Simon Bernard

Results 921 comments of Simon Bernard

I rethink a little bit about it. My understanding is that you think that RRC is rarely needed or at least not rarely needed for CoAP use cases. But concretely...

> There is no general threat Just to be sure, I understand this correctly : Common use case is : - LWM2M Client send UPDATE request - LWM2M Server send...

Just to let know that, there is something which looks like a behavior break with this version. The new `verifyKeyPair` feature in `SingleCertificateProvider` is activated by default. This could raise...

**Short answer** I raise this just in case this was not done on purpose. From Leshan v2.0.0-Mx, not a big deal, I just go back to previous behavoir in Leshan...

@boaks , Maybe @jvermillard was not clear but I guess he wanted to mention that he faces this issue but in a particular case : with openjdk 17 only (not...

This is just RPK (no certificate) and it was created like this : https://github.com/eclipse/leshan/blob/master/leshan-server-cf/src/test/java/org/eclipse/leshan/server/californium/bootstrap/LeshanBootstrapServerBuilderTest.java#L61-L85

> Just to mention: > > [CertificateConfigurationHelper](https://github.com/eclipse/californium/blob/main/scandium-core/src/main/java/org/eclipse/californium/scandium/dtls/x509/CertificateConfigurationHelper.java#L291-L340) > > does the check. I signs with the private key and verifies with the public key. Yep I looked at this but...

I checked the pair with : - https://kjur.github.io/jsrsasign/sample/sample-ecdsa.html (written in javascrip so at least this is not JDK behind) - https://www.javacardos.com/tools/ecdsa-sign-verify And both seems to work with this key pair....

> I hope, it works with the 00 for you as well. It seems to work. > If you now switch off the check and try a handshake with the...