NimbeLink Skywire LTE CAT1 User Manual

NimbeLink Skywire LTE CAT1 User Manual

Aws iot with tls
Hide thumbs Also See for Skywire LTE CAT1:

Advertisement

Quick Links

 
 
Skywire
AWS IoT with TLS 
User Manual 
NimbeLink Corp 
Updated: August 2018 
 
 
 
 
 
 
 
 
 
 
PN 30168 rev 9
LTE CAT1 
®
© NimbeLink Corp. 2018. All rights reserved.
 

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Skywire LTE CAT1 and is the answer not in the manual?

Questions and answers

Summary of Contents for NimbeLink Skywire LTE CAT1

  • Page 1     Skywire LTE CAT1  ® AWS IoT with TLS  User Manual  NimbeLink Corp  Updated: August 2018                        PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 1 ...
  • Page 2: Table Of Contents

    400 Bad Request 23  RXTX Mismatch Warning 23  Error Reading HTTPS Responses 24  Verify Credentials 24  Verify file format 24  Establish a Connection to AWS 25  Additional Troubleshooting 25  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 2 ...
  • Page 3     PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 3 ...
  • Page 4: Introduction

    AWS create for us.    2.1 Create a thing  Create a "thing" by clicking on "Create a resource" and selecting "Create a thing".    PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 4 ...
  • Page 5   Set the name (in this case, "AWS_Test_Thing") and click "Create".        PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 5 ...
  • Page 6: Create A Policy

    Create a certificate and private key pair by selecting "Create a resource" and selecting                             "Create a certificate".  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 6 ...
  • Page 7                           credentials. They will not be available for download once you leave this screen!      PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 7 ...
  • Page 8: Download The Root Ca Certificate

    Clicking on your certificate should bring up a details window that looks similar to the                               following:  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 8 ...
  • Page 9: Change Format Of Credentials

                                  keytool to create the required files.  OpenSSL can be downloaded for windows here:  https://slproweb.com/products/Win32OpenSSL.html  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 9 ...
  • Page 10: Create .Pfx File

    The "-name" parameter will also be used later as the alias associated with the                             keystore we created. Its value in this example is "my_keystore".    PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 10 ...
  • Page 11: Create .Jks File

    Convert the private key:  openssl rsa -in 2a6d9b3215-private.pem.key -inform PEM -out  2a6d9b3215-private.der -outform DER  Convert the root CA certificate:  openssl x509 -outform der -in  "VeriSign-Class%203-Public-Primary-Certification-Authority-G 5.pem" -out  "VeriSign-Class%203-Public-Primary-Certification-Authority-G 5.der"    PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 11 ...
  • Page 12: Upload Credentials To Skywire

    If the files upload successfully, the response should look like the following:  SECURE CMD READY: SEND COMMAND…  SECURE CMD END OK  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 12 ...
  • Page 13: Upload The Root Ca Certificate

    Note : commands are in bold , responses and unsolicited messages are in plain text,  and comments regarding the commands are in italics .    Get modem info  ati1  Cinterion  ELS31-V  REVISION 4.3.2.0  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 13 ...
  • Page 14 ^SBNR: 7, size: "0", issuer: "", serial number: "", subject: "", signature: "", thumbprint  algorithm: "", thumbprint: ""  ^SBNR: 8, size: "0", issuer: "", serial number: "", subject: "", signature: "", thumbprint  algorithm: "", thumbprint: ""  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 14 ...
  • Page 15 (ACVWOJPAQ6LEI in this example) is specific to your AWS account. Find it by going to  the resource page under AWS IoT, clicking on your “Thing”, and copying the string from  the Rest API endpoint url as seen below.   PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 15 ...
  • Page 16     at^siss=0,srvType,"Socket"  OK  at^siss=0,conId,3  OK  at^siss=0,address,"socktcps://ACVWOJPAQ6LEI.iot.us-west-2.amazonaws.com:8 443"  OK  at^siss=0,secopt,1  OK    Activate the PDP context  at^sica=1,3  OK    Verify that the modem has an IP address  at+cgpaddr  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 16 ...
  • Page 17 Note : the number of bytes you send may be different depending on your thing name.  Replace "AWS_Test_Thing" with your thing name. The number of bytes includes the 2  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 17 ...
  • Page 18 This will read the header information of the response from AWS  at^sisr=0,1000  ^SISR: 0,189  HTTP/1.1 200 OK  content-type: application/json  content-length: 130  date: Wed, 27 Jul 2016 19:26:50 GMT  x-amzn-RequestId: 127e9f5b-61e6-43d0-94fd-0e929bb9daa8  connection: Keep-Alive      OK    PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 18 ...
  • Page 19 .  Open the socket connection to AWS  at^siso=0  OK    +CIEV: "is_cert",0,"/C=US/O=Symantec Corporation/OU=Symantec Trust  Network/CN=Symantec Class 3 Secure Server CA -  G4","25608F1A38647F23CBEC4421982984B1","/C=US/ST=Washington/L=Seattle/O= PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 19 ...
  • Page 20 Replace "AWS_Test_Thing" with your thing name. The number of bytes includes the  carriage return (CTRL-M) and linefeed (CTRL-J) characters that must be sent after each  line. In addition, after sending the last header (Content-Length: 114), this number  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 20 ...
  • Page 21 ^SISR: 0,1    Issue the "read" socket command to read up to 1000 bytes on connection number 0.  This will read the header information of the response from AWS  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 21 ...
  • Page 22 Issue the "read" command again to read the response body. The data can still be read  even though the remote peer has closed the connection.  at^sisr=0,1000  ^SISR: 0,340  {"state":{"desired":{"attribute1":123,"attribute2":"test1"},"reported":{"attribute1":456,"attrib ute2":"string1"}},"metadata":{"desired":{"attribute1":{"timestamp":1484004333},"attribute 2":{"timestamp":1484004333}},"reported":{"attribute1":{"timestamp":1484004333},"attrib ute2":{"timestamp":1484004333}}},"version":11,"timestamp":1484004333}  OK    Close the socket connection  at^sisc=0  OK  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 22 ...
  • Page 23: Troubleshooting

    8.2.4 RXTX Mismatch Warning  When trying to upload the certificates, if you get the below error message:    WARNING: RXTX Version mismatch Jar version - RXTX-2.2-pre1.2 native lib version - RXTX-2.2pre2 PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 23 ...
  • Page 24: Error Reading Https Responses

                        filename):  openssl rsa -in 2a6d9b3215-private.der -inform der -check  The response should be:  RSA key ok  Writing RSA key  PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 24 ...
  • Page 25: Establish A Connection To Aws

                        shadow.  8.5 Additional Troubleshooting  For additional troubleshooting, please consult the GELS3 Socket Dial Application Note:  https://nimbelink.com/Documentation/Skywire/4G_LTE_Cat_1/30102_NL-SW-LTE-GEL S3_SocketDialExample.pdf    PN 30168 rev 9 © NimbeLink Corp. 2018. All rights reserved. 25 ...

Table of Contents