Wi-Fi Combo Forum Discussions

We've received reports that CA(Certification Authority) are not being checked, and we're considering taking action.
Since "TLS_VERIFICATION_REQUIRED" is set, I think the SSL certificate verification process is working.

◆ File
wiced_defaults.h
/* WICED TLS Options * /
#define WICED_TLS_DEFAULT_VERIFICATION (TLS_VERIFICATION_REQUIRED)

◆ Environment
・ WICED SDK: 6.4.0
・ OS: ThreadX

◆makefile
In the current situation, to check the Certification Authority (CA), is it enough to set the path of the root CA to "CERTIFICATE" and "PRIVATE_KEY" in the makefile?
Or is this a self-signed certificate for the HTTP server, and there is another way to check for a Certificate Authority?

CERTIFICATE := $(SOURCE_ROOT)resources/certificates/server_cert.cer
PRIVATE_KEY := $(SOURCE_ROOT)resources/certificates/server_cert_key.key

Hello,

In order to respect our cybersecurity requirements, I need to disable the support for TLS 1.0 and TLS 1.1, only keeping TLS 1.2.

I've noticed that this configuration is made from wiced_default.h

However it comes with a comment 

/* Note: Please don't try to change TLS MINOR VERSION MIN & MAX values,
 * as few  wiced prebuilts are compiled using below values changing the values can cause issues
 * */
/* TLS major version is assumed to be 1 */
#define WICED_TLS_MINOR_VERSION_MIN           (0)   /* Refers to TLS version 1.2. Values for TLS Versions: 0 ==> TLS v1.0, 1 ==> TLS v1.1, 2 ==> TLS v1.2 */
#define WICED_TLS_MINOR_VERSION_MAX           (2)   /* Refers to TLS version 1.2. Values for TLS Versions: 0 ==> TLS v1.0, 1 ==> TLS v1.1, 2 ==> TLS v1.2 */

What would be the correct approach to disable TLS versions that are under 1.2?

Best regards,

Ben

We are looking for some information on rough memory footprint data on simultaneous BLE/WLAN examples - using the ST+Cypress part (LBEE5PA1LD).  Some things to note:

WLAN in STA or AP mode? (we would need both in the FW, but not simultaneously)
BLE peripheral
Are there some documents out there, or possibly examples we could use for a guestimate?  I did find N1-4945_Type1LD-AppNote_Memory_Usage.pdf appnote, which looks like it is the https_server example, but the footprint data isn't broken down to a level that is meaningful from the question "How much space does the WLAN host stack/driver and BLE (HCI) host stack/driver take up?