78 lines
1.8 KiB
Plaintext
78 lines
1.8 KiB
Plaintext
#reboot
|
||
ATE0
|
||
AT
|
||
AT+CREBOOT
|
||
ATE0
|
||
AT
|
||
ATE0
|
||
#set verbose
|
||
AT+CMEE=2
|
||
# sim and rf checks
|
||
AT+CPIN?
|
||
AT+CSQ
|
||
#fs init
|
||
AT+CFSINIT
|
||
#upload ca cert
|
||
cacert
|
||
#convert ca cert and end uploading
|
||
AT+CSSLCFG="CONVERT",2,ca.pem
|
||
AT+CFSTERM
|
||
#manual APN conf
|
||
AT+CFUN=0
|
||
AT+CGDCONT=$pdpcid$,"IP","m2m.public.cz"
|
||
AT+CFUN=1
|
||
AT+CGATT?
|
||
AT+CGNAPN
|
||
AT+CNCFG=$pdpcid$,1,"m2m.public.cz"
|
||
#APN check
|
||
AT+CGNAPN
|
||
#activate APN/PDP
|
||
AT+CNACT=0,1
|
||
AT+CNACT?
|
||
#synch UTC
|
||
AT+CNTP=$ntp_server$,2,0,2
|
||
sleep 15
|
||
AT+CNTP
|
||
AT+CCLK?
|
||
|
||
|
||
|
||
|
||
AT+SMCONF="CLIENTID","SIM7080"
|
||
AT+SMCONF="URL","[ID].s2.eu.hivemq.cloud",8883
|
||
AT+SMCONF="USERNAME","[username]"
|
||
AT+SMCONF="PASSWORD","[password]"
|
||
|
||
3) setting up SSL and connecting
|
||
|
||
AT+CSSLCFG="sslversion",1,3
|
||
// TLS 1.2
|
||
|
||
AT+CSSLCFG="SNI",1,"[ID].s2.eu.hivemq.cloud"
|
||
// The SNI option is available for the SIM7080 but I found examples of some other Simcom modules that only need to "enable" SNI". For my module I need to enter a server name, so I input the exact same URL as my cluster's including my ID, is that ok?
|
||
|
||
AT+SMSSL=1,"isrgrootx1.pem",""
|
||
// first quotes are for the root CA - second quotes are for the .crt certificate and it should technically come with a private key, so I leave it empty since I couldn't convert the server certificate as such earlier... is that OK too?
|
||
|
||
AT+SMCONN
|
||
// here I'm always getting +CME ERROR: operation not allowed
|
||
|
||
|
||
|
||
Set a Ciphersuite on correct >ctxindex>, in my case is 1:
|
||
AT+CSSLCFG=“CIPHERSUITE”,1,0,0x0035
|
||
AT+CSSLCFG=“CIPHERSUITE”,1,1,0x002F
|
||
I’ve added two ciphersuits 0 and 1 on <cipher_index> just in case.
|
||
|
||
Dissable clock checking on certificate, I don’t really know if it is mandatory
|
||
AT+CSSLCFG=“IGNORERTCTIME”,1,1
|
||
|
||
Check certificate, maybe don’t needed
|
||
AT+CSSLCFG?
|
||
|
||
Set only root certificate:
|
||
AT+SMSSL=2,“isrgrootx1.pem”,“”
|
||
|
||
Finally connect:
|
||
AT+SMCONN
|