Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

Using Boto3 to get cups.crt, cups.key and cups.trust

0

I'm writing an IoT Wireless Gateway provisioning script using Boto3 and cannot figure out how to create, download, and update cups.key and cups.trust files.

I've managed to get the cups.crt file using describe_certificate() but I cannot figure out which Boto methods will get me the rest of the certs necessary to connect a gateway.

  • AWS-User-9404308
    3 years ago

    Digging a little deeper, I believe since these are only available once that I need to capture them when creating using create_keys_and_certificate(), which I have working now..

    However, a new question is create_keys_and_certificate() gives me:

    • certificatePem
    • PrivateKey
    • PublicKey

    And I'm not clear on how these correspond to cups.key, cups.trust and cups.crt. Is this correct? certificatePem = cups.crt PrivateKey = cups.key PublicKey = cups.trust? Or is cups.trust a different certificate not offered by the create_keys_and_certificate() response?

Topics
Internet of Things (IoT)Security, Identity, & Compliance
Tags
AWS Certificate ManagerAWS IoT Core
Language
English
asked 3 years ago510 views
2 Answers
0

The cups.trust certificate is obtained by calling get_service_endpoint() - https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/iotwireless.html#IoTWireless.Client.get_service_endpoint`

AWS
EXPERT
answered 3 years ago
0

Hi. You can find a complete working example here: https://github.com/aws-samples/aws-iot-greengrass-component-lorawan-provisioning/blob/master/artifacts/main.py. It's a Greengrass component, but it does everything you need. In this case, the gateway self-provisions.

AWS
EXPERT
answered 3 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content