ussl module for Raspberry Pico W #9222

IanW6374 · 2022-09-06T10:42:55Z

IanW6374
Sep 6, 2022

Hi

I am trying to create a TLS connection to a remote server (Pico W with MicroPython) but having issue trying to define the ssl parameters. The ssl parameters are stored in the "sslparams" dictionary object but I get "TypeError: extra keyword arguments given" if I try anything other than None for the certificates.

I have tried loading the certificate into a variable and defining the certificate path to no avail - Is there any information on what is supported on the RP2 port of ussl??

Any tips would be gratefully received :)

Sample code is attached

samplecode.txt

jimmo · 2022-09-06T13:18:37Z

jimmo
Sep 6, 2022
Maintainer

@IanW6374 the cert validation is still under development and is not supported on the release version (1.19.1). There is some support in the nightly/unstable versions.

Which version of MicroPython are you using?

Which documentation are you following? See https://docs.micropython.org/en/latest/library/ssl.html for valid arguments to wrap_socket (note that this doesn't quite match CPython, we're working on adding support for a CPython-compatible SSLContext).

See also example here:
https://github.com/micropython/micropython/blob/master/tests/net_inet/ssl_cert.py

13 replies

JMFUS Dec 19, 2023

Sorry
Thx for the modifications

JMFUS Dec 30, 2023

Hello
I'm still working on my FTP over TLS connection for my Raspberry Pi Pico WH
I have a Filezilla server 1.8.0 with a certificate
I copied this certificate on my Raspberry
And the code i'm using is :

    print('Loading CA Certificate')
    with open(cert_file_path, 'rb') as f:
        cacert = f.read()
    f.close()
    
    ftp_conn = FTP_TLS(keyfile=None,certfile=cert_file_path,cert_reqs=ssl.CERT_REQUIRED,ca_certs=cacert,server_hostname=adresse_serveur)
    
    print("Connexion au serveur FTP...")
    try:
        ftp_conn.connect(adresse_serveur,port)
    except Exception as e:
        print("Erreur lors de la connexion au serveur FTP :", str(e))
    
    try:    
        print("Connexion établie. Tentative d'authentification...")
        ftp_conn.login(user=utilisateur_OST, passwd=mot_de_passe_OST)
    except Exception as e:
        raise e
    
    try: 
        ftp_conn.prot_p()
    except Exception as e:
        raise e

    ftp_conn.cwd("/")

    print("============================ CONTENU FTP ============================")
    items = FTP_file_exist(ftp_conn)
    print("items = ",items)
    print("========================= FIN CONNEXION FTP =========================")
    ftp_conn.quit()

But now, the reply is "invalid cert"
Traceback (most recent call last):
File "", line 168, in
File "", line 166, in
File "ftplibtls.py", line 78, in login
File "ftplibtls.py", line 101, in auth
File "ftplibtls.py", line 99, in auth
ValueError: invalid cert

Is there somebody who can help me ?

Thx in advance
And happy new year for all

sophiedegran Dec 30, 2023

Hi
Did you convert key/cert to DER format ? (with openssl)

JMFUS Dec 30, 2023

Sorry
I'm a newby :)
The only file generated by FZ is trustedcerts.xml located on the server in users/toto/appdata/roaming/filezilla/trustedcerts.xml :

<FileZilla3 version="3.66.4" platform="windows">
	<TrustedCerts>
		<Certificate>		<Data>3082019e30820144a003020102021429ae7a3c957c889894061fbbd4ebcf5afc2e1b90300a06082a8648ce3d04030230333131302f0603550403132866696c657a696c6c612d7365727665722073656c66207369676e6564206365727469666963617465301e170d3233313232373130353330395a170d3234313232373130353830395a30333131302f0603550403132866696c657a696c6c612d7365727665722073656c66207369676e65642063657274696669636174653059301306072a8648ce3d020106082a8648ce3d03010703420004300daf8be3ce8a54c212c1dc6fcbd5fa99938011bc526e7543064b1fba787d2e56640b9a54981feaefe83883e1a21fbc90161a2305332c969933c459311d9a0ea336303430140603551d11040d300b82096c6f63616c686f7374300e0603551d0f0101ff0404030205a0300c0603551d130101ff04023000300a06082a8648ce3d040302034800304502207629246b6c2261426a38d42bccde4547d1c407683cbf85123ed0877274e97385022100fd727434efbef158cad6b2bf3da8746d0a6dfb8725ad627f6dc3bad4547c96e5</Data>
			<ActivationTime>1703674389</ActivationTime>
			<ExpirationTime>1735297089</ExpirationTime>
			<Host>127.0.0.1</Host>
			<Port>22</Port>
			<TrustSANs>0</TrustSANs>
		</Certificate>
	</TrustedCerts>
	<FtpSessionResumption>
		<Entry Host="192.168.0.197" Port="21">true</Entry>
		<Entry Host="127.0.0.1" Port="22">true</Entry>
	</FtpSessionResumption>
</FileZilla3>

I don' know what to do with that
I just copied it on my Raspberry

sophiedegran Dec 30, 2023

Ok don't know about filezilla but have a look on the wiki or the forum of filezilla you will have the answer...
After don't forget to convert to DER and to have the ip adress define in your cert (192.168.0.x) and the date/time of your client near the server..
I'm sure you will do it ;)

JMFUS · 2023-12-30T20:43:24Z

JMFUS
Dec 30, 2023

ThxI'll checkThxEnvoyé depuis mon appareil Galaxy -------- Message d'origine --------De : sophiedegran ***@***.***> Date : 30/12/2023 21:19 (GMT+01:00) À : micropython/micropython ***@***.***> Cc : JMFUS ***@***.***>, Mention ***@***.***> Objet : Re: [micropython/micropython] ussl module for Raspberry Pico W (Discussion #9222) Ok don't know about filezilla but have a look on the wiki or the forum of filezilla you will have the answer... After don't forger to convert to DER and to have the ip adress define in your cert I'm sure you will do it ;) —Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you were mentioned.Message ID: ***@***.***>

0 replies

JMFUS · 2024-01-02T13:41:54Z

JMFUS
Jan 2, 2024

Hello
Now I fixed the certificate problem and I can connect to my server with TLS
And I find another closed door :
When I send the command LIST to the server to have the list of the files , I have now the error :

resp : 150 Starting data transfer.
Traceback (most recent call last):
File "", line 202, in
File "ftplib.py", line 508, in retrlines
File "ftplibtls.py", line 159, in ntransfercmd
OSError: stream operation not supported

The problem is in this function :

  def ntransfercmd(self, cmd, rest=None):
        conn, size = super().ntransfercmd(cmd, rest)
        if self._prot_p:
            sock = getattr(conn, '_sock', conn)

            sock = ussl.wrap_socket(conn,
                                   key=self.keyfile,
                                   cert=self.certfile,
                                   cert_reqs=self.cert_reqs)
            
            if hasattr(conn, '_sock'):
                conn._sock = sock
            else:
                conn = sock

        return conn, size

in the ftplibtls library I'm using, at the line :

sock = ussl.wrap_socket(conn, ........

An idea?

Thx

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

MicroPython

ussl module for Raspberry Pico W #9222

Uh oh!

{{title}}

Uh oh!

Replies: 3 comments 13 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

ussl module for Raspberry Pico W #9222

Uh oh!

Replies: 3 comments · 13 replies

Uh oh!

jimmo Sep 6, 2022 Maintainer

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Replies: 3 comments 13 replies

jimmo
Sep 6, 2022
Maintainer