@dy3
Thanks for taking the time to check up on SSL support. The SSL application note says that some verification takes places, but I'm curious how well it's implemented. Have you checked if the server certificate is actually verified? What happens if you connect to a site with an expired or self-signed certificate?
Also, do you know which CA certs are trusted by default? Can you install your own CA cert? I see in the application note that you can import certificates, but I don't see any mention of how they're used.
SIM 808 missing SSL functionality
Moderators: adafruit_support_bill, adafruit
Please be positive and constructive with your questions and comments.
- dy3
- Posts: 11
- Joined: Sat Nov 05, 2016 10:02 am
Re: SIM 808 missing SSL functionality
SSL is exciting to me right now because I did not know the extent it is being more or less ignored. I now share your curiosity on the actual implementation. I am developing what I call, 'infrastucture base' to be used in a number of device implementations as a common core. this weekend I am literally installing a version of my device into a black box for demonstration. It is Arduino MKR1000, MKR's WIFI101, Sim808 and I2C EEPROM. As soon as that is done I am going to revisit the issues you bring up. I will connect to some expired and self signed certs. I have a few accounts at SmarterAsp.Net and will test this there. I am sure there will be some shortcoming like that you indicate. But my prototype is fully functional and sufficient for my https demonstration needs. Please let me know any discoveries you are comfortable sharing. I will do the same.
I do not know which CA certs are trusted by default. There are a couple https sites I have been unable to hit properly. However, these are sites that accept http OR https and the redirect from http to https does not occur. On pure https sites I have yet to be denied. The expired and self-cert issues will be interesting. I have seen literature on installing a cert but no insights yet.
More soon, dy3
I do not know which CA certs are trusted by default. There are a couple https sites I have been unable to hit properly. However, these are sites that accept http OR https and the redirect from http to https does not occur. On pure https sites I have yet to be denied. The expired and self-cert issues will be interesting. I have seen literature on installing a cert but no insights yet.
More soon, dy3
- adafruit2
- Posts: 22144
- Joined: Fri Mar 11, 2005 7:36 pm
Re: SIM 808 missing SSL functionality
thanks! please post any info you figure out, e.g. how certs are verified (if at all), what root certs are included if so, what encryptions are supported, etc!
- dy3
- Posts: 11
- Joined: Sat Nov 05, 2016 10:02 am
Re: SIM 808 missing SSL functionality
Roger this.
- andrei_ivanov
- Posts: 26
- Joined: Fri Jan 13, 2017 7:05 am
Re: SIM 808 missing SSL functionality
Any updates on this?
I've just tested loading the Google page with HTTPS redirect enabled and it worked, but I really miss MQTT over TLS functionality :(
I've just tested loading the Google page with HTTPS redirect enabled and it worked, but I really miss MQTT over TLS functionality :(
- kirito96
- Posts: 2
- Joined: Fri Apr 20, 2018 1:30 am
Re: SIM 808 missing SSL functionality
Just update the newest firmware for SIM808, problem solved, SSL is a new function
- ttytyper
- Posts: 4
- Joined: Thu Nov 10, 2016 8:46 pm
Re: SIM 808 missing SSL functionality
That's great news! Where did you get the firmware? I have looked around a lot, but can't find it anywhere.kirito96 wrote:Just update the newest firmware for SIM808, problem solved, SSL is a new function
Also, TinyGSM got support for managing certs not long ago:
https://github.com/vshymanskyy/TinyGSM/ ... etCert.ino
- kirito96
- Posts: 2
- Joined: Fri Apr 20, 2018 1:30 am
Re: SIM 808 missing SSL functionality
You can find it at the bottom of this page: https://www.itead.cc/wiki/SIM808_GSM/GPRS/GPS_Modulettytyper wrote: That's great news! Where did you get the firmware? I have looked around a lot, but can't find it anywhere.
Also, TinyGSM got support for managing certs not long ago:
https://github.com/vshymanskyy/TinyGSM/ ... etCert.ino
The file's name is 1418B02SIM808M32_BT_EAT
About how to upgrade firmware, you can easily find it on the internet, you just need a usb to uart adapter to communicate with sim808.
- marcelvanheist
- Posts: 1
- Joined: Fri Dec 14, 2018 7:31 am
Re: SIM 808 missing SSL functionality
I updated the SIM808 using the using the 'SIM800_Series_download_Tools_Customer_v1.19.rar' tool that can be found here: https://simcom.ee/documents/?sort_by=mo ... r=SIM800x/ (had to run in in windows 'as administrator'). I flashed '1418B04SIM808M32.rar' (https://simcom.ee/documents/?sort_by=mo ... ir=SIM808/) and after that command `AT+CIPSSL=?` returned `+CIPSSL: (0-1)`. This command previously returned `ERROR`. This is the command mentioned in the app doc here: https://simcom.ee/documents/SIM800x/SIM ... _V1.02.pdf
Edit: Version `SIM800_Series_download_Tools_Customer_v1.19` seems not to work always, Version 1.10 (SIM800_Series_download_Tools_Customer_v1.10.rar) does work 'better'...
Edit: Version `SIM800_Series_download_Tools_Customer_v1.19` seems not to work always, Version 1.10 (SIM800_Series_download_Tools_Customer_v1.10.rar) does work 'better'...
Please be positive and constructive with your questions and comments.