From a0842cbcfd7b92c47e292f8c33102a7266bde823 Mon Sep 17 00:00:00 2001 From: Tatiana Leon Date: Tue, 7 Mar 2023 14:17:25 +0100 Subject: [PATCH] ccimx8m: cloudconnector: connect to 'remotemanager.digi.com' not to use certificates This commit modifies the cloud connector configuration to use 'remotemanager.digi.com' URL since it does not use certificates for the connection. 'edp12.devicecloud.com' only allows connections with certificates. The certificate is downloaded during the first device connection to DRM and stored in '/etc/ssl/certs' directory inside the 'rootfs' partition. Following connections must use this certificate. After a firmware update 'rootfs' partition is re-programmed (standard boot) or changed to use the corresponding partition of the other block (dual boot). In any case the certificate downloaded is not available anymore, so the device is not able to reconnect. Currently there is no a 'immutable' partition to store the certificate, that is, a place where the certificate is not removed during a firmware update and can be used by the cloud connector (similar to the 'data' partition on a ccmp1) Related to commit 063a946e7c3a955ace6acd20e1ff3a6ecc5c73ff. https://onedigi.atlassian.net/browse/DEL-8400 Signed-off-by: Tatiana Leon --- .../recipes-digi/cloudconnector/cloudconnector_git.bb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/meta-digi-dey/recipes-digi/cloudconnector/cloudconnector_git.bb b/meta-digi-dey/recipes-digi/cloudconnector/cloudconnector_git.bb index b66a4a5ee..fc9183416 100644 --- a/meta-digi-dey/recipes-digi/cloudconnector/cloudconnector_git.bb +++ b/meta-digi-dey/recipes-digi/cloudconnector/cloudconnector_git.bb @@ -43,6 +43,10 @@ do_install:append:ccimx6ul() { sed -i "/url = \"edp12.devicecloud.com\"/c\url = \"remotemanager.digi.com\"" ${D}${sysconfdir}/cc.conf } +do_install:append:ccimx8m() { + sed -i "/url = \"edp12.devicecloud.com\"/c\url = \"remotemanager.digi.com\"" ${D}${sysconfdir}/cc.conf +} + do_install:append:ccmp1() { sed -i "/client_cert_path = \"\/etc\/ssl\/certs\/drm_cert.pem\"/c\client_cert_path = \"\/mnt\/data\/drm_cert.pem\"" ${D}${sysconfdir}/cc.conf }