SIM 808 missing SSL functionality

Breakout boards, sensors, other Adafruit kits, etc.

Moderators: adafruit_support_bill, adafruit

Please be positive and constructive with your questions and comments.
User avatar
ttytyper
 
Posts: 4
Joined: Thu Nov 10, 2016 8:46 pm

Re: SIM 808 missing SSL functionality

Post by ttytyper »

@dy3

Thanks for taking the time to check up on SSL support. The SSL application note says that some verification takes places, but I'm curious how well it's implemented. Have you checked if the server certificate is actually verified? What happens if you connect to a site with an expired or self-signed certificate?

Also, do you know which CA certs are trusted by default? Can you install your own CA cert? I see in the application note that you can import certificates, but I don't see any mention of how they're used.

User avatar
dy3
 
Posts: 11
Joined: Sat Nov 05, 2016 10:02 am

Re: SIM 808 missing SSL functionality

Post by dy3 »

SSL is exciting to me right now because I did not know the extent it is being more or less ignored. I now share your curiosity on the actual implementation. I am developing what I call, 'infrastucture base' to be used in a number of device implementations as a common core. this weekend I am literally installing a version of my device into a black box for demonstration. It is Arduino MKR1000, MKR's WIFI101, Sim808 and I2C EEPROM. As soon as that is done I am going to revisit the issues you bring up. I will connect to some expired and self signed certs. I have a few accounts at SmarterAsp.Net and will test this there. I am sure there will be some shortcoming like that you indicate. But my prototype is fully functional and sufficient for my https demonstration needs. Please let me know any discoveries you are comfortable sharing. I will do the same.

I do not know which CA certs are trusted by default. There are a couple https sites I have been unable to hit properly. However, these are sites that accept http OR https and the redirect from http to https does not occur. On pure https sites I have yet to be denied. The expired and self-cert issues will be interesting. I have seen literature on installing a cert but no insights yet.
More soon, dy3

User avatar
adafruit2
 
Posts: 22144
Joined: Fri Mar 11, 2005 7:36 pm

Re: SIM 808 missing SSL functionality

Post by adafruit2 »

thanks! please post any info you figure out, e.g. how certs are verified (if at all), what root certs are included if so, what encryptions are supported, etc!

User avatar
dy3
 
Posts: 11
Joined: Sat Nov 05, 2016 10:02 am

Re: SIM 808 missing SSL functionality

Post by dy3 »

Roger this.

User avatar
andrei_ivanov
 
Posts: 26
Joined: Fri Jan 13, 2017 7:05 am

Re: SIM 808 missing SSL functionality

Post by andrei_ivanov »

Any updates on this?
I've just tested loading the Google page with HTTPS redirect enabled and it worked, but I really miss MQTT over TLS functionality :(

User avatar
kirito96
 
Posts: 2
Joined: Fri Apr 20, 2018 1:30 am

Re: SIM 808 missing SSL functionality

Post by kirito96 »

Just update the newest firmware for SIM808, problem solved, SSL is a new function

User avatar
ttytyper
 
Posts: 4
Joined: Thu Nov 10, 2016 8:46 pm

Re: SIM 808 missing SSL functionality

Post by ttytyper »

kirito96 wrote:Just update the newest firmware for SIM808, problem solved, SSL is a new function
That's great news! Where did you get the firmware? I have looked around a lot, but can't find it anywhere.

Also, TinyGSM got support for managing certs not long ago:
https://github.com/vshymanskyy/TinyGSM/ ... etCert.ino

User avatar
kirito96
 
Posts: 2
Joined: Fri Apr 20, 2018 1:30 am

Re: SIM 808 missing SSL functionality

Post by kirito96 »

ttytyper wrote: That's great news! Where did you get the firmware? I have looked around a lot, but can't find it anywhere.

Also, TinyGSM got support for managing certs not long ago:
https://github.com/vshymanskyy/TinyGSM/ ... etCert.ino
You can find it at the bottom of this page: https://www.itead.cc/wiki/SIM808_GSM/GPRS/GPS_Module
The file's name is 1418B02SIM808M32_BT_EAT

About how to upgrade firmware, you can easily find it on the internet, you just need a usb to uart adapter to communicate with sim808.

User avatar
marcelvanheist
 
Posts: 1
Joined: Fri Dec 14, 2018 7:31 am

Re: SIM 808 missing SSL functionality

Post by marcelvanheist »

I updated the SIM808 using the using the 'SIM800_Series_download_Tools_Customer_v1.19.rar' tool that can be found here: https://simcom.ee/documents/?sort_by=mo ... r=SIM800x/ (had to run in in windows 'as administrator'). I flashed '1418B04SIM808M32.rar' (https://simcom.ee/documents/?sort_by=mo ... ir=SIM808/) and after that command `AT+CIPSSL=?` returned `+CIPSSL: (0-1)`. This command previously returned `ERROR`. This is the command mentioned in the app doc here: https://simcom.ee/documents/SIM800x/SIM ... _V1.02.pdf

Edit: Version `SIM800_Series_download_Tools_Customer_v1.19` seems not to work always, Version 1.10 (SIM800_Series_download_Tools_Customer_v1.10.rar) does work 'better'...

Locked
Please be positive and constructive with your questions and comments.

Return to “Other Products from Adafruit”