to keep open on node server mode / or port to contact in client mode
#define MY_PORT 5487

// Controller ip address. Enables client mode (default is "server" mode).
// Also enable this if MY_USE_UDP is used and you want sensor data sent somewhere.
//#define MY_CONTROLLER_IP_ADDRESS 192, 168, 178, 254

// The MAC address can be anything you want but should be unique on your network.
// Newer boards have a MAC address printed on the underside of the PCB, which you can (optionally) use.
// Note that most of the Ardunio examples use  "DEAD BEEF FEED" for the MAC address.
//#define MY_MAC_ADDRESS 0xDE, 0xAD, 0xBE, 0xEF, 0xFE, 0xED

// Enable inclusion mode
#define MY_INCLUSION_MODE_FEATURE
// Enable Inclusion mode button on gateway
//#define MY_INCLUSION_BUTTON_FEATURE
// Set inclusion mode duration (in seconds)
#define MY_INCLUSION_MODE_DURATION 60
// Digital pin used for inclusion mode button
//#define MY_INCLUSION_MODE_BUTTON_PIN  3

// Set blinking period
#define MY_DEFAULT_LED_BLINK_PERIOD 300

// Flash leds on rx/tx/err
// Uncomment to override default HW configurations
#define MY_DEFAULT_ERR_LED_PIN 7  // Error led pin
#define MY_DEFAULT_RX_LED_PIN  8  // Receive led pin
#define MY_DEFAULT_TX_LED_PIN  9  // Transmit led pin


#if defined(MY_USE_UDP)
#include <EthernetUdp.h>
#endif
#include <Ethernet.h>
#include <MySensors.h>

//===============

// Select soft/hardware signing method
#define MY_SIGNING_SOFT //!< Software signing
//#define MY_SIGNING_ATSHA204 //!< Hardware signing using ATSHA204A

// Enable node whitelisting
#define MY_SIGNING_NODE_WHITELISTING {{.nodeId = 1,.serial = {0xA0,0xB1,0x71,0xFA,0xC5,0x62,0x96,0xF1,0xD8}}} // for sensor

//#define MY_SIGNING_NODE_WHITELISTING {{{.nodeId = GATEWAY_ADDRESS,.serial = {0x4E,0xD3,0xAD,0x93,0xC6,0xF2,0xC6,0xF3,0x25}},{.nodeId = 2,.serial = {0xDC,0x1E,0x7F,0x20,0x62,0x2F,0xD3,0x04,0x29}}}

// Enable this if you want destination node to sign all messages sent to this node.
#define MY_SIGNING_REQUEST_SIGNATURES

/**
 * @def MY_SIGNING_GW_REQUEST_SIGNATURES_FROM_ALL
 * @brief Enable this to have gateway require all nodes in the network to sign messages sent to it. @ref MY_SIGNING_REQUEST_SIGNATURES must also be set.
 *
 * Use this for maximum security, but be aware that every single node will have to be personalized before they can be used.
 * Note that if this is enabled, and whitelisting is also enabled, whitelisting will also be in effect for all nodes.
 */
#define MY_SIGNING_GW_REQUEST_SIGNATURES_FROM_ALL


// SETTINGS FOR MY_SIGNING_SOFT
#define MY_SIGNING_SOFT_RANDOMSEED_PIN 7 //!< Unconnected analog pin for random seed


//===========================

void setup()
{
}

void loop()
{
}

Here is the Sensor-node code:

/**
 * The MySensors Arduino library handles the wireless radio link and protocol
 * between your home built sensors/actuators and HA controller of choice.
 * The sensors forms a self healing radio network with optional repeaters. Each
 * repeater and gateway builds a routing tables in EEPROM which keeps track of the
 * network topology allowing messages to be routed to nodes.
 *
 * Created by Henrik Ekblad <henrik.ekblad@mysensors.org>
 * Copyright (C) 2013-2015 Sensnology AB
 * Full contributor list: https://github.com/mysensors/Arduino/graphs/contributors
 *
 * Documentation: http://www.mysensors.org
 * Support Forum: http://forum.mysensors.org
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * version 2 as published by the Free Software Foundation.
 *
 *******************************
 *
 * REVISION HISTORY
 * Version 1.0: Henrik EKblad
 * Version 1.1 - 2016-07-20: Converted to MySensors v2.0 and added various improvements - Torben Woltjen (mozzbozz)
 * 
 * DESCRIPTION
 * This sketch provides an example of how to implement a humidity/temperature
 * sensor using a DHT11/DHT-22.
 *  
 * For more information, please visit:
 * http://www.mysensors.org/build/humidity
 * 
 */

// Enable debug prints
#define MY_DEBUG
#define MY_DEBUG_VERBOSE_SIGNING

// Enable and select radio type attached 
#define MY_RADIO_NRF24
//#define MY_RADIO_RFM69
//#define MY_RS485

#include <SPI.h>
#include <MySensors.h>  
#include <DHT.h>

// Set this to the pin you connected the DHT's data pin to
#define DHT_DATA_PIN 3

// Set this offset if the sensor has a permanent small offset to the real temperatures
#define SENSOR_TEMP_OFFSET 0

// Sleep time between sensor updates (in milliseconds)
// Must be >1000ms for DHT22 and >2000ms for DHT11
static const uint64_t UPDATE_INTERVAL = 60000;

// Force sending an update of the temperature after n sensor reads, so a controller showing the
// timestamp of the last update doesn't show something like 3 hours in the unlikely case, that
// the value didn't change since;
// i.e. the sensor would force sending an update every UPDATE_INTERVAL*FORCE_UPDATE_N_READS [ms]
static const uint8_t FORCE_UPDATE_N_READS = 10;

#define CHILD_ID_HUM 0
#define CHILD_ID_TEMP 1


//===============

#define MY_NODE_ID 1


// Select soft/hardware signing method
#define MY_SIGNING_SOFT //!< Software signing
//#define MY_SIGNING_ATSHA204 //!< Hardware signing using ATSHA204A

// Enable node whitelisting
#define MY_SIGNING_NODE_WHITELISTING {{.nodeId = GATEWAY_ADDRESS,.serial = {0xA0,0xB1,0x71,0xFA,0xC5,0x62,0x96,0xF1,0xD9}}} // for gateway


// Enable this if you want destination node to sign all messages sent to this node.
#define MY_SIGNING_REQUEST_SIGNATURES

/**
 * @def MY_SIGNING_GW_REQUEST_SIGNATURES_FROM_ALL
 * @brief Enable this to have gateway require all nodes in the network to sign messages sent to it. @ref MY_SIGNING_REQUEST_SIGNATURES must also be set.
 *
 * Use this for maximum security, but be aware that every single node will have to be personalized before they can be used.
 * Note that if this is enabled, and whitelisting is also enabled, whitelisting will also be in effect for all nodes.
 */
#define MY_SIGNING_GW_REQUEST_SIGNATURES_FROM_ALL


// SETTINGS FOR MY_SIGNING_SOFT
#define MY_SIGNING_SOFT_RANDOMSEED_PIN 7 //!< Unconnected analog pin for random seed


//===========================



float lastTemp;
float lastHum;
uint8_t nNoUpdatesTemp;
uint8_t nNoUpdatesHum;
bool metric = true;

MyMessage msgHum(CHILD_ID_HUM, V_HUM);
MyMessage msgTemp(CHILD_ID_TEMP, V_TEMP);
DHT dht;


void presentation()  
{ 
  // Send the sketch version information to the gateway
  sendSketchInfo("TemperatureAndHumidity", "1.1");

  // Register all sensors to gw (they will be created as child devices)
  present(CHILD_ID_HUM, S_HUM);
  present(CHILD_ID_TEMP, S_TEMP);

  metric = getControllerConfig().isMetric;
}


void setup()
{
  dht.setup(DHT_DATA_PIN); // set data pin of DHT sensor
  if (UPDATE_INTERVAL <= dht.getMinimumSamplingPeriod()) {
    Serial.println("Warning: UPDATE_INTERVAL is smaller than supported by the sensor!");
  }
  // Sleep for the time of the minimum sampling period to give the sensor time to power up
  // (otherwise, timeout errors might occure for the first reading)
  sleep(dht.getMinimumSamplingPeriod());
}


void loop()      
{  
  // Force reading sensor, so it works also after sleep()
  dht.readSensor(true);

  // Get temperature from DHT library
  float temperature = dht.getTemperature();
  if (isnan(temperature)) {
    Serial.println("Failed reading temperature from DHT!");
  } else if (temperature != lastTemp || nNoUpdatesTemp == FORCE_UPDATE_N_READS) {
    // Only send temperature if it changed since the last measurement or if we didn't send an update for n times
    lastTemp = temperature;
    if (!metric) {
      temperature = dht.toFahrenheit(temperature);
    }
    // Reset no updates counter
    nNoUpdatesTemp = 0;
    temperature += SENSOR_TEMP_OFFSET;
    send(msgTemp.set(temperature, 1));

    #ifdef MY_DEBUG
    Serial.print("T: ");
    Serial.println(temperature);
    #endif
  } else {
    // Increase no update counter if the temperature stayed the same
    nNoUpdatesTemp++;
  }

  // Get humidity from DHT library
  float humidity = dht.getHumidity();
  if (isnan(humidity)) {
    Serial.println("Failed reading humidity from DHT");
  } else if (humidity != lastHum || nNoUpdatesHum == FORCE_UPDATE_N_READS) {
    // Only send humidity if it changed since the last measurement or if we didn't send an update for n times
    lastHum = humidity;
    // Reset no updates counter
    nNoUpdatesHum = 0;
    send(msgHum.set(humidity, 1));

    #ifdef MY_DEBUG
    Serial.print("H: ");
    Serial.println(humidity);
    #endif
  } else {
    // Increase no update counter if the humidity stayed the same
    nNoUpdatesHum++;
  }

  // Sleep for a while to save energy
  sleep(UPDATE_INTERVAL); 
}

And here is the signing code at MyConfig.h:

#define MY_SIGNING_NODE_WHITELISTING {{.nodeId = GATEWAY_ADDRESS,.serial = {0xA0,0xB1,0x71,0xFA,0xC5,0x62,0x96,0xF1,0xD9}},{.nodeId = 1,.serial = {0xA0,0xB1,0x71,0xFA,0xC5,0x62,0x96,0xF1,0xD8}}}

/**
 * @def MY_SIGNING_ATSHA204_PIN
 * @brief Atsha204 default pin setting
 *
 * Pin where ATSHA204 is attached
 */
#ifndef MY_SIGNING_ATSHA204_PIN
#define MY_SIGNING_ATSHA204_PIN 17
#endif

/**
 * @def MY_SIGNING_SOFT_RANDOMSEED_PIN
 * @brief Pin used for random generation in soft signing
 *
 * Do not connect anything to this when soft signing is enabled
 */
#ifndef MY_SIGNING_SOFT_RANDOMSEED_PIN
#define MY_SIGNING_SOFT_RANDOMSEED_PIN 7
#endif

And this is pretty much Vanilla, as you can see.
Thanks for your help!

Anticimex

@karelsmits I am not talking about your sketch, I am talking about the MySensors library.

karelsmits

what files in the library do you mean?

Anticimex

@karelsmits the one I mentioned above.
However, I do notice one important thing here; you have made changes to MyConfig.h. You should not enable the flags for signing and whitelisting in that file. You do that in your sketch. If you have defined them in two places, you don't know which setting is used. Revert the signing settings you tweaked in MyConfig.h and use the settings in your sketches (the GW and the node).

karelsmits

Thank you so much for your help so far, especially the myconfig.h file that it should not be modified regarding signing.
Now I have the following error:

Gateway:
0;255;3;0;9;MCO:BGN:INIT GW,CP=RNNGAS-,VER=2.1.1
0;255;3;0;9;TSM:INIT
0;255;3;0;9;TSF:WUR:MS=0
0;255;3;0;9;TSM:INIT:TSP OK
0;255;3;0;9;TSM:INIT:GW MODE
0;255;3;0;9;TSM:READY:ID=0,PAR=0,DIS=0
0;255;3;0;9;MCO:REG:NOT NEEDED
IP: 192.168.0.249
0;255;3;0;9;MCO:BGN:STP
0;255;3;0;9;MCO:BGN:INIT OK,TSP=1
0;255;3;0;9;TSF:MSG:READ,1-1-255,s=255,c=3,t=7,pt=0,l=0,sg=0:
0;255;3;0;9;TSF:MSG:BC
0;255;3;0;9;TSF:MSG:FPAR REQ,ID=1
0;255;3;0;9;TSF:PNG:SEND,TO=0
0;255;3;0;9;TSF:CKU:OK
0;255;3;0;9;TSF:MSG:GWL OK
0;255;3;0;9;Will not sign message for destination 1 as it does not require it
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=8,pt=1,l=1,sg=0,ft=0,st=OK:0
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=24,pt=1,l=1,sg=0:1
0;255;3;0;9;TSF:MSG:PINGED,ID=1,HP=1
0;255;3;0;9;Will not sign message for destination 1 as it does not require it
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=25,pt=1,l=1,sg=0,ft=0,st=OK:1
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=15,pt=6,l=2,sg=0:0101
0;255;3;0;9;Mark node 1 as one that require signed messages
0;255;3;0;9;Mark node 1 as one that do not require whitelisting
0;255;3;0;9;Informing node 1 that we require signatures
0;255;3;0;9;Informing node 1 that we do not require whitelisting
0;255;3;0;9;Skipping security for command 3 type 15
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0101
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=0:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: FA0CEF05B11135F19B646D3FA36FE1BCFCC8DAC1A3773BDC7900000000000000
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:FA0CEF05B11135F19B646D3FA36FE1BCFCC8DAC1A3773BDC79
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=0,t=18,pt=0,l=5,sg=1:2.1.1
0;255;3;0;9;Signature in message: 01EDFE67C83BA7ADD4B868950DA55ADF92E74C2D
0;255;3;0;9;Message to process: 01002E0012FF322E312E31
0;255;3;0;9;Current nonce: FA0CEF05B11135F19B646D3FA36FE1BCFCC8DAC1A3773BDC79AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 41EDFE67C83BA7ADD4B868950DA55ADF92E74C2D89903167166C396470C02F3E
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: D92FBB57AB79BCCC3E9452F7E4B876FFFBC7FE47C2AD0613C8AAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:D92FBB57AB79BCCC3E9452F7E4B876FFFBC7FE47C2AD0613C8
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=6,pt=1,l=1,sg=1:0
0;255;3;0;9;Signature in message: 01815088794CC5704C5790821D82DFD0435B5A47B4FBC14C
0;255;3;0;9;Message to process: 01000E2306FF00
0;255;3;0;9;Current nonce: D92FBB57AB79BCCC3E9452F7E4B876FFFBC7FE47C2AD0613C8AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 1D815088794CC5704C5790821D82DFD0435B5A47B4FBC14C745AA2B639D4D9DA
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: E38FE6554A3AE6D02B91B69EE2B67602506D8308DB5D4EAF3EAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:E38FE6554A3AE6D02B91B69EE2B67602506D8308DB5D4EAF3E
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=11,pt=0,l=5,sg=1:Relay
0;255;3;0;9;Signature in message: 01E3BCEFCF2F06C922BD6D487BBA7E67C9B717BC
0;255;3;0;9;Message to process: 01002E030BFF52656C6179
0;255;3;0;9;Current nonce: E38FE6554A3AE6D02B91B69EE2B67602506D8308DB5D4EAF3EAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 4BE3BCEFCF2F06C922BD6D487BBA7E67C9B717BCF2852083854E7555620473AD
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: 2385BA03A156C8D203085EE05B480A4819CC88E82D9BA6209FAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:2385BA03A156C8D203085EE05B480A4819CC88E82D9BA6209F
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=12,pt=0,l=3,sg=1:1.0
0;255;3;0;9;Signature in message: 01DDCD53799743889B645AC6524B32B4AEB4B71E368C
0;255;3;0;9;Message to process: 01001E030CFF312E30
0;255;3;0;9;Current nonce: 2385BA03A156C8D203085EE05B480A4819CC88E82D9BA6209FAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: F3DDCD53799743889B645AC6524B32B4AEB4B71E368CCE2BE60CC00E0AD2D183
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: F1048244D308662147413A8531A71EF5C5E241710A859D7562AAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:F1048244D308662147413A8531A71EF5C5E241710A859D7562
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=0,t=3,pt=0,l=0,sg=1:
0;255;3;0;9;Signature in message: 01E5C5B659AF41CC4B5C9315F94E1A22E2DF10FAD361061CB3
0;255;3;0;9;Message to process: 010006000301
0;255;3;0;9;Current nonce: F1048244D308662147413A8531A71EF5C5E241710A859D7562AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 4EE5C5B659AF41CC4B5C9315F94E1A22E2DF10FAD361061CB3DB7925952BFDAE
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: 24D0165B9B9152F2003597B3747DC61B9C67C595A1518C31BDAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:24D0165B9B9152F2003597B3747DC61B9C67C595A1518C31BD
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=11,pt=0,l=22,sg=1:TemperatureAndHumidity
0;255;3;0;9;Signature in message: 013E8E
0;255;3;0;9;Message to process: 0100B6030BFF54656D7065726174757265416E6448756D6964697479
0;255;3;0;9;Current nonce: 24D0165B9B9152F2003597B3747DC61B9C67C595A1518C31BDAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 513E8E942127E5E2D512CE288F2B7E6418B8809F69B8B1EAE20D97A4407F9C86
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: F95653815901C8FACA219583E9C6FEA53596238E460528DA6AAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:F95653815901C8FACA219583E9C6FEA53596238E460528DA6A
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=12,pt=0,l=3,sg=1:1.1
0;255;3;0;9;Signature in message: 01FD4A335914B1FA7065E23D2B0C98FFB67E06B582AA
0;255;3;0;9;Message to process: 01001E030CFF312E31
0;255;3;0;9;Current nonce: F95653815901C8FACA219583E9C6FEA53596238E460528DA6AAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 22FD4A335914B1FA7065E23D2B0C98FFB67E06B582AA0C8B3865B44CE9E1D49E
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=0,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: D356C66B145EA4E7DCF69EC5B3C20E38D6046C50A4FEACE71BAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:D356C66B145EA4E7DCF69EC5B3C20E38D6046C50A4FEACE71B
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=0,c=0,t=7,pt=0,l=0,sg=1:
0;255;3;0;9;Signature in message: 01E7923AA716F2CE850EB4A27962F15BF36941D559BA1DCF45
0;255;3;0;9;Message to process: 010006000700
0;255;3;0;9;Current nonce: D356C66B145EA4E7DCF69EC5B3C20E38D6046C50A4FEACE71BAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: F4E7923AA716F2CE850EB4A27962F15BF36941D559BA1DCF45C1821C7AD8E479
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: E4DDE1558F406F93C24ACC4978B5DAD078700CB3E898D665BBAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:E4DDE1558F406F93C24ACC4978B5DAD078700CB3E898D665BB
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=0,t=6,pt=0,l=0,sg=1:
0;255;3;0;9;Signature in message: 01D9D7F016D4900614542F96199D1C1848E66826E164117C3F
0;255;3;0;9;Message to process: 010006000601
0;255;3;0;9;Current nonce: E4DDE1558F406F93C24ACC4978B5DAD078700CB3E898D665BBAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 17D9D7F016D4900614542F96199D1C1848E66826E164117C3F91395B119DB817
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=26,pt=1,l=1,sg=1:2
0;255;3;0;9;Skipping security for command 3 type 26
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
0;255;3;0;9;Nonce requested from 1. Waiting...
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=17,pt=6,l=25,sg=0:70A5921ABD527FBF58E2644ACAC3EB9D7D190A1ECFA2B45BB4
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;Nonce received from 1.
0;255;3;0;9;Proceeding with signing...
0;255;3;0;9;Message to process: 00010E231BFF01
0;255;3;0;9;Current nonce: 70A5921ABD527FBF58E2644ACAC3EB9D7D190A1ECFA2B45BB4AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 417F60D164B7EF1EE9F5664945AEE360F44F196E52428D274230D8D0DB830028
0;255;3;0;9;Signature in message: 017F60D164B7EF1EE9F5664945AEE360F44F196E52428D27
0;255;3;0;9;Message signed
0;255;3;0;9;Message to send has been signed
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=27,pt=1,l=1,sg=1,ft=0,st=OK:1
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: B946C285F3F5F9204731209AF33E759FF1F604EADDAC89BE1CAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:B946C285F3F5F9204731209AF33E759FF1F604EADDAC89BE1C
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=1,t=0,pt=7,l=5,sg=1:24.0
0;255;3;0;9;Signature in message: 01E74C2A504B304F48E28201FBB2B85E10BD50EB
0;255;3;0;9;Message to process: 01002EE100010000C04101
0;255;3;0;9;Current nonce: B946C285F3F5F9204731209AF33E759FF1F604EADDAC89BE1CAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 69EB3E1CFCF0B6629300837110B152CA8F7A0E2D53A4C8BFEBE4903F1B090864
0;255;3;0;9;Signature bad: 01EB3E1CFCF0B6629300837110B152CA8F7A0E2D
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=0,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: AC6CB618B3BB07F385D25228E62B753BF888DA6351087FD39DAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:AC6CB618B3BB07F385D25228E62B753BF888DA6351087FD39D
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=0,c=1,t=1,pt=7,l=5,sg=1:46.0
0;255;3;0;9;Signature in message: 0151796D338A1717D7B544C78054CBE9E39D901D
0;255;3;0;9;Message to process: 01002EE101000000384201
0;255;3;0;9;Current nonce: AC6CB618B3BB07F385D25228E62B753BF888DA6351087FD39DAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: A54694E7B219D7065CFD2D3C449350372739185EAC6EE5376C0E10561344CB12
0;255;3;0;9;Signature bad: 014694E7B219D7065CFD2D3C449350372739185E
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL

Node:
0 MCO:BGN:INIT REPEATER,CP=RNNRAS-,VER=2.1.1
3 MCO:BGN:BFR
5 TSM:INIT
6 TSF:WUR:MS=0
13 TSM:INIT:TSP OK
15 TSF:SID:OK,ID=1
16 TSM:FPAR
17 Will not sign message for destination 255 as it does not require it
59 TSF:MSG:SEND,1-1-255-255,s=255,c=3,t=7,pt=0,l=0,sg=0,ft=0,st=OK:
203 TSF:MSG:READ,0-0-1,s=255,c=3,t=8,pt=1,l=1,sg=0:0
207 Skipping security for command 3 type 8
211 TSF:MSG:FPAR OK,ID=0,D=1
2066 TSM:FPAR:OK
2067 TSM:ID
2068 TSM:ID:OK
2070 TSM:UPL
2071 Will not sign message for destination 0 as it does not require it
2079 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=24,pt=1,l=1,sg=0,ft=0,st=OK:1
2096 TSF:MSG:READ,0-0-1,s=255,c=3,t=25,pt=1,l=1,sg=0:1
2101 Skipping security for command 3 type 25
2105 TSF:MSG:PONG RECV,HP=1
2107 TSM:UPL:OK
2109 TSM:READY:ID=1,PAR=0,DIS=1
2112 Signing required
2114 Will not sign message for destination 0 as it does not require it
2121 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0101
2128 Waiting for GW to send signing preferences...
2158 TSF:MSG:READ,0-0-1,s=255,c=3,t=15,pt=6,l=2,sg=0:0101
2163 Skipping security for command 3 type 15
2167 Mark node 0 as one that require signed messages
2171 Mark node 0 as one that do not require whitelisting
2181 Skipping security for command 3 type 16
2186 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
2192 Nonce requested from 0. Waiting...
2225 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=0:FA0CEF05B11135F19B646D3FA36FE1BCFCC8DAC1A3773BDC79
2234 Skipping security for command 3 type 17
2238 Nonce received from 0.
2240 Proceeding with signing...
Message to process: 01002E0012FF322E312E31
Current nonce: FA0CEF05B11135F19B646D3FA36FE1BCFCC8DAC1A3773BDC79AAAAAAAAAAAAAA
HMAC: 41EDFE67C83BA7ADD4B868950DA55ADF92E74C2D89903167166C396470C02F3E
Signature in message: 01EDFE67C83BA7ADD4B868950DA55ADF92E74C2D
2334 Message signed
2341 Message to send has been signed
2348 TSF:MSG:SEND,1-1-0-0,s=255,c=0,t=18,pt=0,l=5,sg=1,ft=0,st=OK:2.1.1
2354 Skipping security for command 3 type 16
2361 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
2367 Nonce requested from 0. Waiting...
2492 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:D92FBB57AB79BCCC3E9452F7E4B876FFFBC7FE47C2AD0613C8
2501 Skipping security for command 3 type 17
2505 Nonce received from 0.
2508 Proceeding with signing...
Message to process: 01000E2306FF00
Current nonce: D92FBB57AB79BCCC3E9452F7E4B876FFFBC7FE47C2AD0613C8AAAAAAAAAAAAAA
HMAC: 1D815088794CC5704C5790821D82DFD0435B5A47B4FBC14C745AA2B639D4D9DA
Signature in message: 01815088794CC5704C5790821D82DFD0435B5A47B4FBC14C
2601 Message signed
2609 Message to send has been signed
2615 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=6,pt=1,l=1,sg=1,ft=0,st=OK:0
4621 Skipping security for command 3 type 16
4627 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
4633 Nonce requested from 0. Waiting...
4665 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:E38FE6554A3AE6D02B91B69EE2B67602506D8308DB5D4EAF3E
4675 Skipping security for command 3 type 17
4679 Nonce received from 0.
4681 Proceeding with signing...
Message to process: 01002E030BFF52656C6179
Current nonce: E38FE6554A3AE6D02B91B69EE2B67602506D8308DB5D4EAF3EAAAAAAAAAAAAAA
HMAC: 4BE3BCEFCF2F06C922BD6D487BBA7E67C9B717BCF2852083854E7555620473AD
Signature in message: 01E3BCEFCF2F06C922BD6D487BBA7E67C9B717BC
4775 Message signed
4783 Message to send has been signed
4789 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=11,pt=0,l=5,sg=1,ft=0,st=OK:Relay
4795 Skipping security for command 3 type 16
4802 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
4808 Nonce requested from 0. Waiting...
4933 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:2385BA03A156C8D203085EE05B480A4819CC88E82D9BA6209F
4942 Skipping security for command 3 type 17
4946 Nonce received from 0.
4950 Proceeding with signing...
Message to process: 01001E030CFF312E30
Current nonce: 2385BA03A156C8D203085EE05B480A4819CC88E82D9BA6209FAAAAAAAAAAAAAA
HMAC: F3DDCD53799743889B645AC6524B32B4AEB4B71E368CCE2BE60CC00E0AD2D183
Signature in message: 01DDCD53799743889B645AC6524B32B4AEB4B71E368C
5043 Message signed
5050 Message to send has been signed
5056 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=12,pt=0,l=3,sg=1,ft=0,st=OK:1.0
5062 Skipping security for command 3 type 16
5069 TSF:MSG:SEND,1-1-0-0,s=1,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
5075 Nonce requested from 0. Waiting...
5200 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:F1048244D308662147413A8531A71EF5C5E241710A859D7562
5210 Skipping security for command 3 type 17
5214 Nonce received from 0.
5217 Proceeding with signing...
Message to process: 010006000301
Current nonce: F1048244D308662147413A8531A71EF5C5E241710A859D7562AAAAAAAAAAAAAA
HMAC: 4EE5C5B659AF41CC4B5C9315F94E1A22E2DF10FAD361061CB3DB7925952BFDAE
Signature in message: 01E5C5B659AF41CC4B5C9315F94E1A22E2DF10FAD361061CB3
5310 Message signed
5317 Message to send has been signed
5323 TSF:MSG:SEND,1-1-0-0,s=1,c=0,t=3,pt=0,l=0,sg=1,ft=0,st=OK:
5329 Skipping security for command 3 type 16
5336 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
5342 Nonce requested from 0. Waiting...
5468 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:24D0165B9B9152F2003597B3747DC61B9C67C595A1518C31BD
5477 Skipping security for command 3 type 17
5481 Nonce received from 0.
5483 Proceeding with signing...
Message to process: 0100B6030BFF54656D7065726174757265416E6448756D6964697479
Current nonce: 24D0165B9B9152F2003597B3747DC61B9C67C595A1518C31BDAAAAAAAAAAAAAA
HMAC: 513E8E942127E5E2D512CE288F2B7E6418B8809F69B8B1EAE20D97A4407F9C86
Signature in message: 013E8E
5577 Message signed
5584 Message to send has been signed
5591 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=11,pt=0,l=22,sg=1,ft=0,st=OK:TemperatureAndHumidity
5599 Skipping security for command 3 type 16
5605 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
5611 Nonce requested from 0. Waiting...
5736 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:F95653815901C8FACA219583E9C6FEA53596238E460528DA6A
5746 Skipping security for command 3 type 17
5750 Nonce received from 0.
5752 Proceeding with signing...
Message to process: 01001E030CFF312E31
Current nonce: F95653815901C8FACA219583E9C6FEA53596238E460528DA6AAAAAAAAAAAAAAA
HMAC: 22FD4A335914B1FA7065E23D2B0C98FFB67E06B582AA0C8B3865B44CE9E1D49E
Signature in message: 01FD4A335914B1FA7065E23D2B0C98FFB67E06B582AA
5847 Message signed
5854 Message to send has been signed
5860 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=12,pt=0,l=3,sg=1,ft=0,st=OK:1.1
5866 Skipping security for command 3 type 16
5872 TSF:MSG:SEND,1-1-0-0,s=0,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
5878 Nonce requested from 0. Waiting...
6003 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:D356C66B145EA4E7DCF69EC5B3C20E38D6046C50A4FEACE71B
6013 Skipping security for command 3 type 17
6018 Nonce received from 0.
6020 Proceeding with signing...
Message to process: 010006000700
Current nonce: D356C66B145EA4E7DCF69EC5B3C20E38D6046C50A4FEACE71BAAAAAAAAAAAAAA
HMAC: F4E7923AA716F2CE850EB4A27962F15BF36941D559BA1DCF45C1821C7AD8E479
Signature in message: 01E7923AA716F2CE850EB4A27962F15BF36941D559BA1DCF45
6114 Message signed
6121 Message to send has been signed
6127 TSF:MSG:SEND,1-1-0-0,s=0,c=0,t=7,pt=0,l=0,sg=1,ft=0,st=OK:
6132 Skipping security for command 3 type 16
6139 TSF:MSG:SEND,1-1-0-0,s=1,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
6146 Nonce requested from 0. Waiting...
6270 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:E4DDE1558F406F93C24ACC4978B5DAD078700CB3E898D665BB
6280 Skipping security for command 3 type 17
6284 Nonce received from 0.
6287 Proceeding with signing...
Message to process: 010006000601
Current nonce: E4DDE1558F406F93C24ACC4978B5DAD078700CB3E898D665BBAAAAAAAAAAAAAA
HMAC: 17D9D7F016D4900614542F96199D1C1848E66826E164117C3F91395B119DB817
Signature in message: 01D9D7F016D4900614542F96199D1C1848E66826E164117C3F
6380 Message signed
6387 Message to send has been signed
6393 TSF:MSG:SEND,1-1-0-0,s=1,c=0,t=6,pt=0,l=0,sg=1,ft=0,st=OK:
6400 MCO:REG:REQ
6401 Skipping security for command 3 type 26
6408 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=26,pt=1,l=1,sg=1,ft=0,st=OK:2
6514 TSF:MSG:READ,0-0-1,s=255,c=3,t=16,pt=0,l=0,sg=0:
6519 Skipping security for command 3 type 16
SHA256: 70A5921ABD527FBF58E2644ACAC3EB9D7D190A1ECFA2B45BB400000000000000
6539 Skipping security for command 3 type 17
6551 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:70A5921ABD527FBF58E2644ACAC3EB9D7D190A1ECFA2B45BB4
6561 Transmitted nonce
6681 TSF:MSG:READ,0-0-1,s=255,c=3,t=27,pt=1,l=1,sg=1:1
Signature in message: 017F60D164B7EF1EE9F5664945AEE360F44F196E52428D27
Message to process: 00010E231BFF01
Current nonce: 70A5921ABD527FBF58E2644ACAC3EB9D7D190A1ECFA2B45BB4AAAAAAAAAAAAAA
HMAC: 71BFB4D075B6FC246460FC35C2173D8DBD366ABF0A6ED0C23FA2F84AC4293267
Signature bad: 01BFB4D075B6FC246460FC35C2173D8DBD366ABF0A6ED0C2
6782 Signature verification failed!
6791 !TSF:MSG:SIGN VERIFY FAIL
6794 MCO:BGN:STP
6796 MCO:SLP:MS=1000,SMS=0,I1=255,M1=255,I2=255,M2=255
6801 !MCO:SLP:REP
7803 MCO:BGN:INIT OK,TSP=1
7827 Skipping security for command 3 type 16
7834 TSF:MSG:SEND,1-1-0-0,s=1,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
7840 Nonce requested from 0. Waiting...
7872 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:B946C285F3F5F9204731209AF33E759FF1F604EADDAC89BE1C
7881 Skipping security for command 3 type 17
7885 Nonce received from 0.
7888 Proceeding with signing...
Message to process: 01002EE100010000C04101
Current nonce: B946C285F3F5F9204731209AF33E759FF1F604EADDAC89BE1CAAAAAAAAAAAAAA
HMAC: 4BE74C2A504B304F48E28201FBB2B85E10BD50EB7C577F3F443691573796A4F6
Signature in message: 01E74C2A504B304F48E28201FBB2B85E10BD50EB
7982 Message signed
7989 Message to send has been signed
7995 TSF:MSG:SEND,1-1-0-0,s=1,c=1,t=0,pt=7,l=5,sg=1,ft=0,st=OK:24.0
T: 24.00
8002 Skipping security for command 3 type 16
8008 TSF:MSG:SEND,1-1-0-0,s=0,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
8014 Nonce requested from 0. Waiting...
8153 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:AC6CB618B3BB07F385D25228E62B753BF888DA6351087FD39D
8162 Skipping security for command 3 type 17
8166 Nonce received from 0.
8169 Proceeding with signing...
Message to process: 01002EE101000000384201
Current nonce: AC6CB618B3BB07F385D25228E62B753BF888DA6351087FD39DAAAAAAAAAAAAAA
HMAC: EB51796D338A1717D7B544C78054CBE9E39D901D56F76EBA9A61CC753EFADB59
Signature in message: 0151796D338A1717D7B544C78054CBE9E39D901D
8262 Message signed
8269 Message to send has been signed
8275 TSF:MSG:SEND,1-1-0-0,s=0,c=1,t=1,pt=7,l=5,sg=1,ft=0,st=OK:46.0
H: 46.00
8283 MCO:SLP:MS=60000,SMS=0,I1=255,M1=255,I2=255,M2=255
8288 !MCO:SLP:REP
68311 Skipping security for command 3 type 16
68317 TSF:MSG:SEND,1-1-0-0,s=0,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
68323 Nonce requested from 0. Waiting...
68356 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:8A0A85658B3A6AA9ABBBDC34E3B6891159CF3BD3369A0334BA
68365 Skipping security for command 3 type 17
68369 Nonce received from 0.
68372 Proceeding with signing...
Message to process: 01002EE101000000344201
Current nonce: 8A0A85658B3A6AA9ABBBDC34E3B6891159CF3BD3369A0334BAAAAAAAAAAAAAAA
HMAC: 6D6A1E530B4840BFF51DD3D926CEE1761909EB6F458B16F0D7CF2EBBB48321CB
Signature in message: 016A1E530B4840BFF51DD3D926CEE1761909EB6F
68465 Message signed
68473 Message to send has been signed
68482 TSF:MSG:SEND,1-1-0-0,s=0,c=1,t=1,pt=7,l=5,sg=1,ft=0,st=OK:45.0
H: 45.00
68489 MCO:SLP:MS=60000,SMS=0,I1=255,M1=255,I2=255,M2=255
68494 !MCO:SLP:REP

This is without using whitelisting, just signing. The node and gateway are both working in regular mode. I am able to send a command through Domoticz to turn on/off the relay and also see the temperature sensor attached to the same arduino.
All I added to the scetches of the GW and node was the following:

// Select soft/hardware signing method
#define MY_SIGNING_SOFT //!< Software signing
//#define MY_SIGNING_ATSHA204 //!< Hardware signing using ATSHA204A

// Enable node whitelisting
//#define MY_SIGNING_NODE_WHITELISTING {{.nodeId = GATEWAY_ADDRESS,.serial = {0x09,0x08,0x07,0x06,0x05,0x04,0x03,0x02,0x01}}}
// Enable this if you want destination node to sign all messages sent to this node.
#define MY_SIGNING_REQUEST_SIGNATURES


// SETTINGS FOR MY_SIGNING_SOFT
#define MY_SIGNING_SOFT_RANDOMSEED_PIN A5 //!< Unconnected analog pin for random seed

// SETTINGS FOR MY_SIGNING_ATSHA204
//#define MY_SIGNING_ATSHA204_PIN 17 //!< A3 - pin where ATSHA204 is attached

What step am I missing?
Thanks

Anticimex

@karelsmits Any configuration settings you do in your sketch MUST be placed before

#include <MySensors.h>

Anticimex

@karelsmits Also, you cannot have the same whitelist on both GW and node. Each have their own serial, and nodeId so they have different whitelists. You had this in your original settings. They were correct and in line with the personalization data you provided.
Just make sure that these settings take place before including MySensors.h and make sure you don't have settings in MyConfig.h that would override the settings you do in your sketch,

Anticimex

@karelsmits
I have checked your most recent log and it looks very strange. Signatures are correctly verified in one direction but not the other.
I honestly have no explanation for how this is possible.
Could you try the beta version? That I have verified myself to be working.
But be advised; you will have to re-run the personalization procedure if you do that. Details are here.
The beta also provide some other security related options that you could try.
Firstly I recommend that you define MY_SIGNING_WEAK_SECURITY since security is a bit tighter for the next release (a GW will remember and not reset the signing preferences of a node unless that flag is set, and that could be a pain when testing signing but not committing to stick with it).

karelsmits

okay will do and post you. thank again.
BTW where do i find the beta link?

karelsmits

sorry, but do you mind pointing the beta link you're referring to?
thanks.

Anticimex

@karelsmits
https://github.com/mysensors/MySensors/archive/development.zip

karelsmits

Hi, thanks for your help so far.
I am usinf the version you recommended. Now the signing seems to work, because I get a confirmation message from the gateway and the node. For some reason the gateway reports that the connection is dropped, it keeps on happening. What is wrong?
I am only using signing, not whitelisting
When signing is disabled, everything is working.
Just FYI,I did not change anything in MyConfig.h

Gateway:
__  __       ____
|  \/  |_   _/ ___|  ___ _ __  ___  ___  _ __ ___
| |\/| | | | \___ \ / _ \ `_ \/ __|/ _ \| `__/ __|
| |  | | |_| |___| |  __/ | | \__ \  _  | |  \__ \
|_|  |_|\__, |____/ \___|_| |_|___/\___/|_|  |___/
        |___/                      2.2.0-beta

17 MCO:BGN:INIT GW,CP=RNNGAS--,VER=2.2.0-beta
49 SGN:PER:OK
79 SGN:INI:BND OK
81 TSM:INIT
82 TSF:WUR:MS=0
90 TSM:INIT:TSP OK
91 TSM:INIT:GW MODE
93 TSM:READY:ID=0,PAR=0,DIS=0
96 MCO:REG:NOT NEEDED
IP: 192.168.0.249
1398 MCO:BGN:STP
1400 MCO:BGN:INIT OK,TSP=1
2089 TSF:MSG:READ,9-9-255,s=255,c=3,t=7,pt=0,l=0,sg=0:
2095 TSF:MSG:BC
2097 TSF:MSG:FPAR REQ,ID=9
2099 TSF:CKU:OK,FCTRL
2101 TSF:MSG:GWL OK
2158 SGN:SKP:MSG CMD=3,TYPE=8
2164 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=8,pt=1,l=1,sg=0,ft=0,st=OK:0
4141 TSF:MSG:READ,9-9-0,s=255,c=3,t=24,pt=1,l=1,sg=0:1
4146 SGN:SKP:MSG CMD=3,TYPE=24
4149 TSF:MSG:PINGED,ID=9,HP=1
4151 SGN:SKP:MSG CMD=3,TYPE=25
4158 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=25,pt=1,l=1,sg=0,ft=0,st=OK:1
4180 TSF:MSG:READ,9-9-0,s=255,c=3,t=15,pt=6,l=2,sg=0:0101
4186 SGN:SKP:MSG CMD=3,TYPE=15
4189 SGN:PRE:SGN REQ,FROM=9
4192 SGN:PRE:SGN REQ,TO=9
4194 SGN:PRE:WHI NREQ,TO=9
4196 SGN:SKP:MSG CMD=3,TYPE=15
4201 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0101
4207 SGN:PRE:XMT,TO=9
4215 TSF:MSG:READ,9-9-0,s=255,c=3,t=16,pt=0,l=0,sg=0:
4220 SGN:SKP:MSG CMD=3,TYPE=16
4238 SGN:SKP:MSG CMD=3,TYPE=17
4246 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:<NONCE>
4253 SGN:NCE:XMT,TO=0
4355 TSF:MSG:READ,9-9-0,s=255,c=0,t=17,pt=0,l=10,sg=1:2.2.0-beta
4361 SGN:BND:NONCE=4F5AD49AA0F433BE26060A9B1C55F23CC577EA281775DC0B02AAAAAAAAAAAAAA
4448 SGN:BND:HMAC=78CCB5B0692D9B11DDE1FFB97C0DE0A17040DD6D55BC5BF357163635ACAAE484
4456 SGN:VER:OK
4458 TSF:MSG:READ,9-9-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
4462 SGN:SKP:MSG CMD=3,TYPE=16
4480 SGN:SKP:MSG CMD=3,TYPE=17
4486 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
4492 SGN:NCE:XMT,TO=0
4594 TSF:MSG:READ,9-9-0,s=255,c=3,t=6,pt=1,l=1,sg=1:0
4599 SGN:BND:NONCE=A7CA0C7EF09F65DE5D02E9351E48E2A3D6DBF3537ECCF333F4AAAAAAAAAAAAAA
4686 SGN:BND:HMAC=E731F01B8DF928A36DACBBCDE45651A4B7BE0B1D1248FAB2936CADC0BE85B9AF
4694 SGN:VER:OK
6606 TSF:MSG:READ,9-9-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
6611 SGN:SKP:MSG CMD=3,TYPE=16
6628 SGN:SKP:MSG CMD=3,TYPE=17
6634 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
6641 SGN:NCE:XMT,TO=0
6743 TSF:MSG:READ,9-9-0,s=255,c=3,t=11,pt=0,l=11,sg=1:Secure Lock
6749 SGN:BND:NONCE=CFCF368C893918E8B30F5BB9BD05BE2137CE6BC1C9D0A0C46AAAAAAAAAAAAAAA
6836 SGN:BND:HMAC=E8CCAAE5D1577EFAE089947D520345555DF0A2A7038CDB17E8B9D897C41B5137
6844 SGN:VER:OK
6846 TSF:MSG:READ,9-9-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
6850 SGN:SKP:MSG CMD=3,TYPE=16
6867 SGN:SKP:MSG CMD=3,TYPE=17
6874 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
6880 SGN:NCE:XMT,TO=0
6985 TSF:MSG:READ,9-9-0,s=255,c=3,t=12,pt=0,l=3,sg=1:1.0
6990 SGN:BND:NONCE=81349D41F58F0A4219206D8C6A6C5CD822CD125BA0E22C1D08AAAAAAAAAAAAAA
7077 SGN:BND:HMAC=144CC1F339C5D15BADE41B8CB8EC95FC6AAA37249EB4198169206F8D2116B6C0
7085 SGN:VER:OK
7087 TSF:MSG:READ,9-9-0,s=1,c=3,t=16,pt=0,l=0,sg=1:
7092 SGN:SKP:MSG CMD=3,TYPE=16
7109 SGN:SKP:MSG CMD=3,TYPE=17
7114 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
7121 SGN:NCE:XMT,TO=0
7224 TSF:MSG:READ,9-9-0,s=1,c=0,t=19,pt=0,l=14,sg=1:SecureActuator
7230 SGN:BND:NONCE=80764434FE2DB0B952CE5DB13822E08EA76E4CC32848155EBCAAAAAAAAAAAAAA
7317 SGN:BND:HMAC=7EBFF55E368306D2C1E9A0339DED228E80A0887140052FA13AABF1E5FE533218
7324 SGN:VER:OK
7326 TSF:MSG:READ,9-9-0,s=255,c=3,t=26,pt=1,l=1,sg=1:2
7331 SGN:SKP:MSG CMD=3,TYPE=26
7334 SGN:SKP:MSG CMD=3,TYPE=16
7340 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
7346 SGN:SGN:NCE REQ,TO=9
9250 TSF:MSG:READ,9-9-0,s=255,c=3,t=26,pt=1,l=1,sg=1:2
9255 SGN:SKP:MSG CMD=3,TYPE=26
9259 SGN:SKP:MSG CMD=3,TYPE=16
9264 TSF:MSG:SEND,58-80-9-77,s=67,c=7,t=32,pt=2,l=10,sg=0,ft=0,st=OK:17485
9270 SGN:SGN:NCE REQ,TO=9
 __  __       ____
|  \/  |_   _/ ___|  ___ _ __  ___  ___  _ __ ___
| |\/| | | | \___ \ / _ \ `_ \/ __|/ _ \| `__/ __|
| |  | | |_| |___| |  __/ | | \__ \  _  | |  \__ \
|_|  |_|\__, |____/ \___|_| |_|___/\___/|_|  |___/
        |___/                      2.2.0-beta

18 MCO:BGN:INIT GW,CP=RNNGAS--,VER=2.2.0-beta
50 SGN:PER:OK
77 SGN:INI:BND OK
79 TSM:INIT
80 TSF:WUR:MS=0
88 TSM:INIT:TSP OK
90 TSM:INIT:GW MODE
91 TSM:READY:ID=0,PAR=0,DIS=0
94 MCO:REG:NOT NEEDED
IP: 192.168.0.249
1397 MCO:BGN:STP
1398 MCO:BGN:INIT OK,TSP=1
1988 TSF:MSG:READ,9-9-0,s=255,c=3,t=26,pt=1,l=1,sg=1:2
1993 SGN:SKP:MSG CMD=3,TYPE=26
1996 SGN:SKP:MSG CMD=3,TYPE=16
2000 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
2007 SGN:SGN:NCE REQ,TO=9
2030 TSF:MSG:READ,9-9-0,s=255,c=3,t=17,pt=6,l=25,sg=0:<NONCE>
2035 SGN:SKP:MSG CMD=3,TYPE=17
2038 SGN:NCE:FROM=9
2040 SGN:NCE:15!=9 (DROPPED)
 __  __       ____
|  \/  |_   _/ ___|  ___ _ __  ___  ___  _ __ ___
| |\/| | | | \___ \ / _ \ `_ \/ __|/ _ \| `__/ __|
| |  | | |_| |___| |  __/ | | \__ \  _  | |  \__ \
|_|  |_|\__, |____/ \___|_| |_|___/\___/|_|  |___/
        |___/                      2.2.0-beta

18 MCO:BGN:INIT GW,CP=RNNGAS--,VER=2.2.0-beta
51 SGN:PER:OK
80 SGN:INI:BND OK
82 TSM:INIT
83 TSF:WUR:MS=0
91 TSM:INIT:TSP OK
92 TSM:INIT:GW MODE
94 TSM:READY:ID=0,PAR=0,DIS=0
97 MCO:REG:NOT NEEDED
IP: 192.168.0.249
1399 MCO:BGN:STP
1401 MCO:BGN:INIT OK,TSP=1
1956 TSF:MSG:READ,9-9-0,s=255,c=3,t=26,pt=1,l=1,sg=1:2
1961 SGN:SKP:MSG CMD=3,TYPE=26
1965 SGN:SKP:MSG CMD=3,TYPE=16
1969 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
1975 SGN:SGN:NCE REQ,TO=9
1998 TSF:MSG:READ,9-9-0,s=255,c=3,t=17,pt=6,l=25,sg=0:<NONCE>
2003 SGN:SKP:MSG CMD=3,TYPE=17
2007 SGN:NCE:FROM=9
2009 SGN:NCE:7!=9 (DROPPED)
 __  __       ____
|  \/  |_   _/ ___|  ___ _ __  ___  ___  _ __ ___
| |\/| | | | \___ \ / _ \ `_ \/ __|/ _ \| `__/ __|
| |  | | |_| |___| |  __/ | | \__ \  _  | |  \__ \
|_|  |_|\__, |____/ \___|_| |_|___/\___/|_|  |___/
        |___/                      2.2.0-beta

18 MCO:BGN:INIT GW,CP=RNNGAS--,VER=2.2.0-beta
51 SGN:PER:OK
79 SGN:INI:BND OK
81 TSM:INIT
82 TSF:WUR:MS=0
90 TSM:INIT:TSP OK
92 TSM:INIT:GW MODE
94 TSM:READY:ID=0,PAR=0,DIS=0
96 MCO:REG:NOT NEEDED
IP: 192.168.0.249
1399 MCO:BGN:STP
1401 MCO:BGN:INIT OK,TSP=1
1965 TSF:MSG:READ,9-9-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
1969 SGN:SKP:MSG CMD=3,TYPE=16
1986 SGN:SKP:MSG CMD=3,TYPE=17
1991 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
1998 SGN:NCE:XMT,TO=0
2101 TSF:MSG:READ,9-9-0,s=255,c=3,t=23,pt=0,l=3,sg=1:LDB
2107 SGN:BND:NONCE=82C773EAE20327A3D8AF62421F246E67B56C3B228CA6370164AAAAAAAAAAAAAA
2194 SGN:BND:HMAC=52A2F9D7C90A5A8EB3B5820C654689041561D8FB42BCE89A7B9A91B3D73353E2
2201 SGN:VER:OK

Node:
__  __       ____
|  \/  |_   _/ ___|  ___ _ __  ___  ___  _ __ ___
| |\/| | | | \___ \ / _ \ `_ \/ __|/ _ \| `__/ __|
| |  | | |_| |___| |  __/ | | \__ \  _  | |  \__ \
|_|  |_|\__, |____/ \___|_| |_|___/\___/|_|  |___/
        |___/                      2.2.0-beta

17 MCO:BGN:INIT NODE,CP=RNNNAS--,VER=2.2.0-beta
49 SGN:PER:OK
77 SGN:INI:BND OK
79 TSM:INIT
80 TSF:WUR:MS=0
88 TSM:INIT:TSP OK
89 TSF:SID:OK,ID=9
91 TSM:FPAR
92 SGN:SGN:NREQ=255
129 TSF:MSG:SEND,9-9-255-255,s=255,c=3,t=7,pt=0,l=0,sg=0,ft=0,st=OK:
2137 !TSM:FPAR:NO REPLY
2139 TSM:FPAR
2140 SGN:SGN:NREQ=255
2177 TSF:MSG:SEND,9-9-255-255,s=255,c=3,t=7,pt=0,l=0,sg=0,ft=0,st=OK:
4185 !TSM:FPAR:NO REPLY
4187 TSM:FPAR
4188 SGN:SGN:NREQ=255
4225 TSF:MSG:SEND,9-9-255-255,s=255,c=3,t=7,pt=0,l=0,sg=0,ft=0,st=OK:
4265 TSF:MSG:READ,0-0-9,s=255,c=3,t=8,pt=1,l=1,sg=0:0
4270 SGN:SKP:MSG CMD=3,TYPE=8
4273 TSF:MSG:FPAR OK,ID=0,D=1
6233 TSM:FPAR:OK
6234 TSM:ID
6235 TSM:ID:OK
6237 TSM:UPL
6238 SGN:SKP:MSG CMD=3,TYPE=24
6242 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=24,pt=1,l=1,sg=0,ft=0,st=OK:1
6259 TSF:MSG:READ,0-0-9,s=255,c=3,t=25,pt=1,l=1,sg=0:1
6263 SGN:SKP:MSG CMD=3,TYPE=25
6266 TSF:MSG:PONG RECV,HP=1
6269 TSM:UPL:OK
6270 TSM:READY:ID=9,PAR=0,DIS=1
6274 SGN:PRE:SGN REQ
6276 SGN:PRE:WHI NREQ
6278 SGN:SKP:MSG CMD=3,TYPE=15
6282 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0101
6289 SGN:PRE:XMT,TO=0
6291 SGN:PRE:WAIT GW
6301 TSF:MSG:READ,0-0-9,s=255,c=3,t=15,pt=6,l=2,sg=0:0101
6307 SGN:SKP:MSG CMD=3,TYPE=15
6309 SGN:PRE:SGN REQ,FROM=0
6312 SGN:SKP:MSG CMD=3,TYPE=16
6317 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
6323 SGN:SGN:NCE REQ,TO=0
6347 TSF:MSG:READ,0-0-9,s=255,c=3,t=17,pt=6,l=25,sg=0:<NONCE>
6352 SGN:SKP:MSG CMD=3,TYPE=17
6355 SGN:NCE:FROM=0
6358 SGN:BND:NONCE=4F5AD49AA0F433BE26060A9B1C55F23CC577EA281775DC0B02AAAAAAAAAAAAAA
6445 SGN:BND:HMAC=78CCB5B0692D9B11DDE1FFB97C0DE0A17040DD6D55BC5BF357163635ACAAE484
6452 SGN:SGN:SGN
6456 TSF:MSG:SEND,9-9-0-0,s=255,c=0,t=17,pt=0,l=10,sg=1,ft=0,st=OK:2.2.0-beta
6463 SGN:SKP:MSG CMD=3,TYPE=16
6469 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
6475 SGN:SGN:NCE REQ,TO=0
6586 TSF:MSG:READ,0-0-9,s=255,c=3,t=17,pt=6,l=25,sg=1:<NONCE>
6592 SGN:SKP:MSG CMD=3,TYPE=17
6594 SGN:NCE:FROM=0
6596 SGN:BND:NONCE=A7CA0C7EF09F65DE5D02E9351E48E2A3D6DBF3537ECCF333F4AAAAAAAAAAAAAA
6684 SGN:BND:HMAC=E731F01B8DF928A36DACBBCDE45651A4B7BE0B1D1248FAB2936CADC0BE85B9AF
6691 SGN:SGN:SGN
6695 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=6,pt=1,l=1,sg=1,ft=0,st=OK:0
8702 SGN:SKP:MSG CMD=3,TYPE=16
8708 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
8714 SGN:SGN:NCE REQ,TO=0
8734 TSF:MSG:READ,0-0-9,s=255,c=3,t=17,pt=6,l=25,sg=1:<NONCE>
8740 SGN:SKP:MSG CMD=3,TYPE=17
8743 SGN:NCE:FROM=0
8745 SGN:BND:NONCE=CFCF368C893918E8B30F5BB9BD05BE2137CE6BC1C9D0A0C46AAAAAAAAAAAAAAA
8833 SGN:BND:HMAC=E8CCAAE5D1577EFAE089947D520345555DF0A2A7038CDB17E8B9D897C41B5137
8840 SGN:SGN:SGN
8844 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=11,pt=0,l=11,sg=1,ft=0,st=OK:Secure Lock
8851 SGN:SKP:MSG CMD=3,TYPE=16
8857 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
8863 SGN:SGN:NCE REQ,TO=0
8974 TSF:MSG:READ,0-0-9,s=255,c=3,t=17,pt=6,l=25,sg=1:<NONCE>
8980 SGN:SKP:MSG CMD=3,TYPE=17
8982 SGN:NCE:FROM=0
8984 SGN:BND:NONCE=81349D41F58F0A4219206D8C6A6C5CD822CD125BA0E22C1D08AAAAAAAAAAAAAA
9071 SGN:BND:HMAC=144CC1F339C5D15BADE41B8CB8EC95FC6AAA37249EB4198169206F8D2116B6C0
9079 SGN:SGN:SGN
9086 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=12,pt=0,l=3,sg=1,ft=0,st=OK:1.0
9093 SGN:SKP:MSG CMD=3,TYPE=16
9098 TSF:MSG:SEND,9-9-0-0,s=1,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
9104 SGN:SGN:NCE REQ,TO=0
9216 TSF:MSG:READ,0-0-9,s=255,c=3,t=17,pt=6,l=25,sg=1:<NONCE>
9221 SGN:SKP:MSG CMD=3,TYPE=17
9224 SGN:NCE:FROM=0
9226 SGN:BND:NONCE=80764434FE2DB0B952CE5DB13822E08EA76E4CC32848155EBCAAAAAAAAAAAAAA
9313 SGN:BND:HMAC=7EBFF55E368306D2C1E9A0339DED228E80A0887140052FA13AABF1E5FE533218
9320 SGN:SGN:SGN
9324 TSF:MSG:SEND,9-9-0-0,s=1,c=0,t=19,pt=0,l=14,sg=1,ft=0,st=OK:SecureActuator
9332 MCO:REG:REQ
9333 SGN:SKP:MSG CMD=3,TYPE=26
9339 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=26,pt=1,l=1,sg=1,ft=0,st=OK:2
9441 TSF:MSG:READ,0-0-9,s=255,c=3,t=16,pt=0,l=0,sg=1:
9445 !TSF:MSG:PVER,1=2
11346 SGN:SKP:MSG CMD=3,TYPE=26
11352 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=26,pt=1,l=1,sg=1,ft=0,st=OK:2
11364 TSF:MSG:READ,58-80-77,s=67,c=7,t=32,pt=2,l=10,sg=0:17485
11369 !TSF:MSG:PVER,3=2
13358 SGN:SKP:MSG CMD=3,TYPE=26
13363 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=26,pt=1,l=1,sg=1,ft=0,st=OK:2
13374 TSF:MSG:READ,0-0-9,s=255,c=3,t=16,pt=0,l=0,sg=0:
13379 SGN:SKP:MSG CMD=3,TYPE=16
13382 SGN:NCE:LEFT=4
13399 SGN:SKP:MSG CMD=3,TYPE=17
13404 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:<NONCE>
13411 SGN:NCE:XMT,TO=9
15369 SGN:SKP:MSG CMD=3,TYPE=26
15374 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=26,pt=1,l=1,sg=1,ft=0,st=OK:2
15385 TSF:MSG:READ,0-0-9,s=255,c=3,t=16,pt=0,l=0,sg=0:
15390 SGN:SKP:MSG CMD=3,TYPE=16
15393 SGN:NCE:LEFT=3
15410 SGN:SKP:MSG CMD=3,TYPE=17
15415 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:<NONCE>
15422 SGN:NCE:XMT,TO=9
17382 MCO:NLK:NODE LOCKED. TO UNLOCK, GND PIN 14 AND RESET
17387 SGN:SKP:MSG CMD=3,TYPE=16
17392 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
17398 SGN:SGN:NCE REQ,TO=0
17420 TSF:MSG:READ,0-0-9,s=255,c=3,t=17,pt=6,l=25,sg=1:<NONCE>
17425 SGN:SKP:MSG CMD=3,TYPE=17
17428 SGN:NCE:FROM=0
17430 SGN:BND:NONCE=82C773EAE20327A3D8AF62421F246E67B56C3B228CA6370164AAAAAAAAAAAAAA
17517 SGN:BND:HMAC=52A2F9D7C90A5A8EB3B5820C654689041561D8FB42BCE89A7B9A91B3D73353E2
17525 SGN:SGN:SGN
17529 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=23,pt=0,l=3,sg=1,ft=0,st=OK:LDB
17536 MCO:NLK:TSL

Thank you

karelsmits

This is my node code regarding signing:

#define MY_NODE_ID 5
 
#define MY_DEBUG //!< Enable debug prints to serial monitor
#define MY_DEBUG_VERBOSE_SIGNING //!< Enable signing related debug prints to serial monitor
#define MY_NODE_LOCK_FEATURE //!< Enable lockdown of node if suspicious activity is detected

// Enable and select radio type attached
#define MY_RADIO_NRF24 //!< NRF24L01 radio driver
//#define MY_RADIO_RFM69 //!< RFM69 radio driver

// Select soft/hardware signing method
#define MY_SIGNING_SOFT //!< Software signing
//#define MY_SIGNING_ATSHA204 //!< Hardware signing using ATSHA204A

// Enable node whitelisting
//#define MY_SIGNING_NODE_WHITELISTING {{.nodeId = GATEWAY_ADDRESS,.serial = {0x09,0x08,0x07,0x06,0x05,0x04,0x03,0x02,0x01}}}
// Enable this if you want destination node to sign all messages sent to this node.
//#define MY_SIGNING_REQUEST_SIGNATURES


// SETTINGS FOR MY_SIGNING_SOFT
#define MY_SIGNING_SOFT_RANDOMSEED_PIN A5 //!< Unconnected analog pin for random seed

// SETTINGS FOR MY_SIGNING_ATSHA204
#define MY_SIGNING_ATSHA204_PIN 17 //!< A3 - pin where ATSHA204 is attached

Anticimex

@karelsmits on beta with all debugging enabled and signing, code gets so large that the stack becomes too small. This can cause "cheap" gateways to crash and reboot. I am guessing you run some atmga328p based gw right?
Try to disable at least the verbose debug, possible all debug on the GW and it should run better.

karelsmits

Dear Anticimex,
Thank you so much for helping out.
This is what I had to do to solve this:
I used the development edition of mysensors, I had to disable debugging, because indeed I use cheap boards. Then I also had to use the personalizer from the development and not change anything in the config file.
I just have 1 more question for now. Everything is secured for now, the only thing which isn’t, according to my understanding, is that any controller could communicate with my Ethernet gateway. Of course I could specify the ip address of the controller I want to use in the Ethernet gateway ino file configurations, but an ip address could easily be “doubled” either by causing an ip-conflict, or just plugging out or somehow disabling my controller.
So, the question is; how can a code or something be specified, besides the ipaddress, in the gateway. And with that security code only, the gateway will be able to be controlled by a controller device like eg Domoticz.
.Thank you.

Whitelist not wirking from sensor to gateway

22

11.7k

11.2k

113.1k