4 ms·
I am deploying a system where IoT devices first contact a bootstrap endpoint, authenticated by a private CA whose root cert is hardcoded in the device firmware.
by lultimouomo 5y ago
I am deploying a system where IoT devices first contact a bootstrap endpoint, authenticated by a private CA whose root cert is hardcoded in the device firmware. The bootstrap endpoint communicates the URL and CA root cert of the actual web services. This allows us to have the services themselves implemented as serverless functions using the cloud provider HTTPS/MQTT facilities.
Does anyone see potential issues with that?
- konschubert 5y agoThe only issue is if the private key of your root Cert gets leaked. Then you won't have a way to issue a new one to your device.
- teddyh 5y agoEven if the root cert is hardcoded, the root cert might still have an expiration date, and the firmware code might still check that.
- lultimouomo 5y agoGood point. When this happens I'll be dead though, and so will be those devices. If we both turn out to be immortal I'll need to provide a firmware upgrade with a new CA root, possibly 10 years or so ahead of the expiration so every device has a chance to auto-upgrade.
- teddyh 5y agoIt could quite possibly be easy to simply disable or remove the expiration check from the firmware code. My point was only that it’s an issue that one might not immediately think of.