gateway: request Bluetooth level 2 security when supported - #122
Conversation
a845fa0 to
145d9c0
Compare
| CONFIG_PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY=y | ||
|
|
||
| # Bluetooth secure connections | ||
| CONFIG_BT_SMP=y |
There was a problem hiding this comment.
It took me a second to figure out that this is not the Bluetooth transport for Simple Management Protocol 😅
2d78cdf to
b58c4e4
Compare
sam-golioth
left a comment
There was a problem hiding this comment.
Should we go ahead and make the same changes to samples/custom_connect in this PR? After golioth/pouch#110 merges, that sample will break.
|
|
||
| bt_conn_disconnect(conn, BT_HCI_ERR_REMOTE_USER_TERM_CONN); | ||
|
|
||
| pouch_gateway_scan_start(); |
There was a problem hiding this comment.
This is also called in bt_disconnected(), so I don't think we need to call it here.
Something else that comes to mind, but that I don't think we should address in this PR, is that we probably need some kind of backoff or quarantine for misbehaving devices so that we don't get stuck in a tight loop trying and failing to connect to the same device over and over again.
There was a problem hiding this comment.
Dropped pouch_gateway_scan_start().
b58c4e4 to
1da4b45
Compare
1da4b45 to
38f1a12
Compare
This config pulls a lot of dependencies, so drop it to save flash resources. This saves ~79kB flash for nrf9160dk.
Request Bluetooth security level 2 (encryption and no authentication). Inrease default mbedTLS heap size from 10k to 16k, so that there is enough space for storing BT encryption context. Signed-off-by: Marcin Niestroj <m.niestroj@emb.dev>
38f1a12 to
b40c5dd
Compare
Added changes to |
Request Bluetooth security level 2. Continue if not supported, so that devices without SMP are still supported.
TODO: