Re: [leshan-dev] RPK with Java Client

["Kraus Achim (INST/ESY1)" <Achim.Kraus@xxxxxxxxxxxx>]

Hi Michael,

(OK, Julien was much faster, but if you interested in some more details ...)

I'm not sure, what you exactly did. Did you connect a leshan client to one leshan server using RPK?

If so, yes this did work, because scandium uses one "raw public key" for all communication partners, and as long as you only connect to one server it principally worked.
But with more than one server to connect to, the client may require different RPKs to do so (similar to issue https://github.com/eclipse/leshan/issues/87).
And that's right now not supported "out of the box" by scandium, if you don't want to open different client side endpoints for different servers.
But this has not changed, so your right, this should not disable RPK usage which was working so far.

So the other issue for supporting RPK is, that the new leshan client now prepares for "bootstrap", which means, the client communication configuration is not longer passed directly to the communication layer (e.g. scandium), it uses the LWM2M object security and server to do so. This would enable a bootstrap server to change the destination server and credentials. Currently the RPK support is simply not implemented in that security object. To implement it proper, some OMA LWM2M issues should be resolved, otherwise it would be somehow "leshan proprietary".

https://github.com/OpenMobileAlliance/OMA-LwM2M-Public-Review/issues/42

https://github.com/OpenMobileAlliance/OMA-LwM2M-Public-Review/issues/77


Mit freundlichen Grüßen / Best regards

Achim Kraus

Bosch Software Innovations GmbH
Communications (INST/ESY1)
Stuttgarter Straße 130
71332 Waiblingen
GERMANY
www.bosch-si.de
www.blog.bosch-si.com 


Registered office: Berlin, Register court: Amtsgericht Charlottenburg, HRB 148411 B
Executives: Dr.-Ing. Rainer Kallenbach; Michael Hahn


Von: leshan-dev-bounces@xxxxxxxxxxx [mailto:leshan-dev-bounces@xxxxxxxxxxx] Im Auftrag von Michael Huelfenhaus
Gesendet: Dienstag, 29. März 2016 10:25
An: leshan developer discussions
Betreff: Re: [leshan-dev] RPK with Java Client

Hi, 

I am a bit confused because with an older Version (Snapshot M6), I could connect via RPK and I found there used to be tests with rpk. e.g. https://github.com/eclipse/leshan/blob/0b45d9f4dc26628b11ab0b8c014a42fb4e7ee9d3/leshan-integration-tests/src/test/java/org/eclipse/leshan/integration/tests/SecurityTest.java

Was there a change in Californium/Scandium or what makes RPK so complicated now? 

Thanks,
Michael

Am 23.03.2016 um 18:47 schrieb Simon Bernard <contact@xxxxxxxxxxxxxxx>:


Hi,
  Currently, RPK is not supported in  Leshan Client API.
  There is no easy way to  implement it without modification of Californium/Scandium. We need a dynamic way to access to keys. (something like PskStore for RPK)
   A less intuitive way could be to create new endpoint(IP/port) for each server and each security config.

  At short term, we don't plan to implement it, but this is clearly in the scope of the project.
  We don't have a precise roadmap, currently we are focusing on making Leshan Server deployable in a Cluster.
  (see https://github.com/eclipse/leshan/wiki/Cluster)
Simon
  

   
Le 23/03/2016 17:27, Michael Huelfenhaus a écrit :
Hi, 

I need to use the java client with raw public key certificates, but in the SecurityTest.java it is stated that this is not yet implemented.

Is this planned for the near future? Also is there a roadmap available for the planned development?

Thanks,
Michael Hülfenhaus



_______________________________________________
leshan-dev mailing list
leshan-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/leshan-dev

_______________________________________________
leshan-dev mailing list
leshan-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/leshan-dev