tc-0.3.5 creates certificates with 2048bit key length

[KDSix-ThreeDotSeven]

Hi,

the current teddycloud 0.3.5 release created only certificates with 2048 bit key length on my raspberry and Synology NAS. But the TLS handshake (with a tb cc3235) only worked with the 4096 bit certs from the gencerts.sh script.

Is this a bug or a feature? ;)

[SciLor]

The key length shouldn't be the root cause. The original CA has 2048 bit key length.

[KDSix-ThreeDotSeven]

The original CA that I extracted from the box also has a key length of 4096 bit. So far the key length was the only difference I could observe between the certs created by gencerts.sh and the teddycloud.

Could there be a cert key lenght check in the firmware of the box?

[henryk86]

@SciLor: fixed in develop 👍

[SciLor]

This isn't the source of the problem. The CC3235 seems to be very picky about the CA, or the cc3200tool doesn't handle the patching as it should. The gencerts.sh script works most of the time. But not always. (And I don't really see differences to the teddyCloud generated certs. Even with 4096 bit keysize I was not able to connect the CC3235 to teddyCloud, as the box refuses with a BAD_CERTIFICATE error during the connection.