Whitelist not wirking from sensor to gateway

[Anticimex]

@karelsmits it is very odd. I would expect the log mention whitelisting information. Yet there is nothing in the messages concerning signing that indicate it tries to find a entry or that it does not find an entry. It simply looks like the backend has not realized whitelisting is activated. Still, it communicate the requirements properly.
If you look at the backends (MySigningAtsha204Soft.cpp) there are some conditional behaviour there with is activated if a whitelist is defined.

[karelsmits]

What would be my options?
Do you by any chance have a sample gateway and a node (both with whitelisting) that I could compare my code with, to see where it has gone wrong.

And also what about how I verify the EEPROM serial-info.

Thank you in advance.

[Anticimex]

@karelsmits I don't have something from the master branch. But I have verified that the beta (development branch) works with whitelisting. The personalizer dumps the eeprom contents and from the logs you posted above I verified that the contents match the configuration.
Could you try to add some additional prints in the back end to verify it actually executes the whitelisting logic? If I look at github there should be prints that I can't find in your logs. So I suspect the whitelisting management is not fully working, but I am pretty sure it has been verified in the latest release.
You are sure you run a vanilla release without local modifications?

[karelsmits]

Okay here is the gateway code:

/**
 * The MySensors Arduino library handles the wireless radio link and protocol
 * between your home built sensors/actuators and HA controller of choice.
 * The sensors forms a self healing radio network with optional repeaters. Each
 * repeater and gateway builds a routing tables in EEPROM which keeps track of the
 * network topology allowing messages to be routed to nodes.
 *
 * Created by Henrik Ekblad <henrik.ekblad@mysensors.org>
 * Copyright (C) 2013-2015 Sensnology AB
 * Full contributor list: https://github.com/mysensors/Arduino/graphs/contributors
 *
 * Documentation: http://www.mysensors.org
 * Support Forum: http://forum.mysensors.org
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * version 2 as published by the Free Software Foundation.
 *
 *******************************
 *
 * REVISION HISTORY
 * Version 1.0 - Henrik EKblad
 * Contribution by a-lurker and Anticimex,
 * Contribution by Norbert Truchsess <norbert.truchsess@t-online.de>
 * Contribution by Tomas Hozza <thozza@gmail.com>
 *
 *
 * DESCRIPTION
 * The EthernetGateway sends data received from sensors to the ethernet link.
 * The gateway also accepts input on ethernet interface, which is then sent out to the radio network.
 *
 * The GW code is designed for Arduino 328p / 16MHz.  ATmega168 does not have enough memory to run this program.
 *
 * LED purposes:
 * - To use the feature, uncomment MY_DEFAULT_xxx_LED_PIN in the sketch below
 * - RX (green) - blink fast on radio message recieved. In inclusion mode will blink fast only on presentation recieved
 * - TX (yellow) - blink fast on radio message transmitted. In inclusion mode will blink slowly
 * - ERR (red) - fast blink on error during transmission error or recieve crc error
 *
 * See http://www.mysensors.org/build/ethernet_gateway for wiring instructions.
 *
 */

// Enable debug prints to serial monitor
#define MY_DEBUG
#define MY_DEBUG_VERBOSE_SIGNING

// Enable and select radio type attached
#define MY_RADIO_NRF24
//#define MY_RADIO_RFM69

// Enable gateway ethernet module type
#define MY_GATEWAY_W5100

// W5100 Ethernet module SPI enable (optional if using a shield/module that manages SPI_EN signal)
//#define MY_W5100_SPI_EN 4

// Enable Soft SPI for NRF radio (note different radio wiring is required)
// The W5100 ethernet module seems to have a hard time co-operate with
// radio on the same spi bus.
#if !defined(MY_W5100_SPI_EN) && !defined(ARDUINO_ARCH_SAMD)
#define MY_SOFTSPI
#define MY_SOFT_SPI_SCK_PIN 14
#define MY_SOFT_SPI_MISO_PIN 16
#define MY_SOFT_SPI_MOSI_PIN 15
#endif

// When W5100 is connected we have to move CE/CSN pins for NRF radio
#ifndef MY_RF24_CE_PIN
#define MY_RF24_CE_PIN 5
#endif
#ifndef MY_RF24_CS_PIN
#define MY_RF24_CS_PIN 6
#endif

// Enable to UDP
//#define MY_USE_UDP

#define MY_IP_ADDRESS 192,168,0,249   // If this is disabled, DHCP is used to retrieve address
// Renewal period if using DHCP
//#define MY_IP_RENEWAL_INTERVAL 60000
// The port to keep open on node server mode / or port to contact in client mode
#define MY_PORT 5487

// Controller ip address. Enables client mode (default is "server" mode).
// Also enable this if MY_USE_UDP is used and you want sensor data sent somewhere.
//#define MY_CONTROLLER_IP_ADDRESS 192, 168, 178, 254

// The MAC address can be anything you want but should be unique on your network.
// Newer boards have a MAC address printed on the underside of the PCB, which you can (optionally) use.
// Note that most of the Ardunio examples use  "DEAD BEEF FEED" for the MAC address.
//#define MY_MAC_ADDRESS 0xDE, 0xAD, 0xBE, 0xEF, 0xFE, 0xED

// Enable inclusion mode
#define MY_INCLUSION_MODE_FEATURE
// Enable Inclusion mode button on gateway
//#define MY_INCLUSION_BUTTON_FEATURE
// Set inclusion mode duration (in seconds)
#define MY_INCLUSION_MODE_DURATION 60
// Digital pin used for inclusion mode button
//#define MY_INCLUSION_MODE_BUTTON_PIN  3

// Set blinking period
#define MY_DEFAULT_LED_BLINK_PERIOD 300

// Flash leds on rx/tx/err
// Uncomment to override default HW configurations
#define MY_DEFAULT_ERR_LED_PIN 7  // Error led pin
#define MY_DEFAULT_RX_LED_PIN  8  // Receive led pin
#define MY_DEFAULT_TX_LED_PIN  9  // Transmit led pin


#if defined(MY_USE_UDP)
#include <EthernetUdp.h>
#endif
#include <Ethernet.h>
#include <MySensors.h>

//===============

// Select soft/hardware signing method
#define MY_SIGNING_SOFT //!< Software signing
//#define MY_SIGNING_ATSHA204 //!< Hardware signing using ATSHA204A

// Enable node whitelisting
#define MY_SIGNING_NODE_WHITELISTING {{.nodeId = 1,.serial = {0xA0,0xB1,0x71,0xFA,0xC5,0x62,0x96,0xF1,0xD8}}} // for sensor

//#define MY_SIGNING_NODE_WHITELISTING {{{.nodeId = GATEWAY_ADDRESS,.serial = {0x4E,0xD3,0xAD,0x93,0xC6,0xF2,0xC6,0xF3,0x25}},{.nodeId = 2,.serial = {0xDC,0x1E,0x7F,0x20,0x62,0x2F,0xD3,0x04,0x29}}}

// Enable this if you want destination node to sign all messages sent to this node.
#define MY_SIGNING_REQUEST_SIGNATURES

/**
 * @def MY_SIGNING_GW_REQUEST_SIGNATURES_FROM_ALL
 * @brief Enable this to have gateway require all nodes in the network to sign messages sent to it. @ref MY_SIGNING_REQUEST_SIGNATURES must also be set.
 *
 * Use this for maximum security, but be aware that every single node will have to be personalized before they can be used.
 * Note that if this is enabled, and whitelisting is also enabled, whitelisting will also be in effect for all nodes.
 */
#define MY_SIGNING_GW_REQUEST_SIGNATURES_FROM_ALL


// SETTINGS FOR MY_SIGNING_SOFT
#define MY_SIGNING_SOFT_RANDOMSEED_PIN 7 //!< Unconnected analog pin for random seed


//===========================

void setup()
{
}

void loop()
{
}

Here is the Sensor-node code:

/**
 * The MySensors Arduino library handles the wireless radio link and protocol
 * between your home built sensors/actuators and HA controller of choice.
 * The sensors forms a self healing radio network with optional repeaters. Each
 * repeater and gateway builds a routing tables in EEPROM which keeps track of the
 * network topology allowing messages to be routed to nodes.
 *
 * Created by Henrik Ekblad <henrik.ekblad@mysensors.org>
 * Copyright (C) 2013-2015 Sensnology AB
 * Full contributor list: https://github.com/mysensors/Arduino/graphs/contributors
 *
 * Documentation: http://www.mysensors.org
 * Support Forum: http://forum.mysensors.org
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * version 2 as published by the Free Software Foundation.
 *
 *******************************
 *
 * REVISION HISTORY
 * Version 1.0: Henrik EKblad
 * Version 1.1 - 2016-07-20: Converted to MySensors v2.0 and added various improvements - Torben Woltjen (mozzbozz)
 * 
 * DESCRIPTION
 * This sketch provides an example of how to implement a humidity/temperature
 * sensor using a DHT11/DHT-22.
 *  
 * For more information, please visit:
 * http://www.mysensors.org/build/humidity
 * 
 */

// Enable debug prints
#define MY_DEBUG
#define MY_DEBUG_VERBOSE_SIGNING

// Enable and select radio type attached 
#define MY_RADIO_NRF24
//#define MY_RADIO_RFM69
//#define MY_RS485

#include <SPI.h>
#include <MySensors.h>  
#include <DHT.h>

// Set this to the pin you connected the DHT's data pin to
#define DHT_DATA_PIN 3

// Set this offset if the sensor has a permanent small offset to the real temperatures
#define SENSOR_TEMP_OFFSET 0

// Sleep time between sensor updates (in milliseconds)
// Must be >1000ms for DHT22 and >2000ms for DHT11
static const uint64_t UPDATE_INTERVAL = 60000;

// Force sending an update of the temperature after n sensor reads, so a controller showing the
// timestamp of the last update doesn't show something like 3 hours in the unlikely case, that
// the value didn't change since;
// i.e. the sensor would force sending an update every UPDATE_INTERVAL*FORCE_UPDATE_N_READS [ms]
static const uint8_t FORCE_UPDATE_N_READS = 10;

#define CHILD_ID_HUM 0
#define CHILD_ID_TEMP 1


//===============

#define MY_NODE_ID 1


// Select soft/hardware signing method
#define MY_SIGNING_SOFT //!< Software signing
//#define MY_SIGNING_ATSHA204 //!< Hardware signing using ATSHA204A

// Enable node whitelisting
#define MY_SIGNING_NODE_WHITELISTING {{.nodeId = GATEWAY_ADDRESS,.serial = {0xA0,0xB1,0x71,0xFA,0xC5,0x62,0x96,0xF1,0xD9}}} // for gateway


// Enable this if you want destination node to sign all messages sent to this node.
#define MY_SIGNING_REQUEST_SIGNATURES

/**
 * @def MY_SIGNING_GW_REQUEST_SIGNATURES_FROM_ALL
 * @brief Enable this to have gateway require all nodes in the network to sign messages sent to it. @ref MY_SIGNING_REQUEST_SIGNATURES must also be set.
 *
 * Use this for maximum security, but be aware that every single node will have to be personalized before they can be used.
 * Note that if this is enabled, and whitelisting is also enabled, whitelisting will also be in effect for all nodes.
 */
#define MY_SIGNING_GW_REQUEST_SIGNATURES_FROM_ALL


// SETTINGS FOR MY_SIGNING_SOFT
#define MY_SIGNING_SOFT_RANDOMSEED_PIN 7 //!< Unconnected analog pin for random seed


//===========================



float lastTemp;
float lastHum;
uint8_t nNoUpdatesTemp;
uint8_t nNoUpdatesHum;
bool metric = true;

MyMessage msgHum(CHILD_ID_HUM, V_HUM);
MyMessage msgTemp(CHILD_ID_TEMP, V_TEMP);
DHT dht;


void presentation()  
{ 
  // Send the sketch version information to the gateway
  sendSketchInfo("TemperatureAndHumidity", "1.1");

  // Register all sensors to gw (they will be created as child devices)
  present(CHILD_ID_HUM, S_HUM);
  present(CHILD_ID_TEMP, S_TEMP);

  metric = getControllerConfig().isMetric;
}


void setup()
{
  dht.setup(DHT_DATA_PIN); // set data pin of DHT sensor
  if (UPDATE_INTERVAL <= dht.getMinimumSamplingPeriod()) {
    Serial.println("Warning: UPDATE_INTERVAL is smaller than supported by the sensor!");
  }
  // Sleep for the time of the minimum sampling period to give the sensor time to power up
  // (otherwise, timeout errors might occure for the first reading)
  sleep(dht.getMinimumSamplingPeriod());
}


void loop()      
{  
  // Force reading sensor, so it works also after sleep()
  dht.readSensor(true);

  // Get temperature from DHT library
  float temperature = dht.getTemperature();
  if (isnan(temperature)) {
    Serial.println("Failed reading temperature from DHT!");
  } else if (temperature != lastTemp || nNoUpdatesTemp == FORCE_UPDATE_N_READS) {
    // Only send temperature if it changed since the last measurement or if we didn't send an update for n times
    lastTemp = temperature;
    if (!metric) {
      temperature = dht.toFahrenheit(temperature);
    }
    // Reset no updates counter
    nNoUpdatesTemp = 0;
    temperature += SENSOR_TEMP_OFFSET;
    send(msgTemp.set(temperature, 1));

    #ifdef MY_DEBUG
    Serial.print("T: ");
    Serial.println(temperature);
    #endif
  } else {
    // Increase no update counter if the temperature stayed the same
    nNoUpdatesTemp++;
  }

  // Get humidity from DHT library
  float humidity = dht.getHumidity();
  if (isnan(humidity)) {
    Serial.println("Failed reading humidity from DHT");
  } else if (humidity != lastHum || nNoUpdatesHum == FORCE_UPDATE_N_READS) {
    // Only send humidity if it changed since the last measurement or if we didn't send an update for n times
    lastHum = humidity;
    // Reset no updates counter
    nNoUpdatesHum = 0;
    send(msgHum.set(humidity, 1));

    #ifdef MY_DEBUG
    Serial.print("H: ");
    Serial.println(humidity);
    #endif
  } else {
    // Increase no update counter if the humidity stayed the same
    nNoUpdatesHum++;
  }

  // Sleep for a while to save energy
  sleep(UPDATE_INTERVAL); 
}

And here is the signing code at MyConfig.h:

#define MY_SIGNING_NODE_WHITELISTING {{.nodeId = GATEWAY_ADDRESS,.serial = {0xA0,0xB1,0x71,0xFA,0xC5,0x62,0x96,0xF1,0xD9}},{.nodeId = 1,.serial = {0xA0,0xB1,0x71,0xFA,0xC5,0x62,0x96,0xF1,0xD8}}}

/**
 * @def MY_SIGNING_ATSHA204_PIN
 * @brief Atsha204 default pin setting
 *
 * Pin where ATSHA204 is attached
 */
#ifndef MY_SIGNING_ATSHA204_PIN
#define MY_SIGNING_ATSHA204_PIN 17
#endif

/**
 * @def MY_SIGNING_SOFT_RANDOMSEED_PIN
 * @brief Pin used for random generation in soft signing
 *
 * Do not connect anything to this when soft signing is enabled
 */
#ifndef MY_SIGNING_SOFT_RANDOMSEED_PIN
#define MY_SIGNING_SOFT_RANDOMSEED_PIN 7
#endif

And this is pretty much Vanilla, as you can see.
Thanks for your help!

[Anticimex]

@karelsmits I am not talking about your sketch, I am talking about the MySensors library.

[karelsmits]

what files in the library do you mean?

[Anticimex]

@karelsmits the one I mentioned above.
However, I do notice one important thing here; you have made changes to MyConfig.h. You should not enable the flags for signing and whitelisting in that file. You do that in your sketch. If you have defined them in two places, you don't know which setting is used. Revert the signing settings you tweaked in MyConfig.h and use the settings in your sketches (the GW and the node).

[karelsmits]

Thank you so much for your help so far, especially the myconfig.h file that it should not be modified regarding signing.
Now I have the following error:

Gateway:
0;255;3;0;9;MCO:BGN:INIT GW,CP=RNNGAS-,VER=2.1.1
0;255;3;0;9;TSM:INIT
0;255;3;0;9;TSF:WUR:MS=0
0;255;3;0;9;TSM:INIT:TSP OK
0;255;3;0;9;TSM:INIT:GW MODE
0;255;3;0;9;TSM:READY:ID=0,PAR=0,DIS=0
0;255;3;0;9;MCO:REG:NOT NEEDED
IP: 192.168.0.249
0;255;3;0;9;MCO:BGN:STP
0;255;3;0;9;MCO:BGN:INIT OK,TSP=1
0;255;3;0;9;TSF:MSG:READ,1-1-255,s=255,c=3,t=7,pt=0,l=0,sg=0:
0;255;3;0;9;TSF:MSG:BC
0;255;3;0;9;TSF:MSG:FPAR REQ,ID=1
0;255;3;0;9;TSF:PNG:SEND,TO=0
0;255;3;0;9;TSF:CKU:OK
0;255;3;0;9;TSF:MSG:GWL OK
0;255;3;0;9;Will not sign message for destination 1 as it does not require it
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=8,pt=1,l=1,sg=0,ft=0,st=OK:0
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=24,pt=1,l=1,sg=0:1
0;255;3;0;9;TSF:MSG:PINGED,ID=1,HP=1
0;255;3;0;9;Will not sign message for destination 1 as it does not require it
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=25,pt=1,l=1,sg=0,ft=0,st=OK:1
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=15,pt=6,l=2,sg=0:0101
0;255;3;0;9;Mark node 1 as one that require signed messages
0;255;3;0;9;Mark node 1 as one that do not require whitelisting
0;255;3;0;9;Informing node 1 that we require signatures
0;255;3;0;9;Informing node 1 that we do not require whitelisting
0;255;3;0;9;Skipping security for command 3 type 15
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0101
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=0:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: FA0CEF05B11135F19B646D3FA36FE1BCFCC8DAC1A3773BDC7900000000000000
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:FA0CEF05B11135F19B646D3FA36FE1BCFCC8DAC1A3773BDC79
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=0,t=18,pt=0,l=5,sg=1:2.1.1
0;255;3;0;9;Signature in message: 01EDFE67C83BA7ADD4B868950DA55ADF92E74C2D
0;255;3;0;9;Message to process: 01002E0012FF322E312E31
0;255;3;0;9;Current nonce: FA0CEF05B11135F19B646D3FA36FE1BCFCC8DAC1A3773BDC79AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 41EDFE67C83BA7ADD4B868950DA55ADF92E74C2D89903167166C396470C02F3E
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: D92FBB57AB79BCCC3E9452F7E4B876FFFBC7FE47C2AD0613C8AAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:D92FBB57AB79BCCC3E9452F7E4B876FFFBC7FE47C2AD0613C8
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=6,pt=1,l=1,sg=1:0
0;255;3;0;9;Signature in message: 01815088794CC5704C5790821D82DFD0435B5A47B4FBC14C
0;255;3;0;9;Message to process: 01000E2306FF00
0;255;3;0;9;Current nonce: D92FBB57AB79BCCC3E9452F7E4B876FFFBC7FE47C2AD0613C8AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 1D815088794CC5704C5790821D82DFD0435B5A47B4FBC14C745AA2B639D4D9DA
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: E38FE6554A3AE6D02B91B69EE2B67602506D8308DB5D4EAF3EAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:E38FE6554A3AE6D02B91B69EE2B67602506D8308DB5D4EAF3E
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=11,pt=0,l=5,sg=1:Relay
0;255;3;0;9;Signature in message: 01E3BCEFCF2F06C922BD6D487BBA7E67C9B717BC
0;255;3;0;9;Message to process: 01002E030BFF52656C6179
0;255;3;0;9;Current nonce: E38FE6554A3AE6D02B91B69EE2B67602506D8308DB5D4EAF3EAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 4BE3BCEFCF2F06C922BD6D487BBA7E67C9B717BCF2852083854E7555620473AD
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: 2385BA03A156C8D203085EE05B480A4819CC88E82D9BA6209FAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:2385BA03A156C8D203085EE05B480A4819CC88E82D9BA6209F
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=12,pt=0,l=3,sg=1:1.0
0;255;3;0;9;Signature in message: 01DDCD53799743889B645AC6524B32B4AEB4B71E368C
0;255;3;0;9;Message to process: 01001E030CFF312E30
0;255;3;0;9;Current nonce: 2385BA03A156C8D203085EE05B480A4819CC88E82D9BA6209FAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: F3DDCD53799743889B645AC6524B32B4AEB4B71E368CCE2BE60CC00E0AD2D183
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: F1048244D308662147413A8531A71EF5C5E241710A859D7562AAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:F1048244D308662147413A8531A71EF5C5E241710A859D7562
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=0,t=3,pt=0,l=0,sg=1:
0;255;3;0;9;Signature in message: 01E5C5B659AF41CC4B5C9315F94E1A22E2DF10FAD361061CB3
0;255;3;0;9;Message to process: 010006000301
0;255;3;0;9;Current nonce: F1048244D308662147413A8531A71EF5C5E241710A859D7562AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 4EE5C5B659AF41CC4B5C9315F94E1A22E2DF10FAD361061CB3DB7925952BFDAE
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: 24D0165B9B9152F2003597B3747DC61B9C67C595A1518C31BDAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:24D0165B9B9152F2003597B3747DC61B9C67C595A1518C31BD
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=11,pt=0,l=22,sg=1:TemperatureAndHumidity
0;255;3;0;9;Signature in message: 013E8E
0;255;3;0;9;Message to process: 0100B6030BFF54656D7065726174757265416E6448756D6964697479
0;255;3;0;9;Current nonce: 24D0165B9B9152F2003597B3747DC61B9C67C595A1518C31BDAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 513E8E942127E5E2D512CE288F2B7E6418B8809F69B8B1EAE20D97A4407F9C86
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: F95653815901C8FACA219583E9C6FEA53596238E460528DA6AAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:F95653815901C8FACA219583E9C6FEA53596238E460528DA6A
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=12,pt=0,l=3,sg=1:1.1
0;255;3;0;9;Signature in message: 01FD4A335914B1FA7065E23D2B0C98FFB67E06B582AA
0;255;3;0;9;Message to process: 01001E030CFF312E31
0;255;3;0;9;Current nonce: F95653815901C8FACA219583E9C6FEA53596238E460528DA6AAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 22FD4A335914B1FA7065E23D2B0C98FFB67E06B582AA0C8B3865B44CE9E1D49E
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=0,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: D356C66B145EA4E7DCF69EC5B3C20E38D6046C50A4FEACE71BAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:D356C66B145EA4E7DCF69EC5B3C20E38D6046C50A4FEACE71B
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=0,c=0,t=7,pt=0,l=0,sg=1:
0;255;3;0;9;Signature in message: 01E7923AA716F2CE850EB4A27962F15BF36941D559BA1DCF45
0;255;3;0;9;Message to process: 010006000700
0;255;3;0;9;Current nonce: D356C66B145EA4E7DCF69EC5B3C20E38D6046C50A4FEACE71BAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: F4E7923AA716F2CE850EB4A27962F15BF36941D559BA1DCF45C1821C7AD8E479
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: E4DDE1558F406F93C24ACC4978B5DAD078700CB3E898D665BBAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:E4DDE1558F406F93C24ACC4978B5DAD078700CB3E898D665BB
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=0,t=6,pt=0,l=0,sg=1:
0;255;3;0;9;Signature in message: 01D9D7F016D4900614542F96199D1C1848E66826E164117C3F
0;255;3;0;9;Message to process: 010006000601
0;255;3;0;9;Current nonce: E4DDE1558F406F93C24ACC4978B5DAD078700CB3E898D665BBAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 17D9D7F016D4900614542F96199D1C1848E66826E164117C3F91395B119DB817
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=26,pt=1,l=1,sg=1:2
0;255;3;0;9;Skipping security for command 3 type 26
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
0;255;3;0;9;Nonce requested from 1. Waiting...
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=255,c=3,t=17,pt=6,l=25,sg=0:70A5921ABD527FBF58E2644ACAC3EB9D7D190A1ECFA2B45BB4
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;Nonce received from 1.
0;255;3;0;9;Proceeding with signing...
0;255;3;0;9;Message to process: 00010E231BFF01
0;255;3;0;9;Current nonce: 70A5921ABD527FBF58E2644ACAC3EB9D7D190A1ECFA2B45BB4AAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 417F60D164B7EF1EE9F5664945AEE360F44F196E52428D274230D8D0DB830028
0;255;3;0;9;Signature in message: 017F60D164B7EF1EE9F5664945AEE360F44F196E52428D27
0;255;3;0;9;Message signed
0;255;3;0;9;Message to send has been signed
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=27,pt=1,l=1,sg=1,ft=0,st=OK:1
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: B946C285F3F5F9204731209AF33E759FF1F604EADDAC89BE1CAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:B946C285F3F5F9204731209AF33E759FF1F604EADDAC89BE1C
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=1,c=1,t=0,pt=7,l=5,sg=1:24.0
0;255;3;0;9;Signature in message: 01E74C2A504B304F48E28201FBB2B85E10BD50EB
0;255;3;0;9;Message to process: 01002EE100010000C04101
0;255;3;0;9;Current nonce: B946C285F3F5F9204731209AF33E759FF1F604EADDAC89BE1CAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: 69EB3E1CFCF0B6629300837110B152CA8F7A0E2D53A4C8BFEBE4903F1B090864
0;255;3;0;9;Signature bad: 01EB3E1CFCF0B6629300837110B152CA8F7A0E2D
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=0,c=3,t=16,pt=0,l=0,sg=1:
0;255;3;0;9;Skipping security for command 3 type 16
0;255;3;0;9;SHA256: AC6CB618B3BB07F385D25228E62B753BF888DA6351087FD39DAAAAAAAAAAAAAA
0;255;3;0;9;Skipping security for command 3 type 17
0;255;3;0;9;TSF:MSG:SEND,0-0-1-1,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:AC6CB618B3BB07F385D25228E62B753BF888DA6351087FD39D
0;255;3;0;9;Transmitted nonce
0;255;3;0;9;TSF:MSG:READ,1-1-0,s=0,c=1,t=1,pt=7,l=5,sg=1:46.0
0;255;3;0;9;Signature in message: 0151796D338A1717D7B544C78054CBE9E39D901D
0;255;3;0;9;Message to process: 01002EE101000000384201
0;255;3;0;9;Current nonce: AC6CB618B3BB07F385D25228E62B753BF888DA6351087FD39DAAAAAAAAAAAAAA
0;255;3;0;9;HMAC: A54694E7B219D7065CFD2D3C449350372739185EAC6EE5376C0E10561344CB12
0;255;3;0;9;Signature bad: 014694E7B219D7065CFD2D3C449350372739185E
0;255;3;0;9;Signature verification failed!
0;255;3;0;9;!TSF:MSG:SIGN VERIFY FAIL

Node:
0 MCO:BGN:INIT REPEATER,CP=RNNRAS-,VER=2.1.1
3 MCO:BGN:BFR
5 TSM:INIT
6 TSF:WUR:MS=0
13 TSM:INIT:TSP OK
15 TSF:SID:OK,ID=1
16 TSM:FPAR
17 Will not sign message for destination 255 as it does not require it
59 TSF:MSG:SEND,1-1-255-255,s=255,c=3,t=7,pt=0,l=0,sg=0,ft=0,st=OK:
203 TSF:MSG:READ,0-0-1,s=255,c=3,t=8,pt=1,l=1,sg=0:0
207 Skipping security for command 3 type 8
211 TSF:MSG:FPAR OK,ID=0,D=1
2066 TSM:FPAR:OK
2067 TSM:ID
2068 TSM:ID:OK
2070 TSM:UPL
2071 Will not sign message for destination 0 as it does not require it
2079 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=24,pt=1,l=1,sg=0,ft=0,st=OK:1
2096 TSF:MSG:READ,0-0-1,s=255,c=3,t=25,pt=1,l=1,sg=0:1
2101 Skipping security for command 3 type 25
2105 TSF:MSG:PONG RECV,HP=1
2107 TSM:UPL:OK
2109 TSM:READY:ID=1,PAR=0,DIS=1
2112 Signing required
2114 Will not sign message for destination 0 as it does not require it
2121 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0101
2128 Waiting for GW to send signing preferences...
2158 TSF:MSG:READ,0-0-1,s=255,c=3,t=15,pt=6,l=2,sg=0:0101
2163 Skipping security for command 3 type 15
2167 Mark node 0 as one that require signed messages
2171 Mark node 0 as one that do not require whitelisting
2181 Skipping security for command 3 type 16
2186 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
2192 Nonce requested from 0. Waiting...
2225 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=0:FA0CEF05B11135F19B646D3FA36FE1BCFCC8DAC1A3773BDC79
2234 Skipping security for command 3 type 17
2238 Nonce received from 0.
2240 Proceeding with signing...
Message to process: 01002E0012FF322E312E31
Current nonce: FA0CEF05B11135F19B646D3FA36FE1BCFCC8DAC1A3773BDC79AAAAAAAAAAAAAA
HMAC: 41EDFE67C83BA7ADD4B868950DA55ADF92E74C2D89903167166C396470C02F3E
Signature in message: 01EDFE67C83BA7ADD4B868950DA55ADF92E74C2D
2334 Message signed
2341 Message to send has been signed
2348 TSF:MSG:SEND,1-1-0-0,s=255,c=0,t=18,pt=0,l=5,sg=1,ft=0,st=OK:2.1.1
2354 Skipping security for command 3 type 16
2361 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
2367 Nonce requested from 0. Waiting...
2492 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:D92FBB57AB79BCCC3E9452F7E4B876FFFBC7FE47C2AD0613C8
2501 Skipping security for command 3 type 17
2505 Nonce received from 0.
2508 Proceeding with signing...
Message to process: 01000E2306FF00
Current nonce: D92FBB57AB79BCCC3E9452F7E4B876FFFBC7FE47C2AD0613C8AAAAAAAAAAAAAA
HMAC: 1D815088794CC5704C5790821D82DFD0435B5A47B4FBC14C745AA2B639D4D9DA
Signature in message: 01815088794CC5704C5790821D82DFD0435B5A47B4FBC14C
2601 Message signed
2609 Message to send has been signed
2615 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=6,pt=1,l=1,sg=1,ft=0,st=OK:0
4621 Skipping security for command 3 type 16
4627 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
4633 Nonce requested from 0. Waiting...
4665 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:E38FE6554A3AE6D02B91B69EE2B67602506D8308DB5D4EAF3E
4675 Skipping security for command 3 type 17
4679 Nonce received from 0.
4681 Proceeding with signing...
Message to process: 01002E030BFF52656C6179
Current nonce: E38FE6554A3AE6D02B91B69EE2B67602506D8308DB5D4EAF3EAAAAAAAAAAAAAA
HMAC: 4BE3BCEFCF2F06C922BD6D487BBA7E67C9B717BCF2852083854E7555620473AD
Signature in message: 01E3BCEFCF2F06C922BD6D487BBA7E67C9B717BC
4775 Message signed
4783 Message to send has been signed
4789 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=11,pt=0,l=5,sg=1,ft=0,st=OK:Relay
4795 Skipping security for command 3 type 16
4802 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
4808 Nonce requested from 0. Waiting...
4933 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:2385BA03A156C8D203085EE05B480A4819CC88E82D9BA6209F
4942 Skipping security for command 3 type 17
4946 Nonce received from 0.
4950 Proceeding with signing...
Message to process: 01001E030CFF312E30
Current nonce: 2385BA03A156C8D203085EE05B480A4819CC88E82D9BA6209FAAAAAAAAAAAAAA
HMAC: F3DDCD53799743889B645AC6524B32B4AEB4B71E368CCE2BE60CC00E0AD2D183
Signature in message: 01DDCD53799743889B645AC6524B32B4AEB4B71E368C
5043 Message signed
5050 Message to send has been signed
5056 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=12,pt=0,l=3,sg=1,ft=0,st=OK:1.0
5062 Skipping security for command 3 type 16
5069 TSF:MSG:SEND,1-1-0-0,s=1,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
5075 Nonce requested from 0. Waiting...
5200 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:F1048244D308662147413A8531A71EF5C5E241710A859D7562
5210 Skipping security for command 3 type 17
5214 Nonce received from 0.
5217 Proceeding with signing...
Message to process: 010006000301
Current nonce: F1048244D308662147413A8531A71EF5C5E241710A859D7562AAAAAAAAAAAAAA
HMAC: 4EE5C5B659AF41CC4B5C9315F94E1A22E2DF10FAD361061CB3DB7925952BFDAE
Signature in message: 01E5C5B659AF41CC4B5C9315F94E1A22E2DF10FAD361061CB3
5310 Message signed
5317 Message to send has been signed
5323 TSF:MSG:SEND,1-1-0-0,s=1,c=0,t=3,pt=0,l=0,sg=1,ft=0,st=OK:
5329 Skipping security for command 3 type 16
5336 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
5342 Nonce requested from 0. Waiting...
5468 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:24D0165B9B9152F2003597B3747DC61B9C67C595A1518C31BD
5477 Skipping security for command 3 type 17
5481 Nonce received from 0.
5483 Proceeding with signing...
Message to process: 0100B6030BFF54656D7065726174757265416E6448756D6964697479
Current nonce: 24D0165B9B9152F2003597B3747DC61B9C67C595A1518C31BDAAAAAAAAAAAAAA
HMAC: 513E8E942127E5E2D512CE288F2B7E6418B8809F69B8B1EAE20D97A4407F9C86
Signature in message: 013E8E
5577 Message signed
5584 Message to send has been signed
5591 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=11,pt=0,l=22,sg=1,ft=0,st=OK:TemperatureAndHumidity
5599 Skipping security for command 3 type 16
5605 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
5611 Nonce requested from 0. Waiting...
5736 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:F95653815901C8FACA219583E9C6FEA53596238E460528DA6A
5746 Skipping security for command 3 type 17
5750 Nonce received from 0.
5752 Proceeding with signing...
Message to process: 01001E030CFF312E31
Current nonce: F95653815901C8FACA219583E9C6FEA53596238E460528DA6AAAAAAAAAAAAAAA
HMAC: 22FD4A335914B1FA7065E23D2B0C98FFB67E06B582AA0C8B3865B44CE9E1D49E
Signature in message: 01FD4A335914B1FA7065E23D2B0C98FFB67E06B582AA
5847 Message signed
5854 Message to send has been signed
5860 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=12,pt=0,l=3,sg=1,ft=0,st=OK:1.1
5866 Skipping security for command 3 type 16
5872 TSF:MSG:SEND,1-1-0-0,s=0,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
5878 Nonce requested from 0. Waiting...
6003 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:D356C66B145EA4E7DCF69EC5B3C20E38D6046C50A4FEACE71B
6013 Skipping security for command 3 type 17
6018 Nonce received from 0.
6020 Proceeding with signing...
Message to process: 010006000700
Current nonce: D356C66B145EA4E7DCF69EC5B3C20E38D6046C50A4FEACE71BAAAAAAAAAAAAAA
HMAC: F4E7923AA716F2CE850EB4A27962F15BF36941D559BA1DCF45C1821C7AD8E479
Signature in message: 01E7923AA716F2CE850EB4A27962F15BF36941D559BA1DCF45
6114 Message signed
6121 Message to send has been signed
6127 TSF:MSG:SEND,1-1-0-0,s=0,c=0,t=7,pt=0,l=0,sg=1,ft=0,st=OK:
6132 Skipping security for command 3 type 16
6139 TSF:MSG:SEND,1-1-0-0,s=1,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
6146 Nonce requested from 0. Waiting...
6270 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:E4DDE1558F406F93C24ACC4978B5DAD078700CB3E898D665BB
6280 Skipping security for command 3 type 17
6284 Nonce received from 0.
6287 Proceeding with signing...
Message to process: 010006000601
Current nonce: E4DDE1558F406F93C24ACC4978B5DAD078700CB3E898D665BBAAAAAAAAAAAAAA
HMAC: 17D9D7F016D4900614542F96199D1C1848E66826E164117C3F91395B119DB817
Signature in message: 01D9D7F016D4900614542F96199D1C1848E66826E164117C3F
6380 Message signed
6387 Message to send has been signed
6393 TSF:MSG:SEND,1-1-0-0,s=1,c=0,t=6,pt=0,l=0,sg=1,ft=0,st=OK:
6400 MCO:REG:REQ
6401 Skipping security for command 3 type 26
6408 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=26,pt=1,l=1,sg=1,ft=0,st=OK:2
6514 TSF:MSG:READ,0-0-1,s=255,c=3,t=16,pt=0,l=0,sg=0:
6519 Skipping security for command 3 type 16
SHA256: 70A5921ABD527FBF58E2644ACAC3EB9D7D190A1ECFA2B45BB400000000000000
6539 Skipping security for command 3 type 17
6551 TSF:MSG:SEND,1-1-0-0,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:70A5921ABD527FBF58E2644ACAC3EB9D7D190A1ECFA2B45BB4
6561 Transmitted nonce
6681 TSF:MSG:READ,0-0-1,s=255,c=3,t=27,pt=1,l=1,sg=1:1
Signature in message: 017F60D164B7EF1EE9F5664945AEE360F44F196E52428D27
Message to process: 00010E231BFF01
Current nonce: 70A5921ABD527FBF58E2644ACAC3EB9D7D190A1ECFA2B45BB4AAAAAAAAAAAAAA
HMAC: 71BFB4D075B6FC246460FC35C2173D8DBD366ABF0A6ED0C23FA2F84AC4293267
Signature bad: 01BFB4D075B6FC246460FC35C2173D8DBD366ABF0A6ED0C2
6782 Signature verification failed!
6791 !TSF:MSG:SIGN VERIFY FAIL
6794 MCO:BGN:STP
6796 MCO:SLP:MS=1000,SMS=0,I1=255,M1=255,I2=255,M2=255
6801 !MCO:SLP:REP
7803 MCO:BGN:INIT OK,TSP=1
7827 Skipping security for command 3 type 16
7834 TSF:MSG:SEND,1-1-0-0,s=1,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
7840 Nonce requested from 0. Waiting...
7872 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:B946C285F3F5F9204731209AF33E759FF1F604EADDAC89BE1C
7881 Skipping security for command 3 type 17
7885 Nonce received from 0.
7888 Proceeding with signing...
Message to process: 01002EE100010000C04101
Current nonce: B946C285F3F5F9204731209AF33E759FF1F604EADDAC89BE1CAAAAAAAAAAAAAA
HMAC: 4BE74C2A504B304F48E28201FBB2B85E10BD50EB7C577F3F443691573796A4F6
Signature in message: 01E74C2A504B304F48E28201FBB2B85E10BD50EB
7982 Message signed
7989 Message to send has been signed
7995 TSF:MSG:SEND,1-1-0-0,s=1,c=1,t=0,pt=7,l=5,sg=1,ft=0,st=OK:24.0
T: 24.00
8002 Skipping security for command 3 type 16
8008 TSF:MSG:SEND,1-1-0-0,s=0,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
8014 Nonce requested from 0. Waiting...
8153 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:AC6CB618B3BB07F385D25228E62B753BF888DA6351087FD39D
8162 Skipping security for command 3 type 17
8166 Nonce received from 0.
8169 Proceeding with signing...
Message to process: 01002EE101000000384201
Current nonce: AC6CB618B3BB07F385D25228E62B753BF888DA6351087FD39DAAAAAAAAAAAAAA
HMAC: EB51796D338A1717D7B544C78054CBE9E39D901D56F76EBA9A61CC753EFADB59
Signature in message: 0151796D338A1717D7B544C78054CBE9E39D901D
8262 Message signed
8269 Message to send has been signed
8275 TSF:MSG:SEND,1-1-0-0,s=0,c=1,t=1,pt=7,l=5,sg=1,ft=0,st=OK:46.0
H: 46.00
8283 MCO:SLP:MS=60000,SMS=0,I1=255,M1=255,I2=255,M2=255
8288 !MCO:SLP:REP
68311 Skipping security for command 3 type 16
68317 TSF:MSG:SEND,1-1-0-0,s=0,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
68323 Nonce requested from 0. Waiting...
68356 TSF:MSG:READ,0-0-1,s=255,c=3,t=17,pt=6,l=25,sg=1:8A0A85658B3A6AA9ABBBDC34E3B6891159CF3BD3369A0334BA
68365 Skipping security for command 3 type 17
68369 Nonce received from 0.
68372 Proceeding with signing...
Message to process: 01002EE101000000344201
Current nonce: 8A0A85658B3A6AA9ABBBDC34E3B6891159CF3BD3369A0334BAAAAAAAAAAAAAAA
HMAC: 6D6A1E530B4840BFF51DD3D926CEE1761909EB6F458B16F0D7CF2EBBB48321CB
Signature in message: 016A1E530B4840BFF51DD3D926CEE1761909EB6F
68465 Message signed
68473 Message to send has been signed
68482 TSF:MSG:SEND,1-1-0-0,s=0,c=1,t=1,pt=7,l=5,sg=1,ft=0,st=OK:45.0
H: 45.00
68489 MCO:SLP:MS=60000,SMS=0,I1=255,M1=255,I2=255,M2=255
68494 !MCO:SLP:REP

This is without using whitelisting, just signing. The node and gateway are both working in regular mode. I am able to send a command through Domoticz to turn on/off the relay and also see the temperature sensor attached to the same arduino.
All I added to the scetches of the GW and node was the following:

// Select soft/hardware signing method
#define MY_SIGNING_SOFT //!< Software signing
//#define MY_SIGNING_ATSHA204 //!< Hardware signing using ATSHA204A

// Enable node whitelisting
//#define MY_SIGNING_NODE_WHITELISTING {{.nodeId = GATEWAY_ADDRESS,.serial = {0x09,0x08,0x07,0x06,0x05,0x04,0x03,0x02,0x01}}}
// Enable this if you want destination node to sign all messages sent to this node.
#define MY_SIGNING_REQUEST_SIGNATURES


// SETTINGS FOR MY_SIGNING_SOFT
#define MY_SIGNING_SOFT_RANDOMSEED_PIN A5 //!< Unconnected analog pin for random seed

// SETTINGS FOR MY_SIGNING_ATSHA204
//#define MY_SIGNING_ATSHA204_PIN 17 //!< A3 - pin where ATSHA204 is attached

What step am I missing?
Thanks

[Anticimex]

@karelsmits Any configuration settings you do in your sketch MUST be placed before

#include <MySensors.h>

[Anticimex]

@karelsmits Also, you cannot have the same whitelist on both GW and node. Each have their own serial, and nodeId so they have different whitelists. You had this in your original settings. They were correct and in line with the personalization data you provided.
Just make sure that these settings take place before including MySensors.h and make sure you don't have settings in MyConfig.h that would override the settings you do in your sketch,

[Anticimex]

@karelsmits
I have checked your most recent log and it looks very strange. Signatures are correctly verified in one direction but not the other.
I honestly have no explanation for how this is possible.
Could you try the beta version? That I have verified myself to be working.
But be advised; you will have to re-run the personalization procedure if you do that. Details are here.
The beta also provide some other security related options that you could try.
Firstly I recommend that you define MY_SIGNING_WEAK_SECURITY since security is a bit tighter for the next release (a GW will remember and not reset the signing preferences of a node unless that flag is set, and that could be a pain when testing signing but not committing to stick with it).

[karelsmits]

okay will do and post you. thank again.
BTW where do i find the beta link?

[karelsmits]

sorry, but do you mind pointing the beta link you're referring to?
thanks.

[Anticimex]

@karelsmits
https://github.com/mysensors/MySensors/archive/development.zip

[karelsmits]

Hi, thanks for your help so far.
I am usinf the version you recommended. Now the signing seems to work, because I get a confirmation message from the gateway and the node. For some reason the gateway reports that the connection is dropped, it keeps on happening. What is wrong?
I am only using signing, not whitelisting
When signing is disabled, everything is working.
Just FYI,I did not change anything in MyConfig.h

Gateway:
__  __       ____
|  \/  |_   _/ ___|  ___ _ __  ___  ___  _ __ ___
| |\/| | | | \___ \ / _ \ `_ \/ __|/ _ \| `__/ __|
| |  | | |_| |___| |  __/ | | \__ \  _  | |  \__ \
|_|  |_|\__, |____/ \___|_| |_|___/\___/|_|  |___/
        |___/                      2.2.0-beta

17 MCO:BGN:INIT GW,CP=RNNGAS--,VER=2.2.0-beta
49 SGN:PER:OK
79 SGN:INI:BND OK
81 TSM:INIT
82 TSF:WUR:MS=0
90 TSM:INIT:TSP OK
91 TSM:INIT:GW MODE
93 TSM:READY:ID=0,PAR=0,DIS=0
96 MCO:REG:NOT NEEDED
IP: 192.168.0.249
1398 MCO:BGN:STP
1400 MCO:BGN:INIT OK,TSP=1
2089 TSF:MSG:READ,9-9-255,s=255,c=3,t=7,pt=0,l=0,sg=0:
2095 TSF:MSG:BC
2097 TSF:MSG:FPAR REQ,ID=9
2099 TSF:CKU:OK,FCTRL
2101 TSF:MSG:GWL OK
2158 SGN:SKP:MSG CMD=3,TYPE=8
2164 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=8,pt=1,l=1,sg=0,ft=0,st=OK:0
4141 TSF:MSG:READ,9-9-0,s=255,c=3,t=24,pt=1,l=1,sg=0:1
4146 SGN:SKP:MSG CMD=3,TYPE=24
4149 TSF:MSG:PINGED,ID=9,HP=1
4151 SGN:SKP:MSG CMD=3,TYPE=25
4158 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=25,pt=1,l=1,sg=0,ft=0,st=OK:1
4180 TSF:MSG:READ,9-9-0,s=255,c=3,t=15,pt=6,l=2,sg=0:0101
4186 SGN:SKP:MSG CMD=3,TYPE=15
4189 SGN:PRE:SGN REQ,FROM=9
4192 SGN:PRE:SGN REQ,TO=9
4194 SGN:PRE:WHI NREQ,TO=9
4196 SGN:SKP:MSG CMD=3,TYPE=15
4201 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0101
4207 SGN:PRE:XMT,TO=9
4215 TSF:MSG:READ,9-9-0,s=255,c=3,t=16,pt=0,l=0,sg=0:
4220 SGN:SKP:MSG CMD=3,TYPE=16
4238 SGN:SKP:MSG CMD=3,TYPE=17
4246 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:<NONCE>
4253 SGN:NCE:XMT,TO=0
4355 TSF:MSG:READ,9-9-0,s=255,c=0,t=17,pt=0,l=10,sg=1:2.2.0-beta
4361 SGN:BND:NONCE=4F5AD49AA0F433BE26060A9B1C55F23CC577EA281775DC0B02AAAAAAAAAAAAAA
4448 SGN:BND:HMAC=78CCB5B0692D9B11DDE1FFB97C0DE0A17040DD6D55BC5BF357163635ACAAE484
4456 SGN:VER:OK
4458 TSF:MSG:READ,9-9-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
4462 SGN:SKP:MSG CMD=3,TYPE=16
4480 SGN:SKP:MSG CMD=3,TYPE=17
4486 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
4492 SGN:NCE:XMT,TO=0
4594 TSF:MSG:READ,9-9-0,s=255,c=3,t=6,pt=1,l=1,sg=1:0
4599 SGN:BND:NONCE=A7CA0C7EF09F65DE5D02E9351E48E2A3D6DBF3537ECCF333F4AAAAAAAAAAAAAA
4686 SGN:BND:HMAC=E731F01B8DF928A36DACBBCDE45651A4B7BE0B1D1248FAB2936CADC0BE85B9AF
4694 SGN:VER:OK
6606 TSF:MSG:READ,9-9-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
6611 SGN:SKP:MSG CMD=3,TYPE=16
6628 SGN:SKP:MSG CMD=3,TYPE=17
6634 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
6641 SGN:NCE:XMT,TO=0
6743 TSF:MSG:READ,9-9-0,s=255,c=3,t=11,pt=0,l=11,sg=1:Secure Lock
6749 SGN:BND:NONCE=CFCF368C893918E8B30F5BB9BD05BE2137CE6BC1C9D0A0C46AAAAAAAAAAAAAAA
6836 SGN:BND:HMAC=E8CCAAE5D1577EFAE089947D520345555DF0A2A7038CDB17E8B9D897C41B5137
6844 SGN:VER:OK
6846 TSF:MSG:READ,9-9-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
6850 SGN:SKP:MSG CMD=3,TYPE=16
6867 SGN:SKP:MSG CMD=3,TYPE=17
6874 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
6880 SGN:NCE:XMT,TO=0
6985 TSF:MSG:READ,9-9-0,s=255,c=3,t=12,pt=0,l=3,sg=1:1.0
6990 SGN:BND:NONCE=81349D41F58F0A4219206D8C6A6C5CD822CD125BA0E22C1D08AAAAAAAAAAAAAA
7077 SGN:BND:HMAC=144CC1F339C5D15BADE41B8CB8EC95FC6AAA37249EB4198169206F8D2116B6C0
7085 SGN:VER:OK
7087 TSF:MSG:READ,9-9-0,s=1,c=3,t=16,pt=0,l=0,sg=1:
7092 SGN:SKP:MSG CMD=3,TYPE=16
7109 SGN:SKP:MSG CMD=3,TYPE=17
7114 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
7121 SGN:NCE:XMT,TO=0
7224 TSF:MSG:READ,9-9-0,s=1,c=0,t=19,pt=0,l=14,sg=1:SecureActuator
7230 SGN:BND:NONCE=80764434FE2DB0B952CE5DB13822E08EA76E4CC32848155EBCAAAAAAAAAAAAAA
7317 SGN:BND:HMAC=7EBFF55E368306D2C1E9A0339DED228E80A0887140052FA13AABF1E5FE533218
7324 SGN:VER:OK
7326 TSF:MSG:READ,9-9-0,s=255,c=3,t=26,pt=1,l=1,sg=1:2
7331 SGN:SKP:MSG CMD=3,TYPE=26
7334 SGN:SKP:MSG CMD=3,TYPE=16
7340 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
7346 SGN:SGN:NCE REQ,TO=9
9250 TSF:MSG:READ,9-9-0,s=255,c=3,t=26,pt=1,l=1,sg=1:2
9255 SGN:SKP:MSG CMD=3,TYPE=26
9259 SGN:SKP:MSG CMD=3,TYPE=16
9264 TSF:MSG:SEND,58-80-9-77,s=67,c=7,t=32,pt=2,l=10,sg=0,ft=0,st=OK:17485
9270 SGN:SGN:NCE REQ,TO=9
 __  __       ____
|  \/  |_   _/ ___|  ___ _ __  ___  ___  _ __ ___
| |\/| | | | \___ \ / _ \ `_ \/ __|/ _ \| `__/ __|
| |  | | |_| |___| |  __/ | | \__ \  _  | |  \__ \
|_|  |_|\__, |____/ \___|_| |_|___/\___/|_|  |___/
        |___/                      2.2.0-beta

18 MCO:BGN:INIT GW,CP=RNNGAS--,VER=2.2.0-beta
50 SGN:PER:OK
77 SGN:INI:BND OK
79 TSM:INIT
80 TSF:WUR:MS=0
88 TSM:INIT:TSP OK
90 TSM:INIT:GW MODE
91 TSM:READY:ID=0,PAR=0,DIS=0
94 MCO:REG:NOT NEEDED
IP: 192.168.0.249
1397 MCO:BGN:STP
1398 MCO:BGN:INIT OK,TSP=1
1988 TSF:MSG:READ,9-9-0,s=255,c=3,t=26,pt=1,l=1,sg=1:2
1993 SGN:SKP:MSG CMD=3,TYPE=26
1996 SGN:SKP:MSG CMD=3,TYPE=16
2000 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
2007 SGN:SGN:NCE REQ,TO=9
2030 TSF:MSG:READ,9-9-0,s=255,c=3,t=17,pt=6,l=25,sg=0:<NONCE>
2035 SGN:SKP:MSG CMD=3,TYPE=17
2038 SGN:NCE:FROM=9
2040 SGN:NCE:15!=9 (DROPPED)
 __  __       ____
|  \/  |_   _/ ___|  ___ _ __  ___  ___  _ __ ___
| |\/| | | | \___ \ / _ \ `_ \/ __|/ _ \| `__/ __|
| |  | | |_| |___| |  __/ | | \__ \  _  | |  \__ \
|_|  |_|\__, |____/ \___|_| |_|___/\___/|_|  |___/
        |___/                      2.2.0-beta

18 MCO:BGN:INIT GW,CP=RNNGAS--,VER=2.2.0-beta
51 SGN:PER:OK
80 SGN:INI:BND OK
82 TSM:INIT
83 TSF:WUR:MS=0
91 TSM:INIT:TSP OK
92 TSM:INIT:GW MODE
94 TSM:READY:ID=0,PAR=0,DIS=0
97 MCO:REG:NOT NEEDED
IP: 192.168.0.249
1399 MCO:BGN:STP
1401 MCO:BGN:INIT OK,TSP=1
1956 TSF:MSG:READ,9-9-0,s=255,c=3,t=26,pt=1,l=1,sg=1:2
1961 SGN:SKP:MSG CMD=3,TYPE=26
1965 SGN:SKP:MSG CMD=3,TYPE=16
1969 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
1975 SGN:SGN:NCE REQ,TO=9
1998 TSF:MSG:READ,9-9-0,s=255,c=3,t=17,pt=6,l=25,sg=0:<NONCE>
2003 SGN:SKP:MSG CMD=3,TYPE=17
2007 SGN:NCE:FROM=9
2009 SGN:NCE:7!=9 (DROPPED)
 __  __       ____
|  \/  |_   _/ ___|  ___ _ __  ___  ___  _ __ ___
| |\/| | | | \___ \ / _ \ `_ \/ __|/ _ \| `__/ __|
| |  | | |_| |___| |  __/ | | \__ \  _  | |  \__ \
|_|  |_|\__, |____/ \___|_| |_|___/\___/|_|  |___/
        |___/                      2.2.0-beta

18 MCO:BGN:INIT GW,CP=RNNGAS--,VER=2.2.0-beta
51 SGN:PER:OK
79 SGN:INI:BND OK
81 TSM:INIT
82 TSF:WUR:MS=0
90 TSM:INIT:TSP OK
92 TSM:INIT:GW MODE
94 TSM:READY:ID=0,PAR=0,DIS=0
96 MCO:REG:NOT NEEDED
IP: 192.168.0.249
1399 MCO:BGN:STP
1401 MCO:BGN:INIT OK,TSP=1
1965 TSF:MSG:READ,9-9-0,s=255,c=3,t=16,pt=0,l=0,sg=1:
1969 SGN:SKP:MSG CMD=3,TYPE=16
1986 SGN:SKP:MSG CMD=3,TYPE=17
1991 TSF:MSG:SEND,0-0-9-9,s=255,c=3,t=17,pt=6,l=25,sg=1,ft=0,st=OK:<NONCE>
1998 SGN:NCE:XMT,TO=0
2101 TSF:MSG:READ,9-9-0,s=255,c=3,t=23,pt=0,l=3,sg=1:LDB
2107 SGN:BND:NONCE=82C773EAE20327A3D8AF62421F246E67B56C3B228CA6370164AAAAAAAAAAAAAA
2194 SGN:BND:HMAC=52A2F9D7C90A5A8EB3B5820C654689041561D8FB42BCE89A7B9A91B3D73353E2
2201 SGN:VER:OK

Node:
__  __       ____
|  \/  |_   _/ ___|  ___ _ __  ___  ___  _ __ ___
| |\/| | | | \___ \ / _ \ `_ \/ __|/ _ \| `__/ __|
| |  | | |_| |___| |  __/ | | \__ \  _  | |  \__ \
|_|  |_|\__, |____/ \___|_| |_|___/\___/|_|  |___/
        |___/                      2.2.0-beta

17 MCO:BGN:INIT NODE,CP=RNNNAS--,VER=2.2.0-beta
49 SGN:PER:OK
77 SGN:INI:BND OK
79 TSM:INIT
80 TSF:WUR:MS=0
88 TSM:INIT:TSP OK
89 TSF:SID:OK,ID=9
91 TSM:FPAR
92 SGN:SGN:NREQ=255
129 TSF:MSG:SEND,9-9-255-255,s=255,c=3,t=7,pt=0,l=0,sg=0,ft=0,st=OK:
2137 !TSM:FPAR:NO REPLY
2139 TSM:FPAR
2140 SGN:SGN:NREQ=255
2177 TSF:MSG:SEND,9-9-255-255,s=255,c=3,t=7,pt=0,l=0,sg=0,ft=0,st=OK:
4185 !TSM:FPAR:NO REPLY
4187 TSM:FPAR
4188 SGN:SGN:NREQ=255
4225 TSF:MSG:SEND,9-9-255-255,s=255,c=3,t=7,pt=0,l=0,sg=0,ft=0,st=OK:
4265 TSF:MSG:READ,0-0-9,s=255,c=3,t=8,pt=1,l=1,sg=0:0
4270 SGN:SKP:MSG CMD=3,TYPE=8
4273 TSF:MSG:FPAR OK,ID=0,D=1
6233 TSM:FPAR:OK
6234 TSM:ID
6235 TSM:ID:OK
6237 TSM:UPL
6238 SGN:SKP:MSG CMD=3,TYPE=24
6242 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=24,pt=1,l=1,sg=0,ft=0,st=OK:1
6259 TSF:MSG:READ,0-0-9,s=255,c=3,t=25,pt=1,l=1,sg=0:1
6263 SGN:SKP:MSG CMD=3,TYPE=25
6266 TSF:MSG:PONG RECV,HP=1
6269 TSM:UPL:OK
6270 TSM:READY:ID=9,PAR=0,DIS=1
6274 SGN:PRE:SGN REQ
6276 SGN:PRE:WHI NREQ
6278 SGN:SKP:MSG CMD=3,TYPE=15
6282 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=15,pt=6,l=2,sg=0,ft=0,st=OK:0101
6289 SGN:PRE:XMT,TO=0
6291 SGN:PRE:WAIT GW
6301 TSF:MSG:READ,0-0-9,s=255,c=3,t=15,pt=6,l=2,sg=0:0101
6307 SGN:SKP:MSG CMD=3,TYPE=15
6309 SGN:PRE:SGN REQ,FROM=0
6312 SGN:SKP:MSG CMD=3,TYPE=16
6317 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=16,pt=0,l=0,sg=0,ft=0,st=OK:
6323 SGN:SGN:NCE REQ,TO=0
6347 TSF:MSG:READ,0-0-9,s=255,c=3,t=17,pt=6,l=25,sg=0:<NONCE>
6352 SGN:SKP:MSG CMD=3,TYPE=17
6355 SGN:NCE:FROM=0
6358 SGN:BND:NONCE=4F5AD49AA0F433BE26060A9B1C55F23CC577EA281775DC0B02AAAAAAAAAAAAAA
6445 SGN:BND:HMAC=78CCB5B0692D9B11DDE1FFB97C0DE0A17040DD6D55BC5BF357163635ACAAE484
6452 SGN:SGN:SGN
6456 TSF:MSG:SEND,9-9-0-0,s=255,c=0,t=17,pt=0,l=10,sg=1,ft=0,st=OK:2.2.0-beta
6463 SGN:SKP:MSG CMD=3,TYPE=16
6469 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
6475 SGN:SGN:NCE REQ,TO=0
6586 TSF:MSG:READ,0-0-9,s=255,c=3,t=17,pt=6,l=25,sg=1:<NONCE>
6592 SGN:SKP:MSG CMD=3,TYPE=17
6594 SGN:NCE:FROM=0
6596 SGN:BND:NONCE=A7CA0C7EF09F65DE5D02E9351E48E2A3D6DBF3537ECCF333F4AAAAAAAAAAAAAA
6684 SGN:BND:HMAC=E731F01B8DF928A36DACBBCDE45651A4B7BE0B1D1248FAB2936CADC0BE85B9AF
6691 SGN:SGN:SGN
6695 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=6,pt=1,l=1,sg=1,ft=0,st=OK:0
8702 SGN:SKP:MSG CMD=3,TYPE=16
8708 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
8714 SGN:SGN:NCE REQ,TO=0
8734 TSF:MSG:READ,0-0-9,s=255,c=3,t=17,pt=6,l=25,sg=1:<NONCE>
8740 SGN:SKP:MSG CMD=3,TYPE=17
8743 SGN:NCE:FROM=0
8745 SGN:BND:NONCE=CFCF368C893918E8B30F5BB9BD05BE2137CE6BC1C9D0A0C46AAAAAAAAAAAAAAA
8833 SGN:BND:HMAC=E8CCAAE5D1577EFAE089947D520345555DF0A2A7038CDB17E8B9D897C41B5137
8840 SGN:SGN:SGN
8844 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=11,pt=0,l=11,sg=1,ft=0,st=OK:Secure Lock
8851 SGN:SKP:MSG CMD=3,TYPE=16
8857 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
8863 SGN:SGN:NCE REQ,TO=0
8974 TSF:MSG:READ,0-0-9,s=255,c=3,t=17,pt=6,l=25,sg=1:<NONCE>
8980 SGN:SKP:MSG CMD=3,TYPE=17
8982 SGN:NCE:FROM=0
8984 SGN:BND:NONCE=81349D41F58F0A4219206D8C6A6C5CD822CD125BA0E22C1D08AAAAAAAAAAAAAA
9071 SGN:BND:HMAC=144CC1F339C5D15BADE41B8CB8EC95FC6AAA37249EB4198169206F8D2116B6C0
9079 SGN:SGN:SGN
9086 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=12,pt=0,l=3,sg=1,ft=0,st=OK:1.0
9093 SGN:SKP:MSG CMD=3,TYPE=16
9098 TSF:MSG:SEND,9-9-0-0,s=1,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
9104 SGN:SGN:NCE REQ,TO=0
9216 TSF:MSG:READ,0-0-9,s=255,c=3,t=17,pt=6,l=25,sg=1:<NONCE>
9221 SGN:SKP:MSG CMD=3,TYPE=17
9224 SGN:NCE:FROM=0
9226 SGN:BND:NONCE=80764434FE2DB0B952CE5DB13822E08EA76E4CC32848155EBCAAAAAAAAAAAAAA
9313 SGN:BND:HMAC=7EBFF55E368306D2C1E9A0339DED228E80A0887140052FA13AABF1E5FE533218
9320 SGN:SGN:SGN
9324 TSF:MSG:SEND,9-9-0-0,s=1,c=0,t=19,pt=0,l=14,sg=1,ft=0,st=OK:SecureActuator
9332 MCO:REG:REQ
9333 SGN:SKP:MSG CMD=3,TYPE=26
9339 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=26,pt=1,l=1,sg=1,ft=0,st=OK:2
9441 TSF:MSG:READ,0-0-9,s=255,c=3,t=16,pt=0,l=0,sg=1:
9445 !TSF:MSG:PVER,1=2
11346 SGN:SKP:MSG CMD=3,TYPE=26
11352 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=26,pt=1,l=1,sg=1,ft=0,st=OK:2
11364 TSF:MSG:READ,58-80-77,s=67,c=7,t=32,pt=2,l=10,sg=0:17485
11369 !TSF:MSG:PVER,3=2
13358 SGN:SKP:MSG CMD=3,TYPE=26
13363 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=26,pt=1,l=1,sg=1,ft=0,st=OK:2
13374 TSF:MSG:READ,0-0-9,s=255,c=3,t=16,pt=0,l=0,sg=0:
13379 SGN:SKP:MSG CMD=3,TYPE=16
13382 SGN:NCE:LEFT=4
13399 SGN:SKP:MSG CMD=3,TYPE=17
13404 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:<NONCE>
13411 SGN:NCE:XMT,TO=9
15369 SGN:SKP:MSG CMD=3,TYPE=26
15374 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=26,pt=1,l=1,sg=1,ft=0,st=OK:2
15385 TSF:MSG:READ,0-0-9,s=255,c=3,t=16,pt=0,l=0,sg=0:
15390 SGN:SKP:MSG CMD=3,TYPE=16
15393 SGN:NCE:LEFT=3
15410 SGN:SKP:MSG CMD=3,TYPE=17
15415 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=17,pt=6,l=25,sg=0,ft=0,st=OK:<NONCE>
15422 SGN:NCE:XMT,TO=9
17382 MCO:NLK:NODE LOCKED. TO UNLOCK, GND PIN 14 AND RESET
17387 SGN:SKP:MSG CMD=3,TYPE=16
17392 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=16,pt=0,l=0,sg=1,ft=0,st=OK:
17398 SGN:SGN:NCE REQ,TO=0
17420 TSF:MSG:READ,0-0-9,s=255,c=3,t=17,pt=6,l=25,sg=1:<NONCE>
17425 SGN:SKP:MSG CMD=3,TYPE=17
17428 SGN:NCE:FROM=0
17430 SGN:BND:NONCE=82C773EAE20327A3D8AF62421F246E67B56C3B228CA6370164AAAAAAAAAAAAAA
17517 SGN:BND:HMAC=52A2F9D7C90A5A8EB3B5820C654689041561D8FB42BCE89A7B9A91B3D73353E2
17525 SGN:SGN:SGN
17529 TSF:MSG:SEND,9-9-0-0,s=255,c=3,t=23,pt=0,l=3,sg=1,ft=0,st=OK:LDB
17536 MCO:NLK:TSL

Thank you

[karelsmits]

This is my node code regarding signing:

#define MY_NODE_ID 5
 
#define MY_DEBUG //!< Enable debug prints to serial monitor
#define MY_DEBUG_VERBOSE_SIGNING //!< Enable signing related debug prints to serial monitor
#define MY_NODE_LOCK_FEATURE //!< Enable lockdown of node if suspicious activity is detected

// Enable and select radio type attached
#define MY_RADIO_NRF24 //!< NRF24L01 radio driver
//#define MY_RADIO_RFM69 //!< RFM69 radio driver

// Select soft/hardware signing method
#define MY_SIGNING_SOFT //!< Software signing
//#define MY_SIGNING_ATSHA204 //!< Hardware signing using ATSHA204A

// Enable node whitelisting
//#define MY_SIGNING_NODE_WHITELISTING {{.nodeId = GATEWAY_ADDRESS,.serial = {0x09,0x08,0x07,0x06,0x05,0x04,0x03,0x02,0x01}}}
// Enable this if you want destination node to sign all messages sent to this node.
//#define MY_SIGNING_REQUEST_SIGNATURES


// SETTINGS FOR MY_SIGNING_SOFT
#define MY_SIGNING_SOFT_RANDOMSEED_PIN A5 //!< Unconnected analog pin for random seed

// SETTINGS FOR MY_SIGNING_ATSHA204
#define MY_SIGNING_ATSHA204_PIN 17 //!< A3 - pin where ATSHA204 is attached

[Anticimex]

@karelsmits on beta with all debugging enabled and signing, code gets so large that the stack becomes too small. This can cause "cheap" gateways to crash and reboot. I am guessing you run some atmga328p based gw right?
Try to disable at least the verbose debug, possible all debug on the GW and it should run better.

[karelsmits]

Dear Anticimex,
Thank you so much for helping out.
This is what I had to do to solve this:
I used the development edition of mysensors, I had to disable debugging, because indeed I use cheap boards. Then I also had to use the personalizer from the development and not change anything in the config file.
I just have 1 more question for now. Everything is secured for now, the only thing which isn’t, according to my understanding, is that any controller could communicate with my Ethernet gateway. Of course I could specify the ip address of the controller I want to use in the Ethernet gateway ino file configurations, but an ip address could easily be “doubled” either by causing an ip-conflict, or just plugging out or somehow disabling my controller.
So, the question is; how can a code or something be specified, besides the ipaddress, in the gateway. And with that security code only, the gateway will be able to be controlled by a controller device like eg Domoticz.
.Thank you.

[Anticimex]

@karelsmits great that you got it up and running at last!
Regarding gateway security, the security of the library is limited to the OTA parts. It is assumed that you connect your gateway to a secure environment. Your LAN or USB host. If criminals can access your LAN you have a bigger problem than somebody spoofing your controller

[karelsmits]

when it says in the gateway code:

// The MAC address can be anything you want but should be unique on your network.
// Newer boards have a MAC address printed on the underside of the PCB, which you can (optionally) use.
// Note that most of the Ardunio examples use  "DEAD BEEF FEED" for the MAC address.
//#define MY_MAC_ADDRESS 0xDE, 0xAD, 0xBE, 0xEF, 0xFE, 0xED

which mac address is this referring to? the gateway? the controller?
And what happens if it doesn't match?

thanks