Mender <> AWS IoT Core Integration- Private Key issues

General Discussions
,
1

I’m testing out AWS IoT Core integration and when I try read the private key that is issued by Mender I am getting errors. The private key I’m testing can be found in the mender-configure area on the device or in the mender web panel under the device variables.
I found out that the keys provided through mender-configure are ECC 256 bits keys. For some unknown reason, openssl doesn’t like that the header is -----BEGIN PRIVATE KEY----- (I suppose it thinks it should be a PKCS#8 key).

Why mender-configure generate ECC 256 bit keys? can we generate the header like -----BEGIN EC PRIVATE KEY----- using mender-configure?

2

HI @TheYoctoJester can you please help on this question?

3

Hello @vimoxshah :wave:

I’m sorry, I was handling the issue and forgot to update you about the status. Indeed, what you’re pointing out is a bug. The key is serialized as SEC 1 (RFC-5915), but it uses PKCS#8 PEM headers. I implemented a fix to consistently use PKCS#8 format for the key issued for the device.

1 Like