thanks lulf ! Here's what I've landed on so far, but I need a host url for the new() function in the implementation. Is there a service that can verify via the internet? Also I'm running into an error with CertificateVerify not existing in the embedded-tls crate. I tried to import it via the handshake module, but it says it's private and for internals only.

struct MyCertVerifier;

impl MyCertVerifier {
pub fn new() -> Self {
MyCertVerifier {}
}
}

impl<'a, CipherSuite> TlsVerifier<'a, CipherSuite> for MyCertVerifier
where
CipherSuite: embedded_tls::TlsCipherSuite + 'a, // This bounds CipherSuite to the trait and the lifetime
{

fn new (host: Option<&'a str>) -> Self {
    MyCertVerifier {}
}

fn verify_signature(
    &mut self,
    verify: CertificateVerify<'_>
) -> Result<(), TlsError> {
    Ok(())
}

fn verify_certificate(
    &self,
    transcript: &CipherSuite::Hash,
    ca: &Option<Certificate<'_>>,
    cert: Certificate<'_>
) -> Result<(), TlsError> {
    // Need certificate verification logic here
    Ok(())
}

}

In reply to @greengenie:matrix.org

thanks lulf ! Here's what I've landed on so far, but I need a host url for the new() function in the implementation. Is there a service that can verify via the internet? Also I'm running into an error with CertificateVerify not existing in the embedded-tls crate. I tried to import it via the handshake module, but it says it's private and for internals only.

struct MyCertVerifier;

impl MyCertVerifier {
pub fn new() -> Self {
MyCertVerifier {}
}
}

impl<'a, CipherSuite> TlsVerifier<'a, CipherSuite> for MyCertVerifier
where
CipherSuite: embedded_tls::TlsCipherSuite + 'a, // This bounds CipherSuite to the trait and the lifetime
{

fn new (host: Option<&'a str>) -> Self {
    MyCertVerifier {}
}

fn verify_signature(
    &mut self,
    verify: CertificateVerify<'_>
) -> Result<(), TlsError> {
    Ok(())
}

fn verify_certificate(
    &self,
    transcript: &CipherSuite::Hash,
    ca: &Option<Certificate<'_>>,
    cert: Certificate<'_>
) -> Result<(), TlsError> {
    // Need certificate verification logic here
    Ok(())
}

}

thanks lulf ! Here's what I've landed on so far, but I need a host url for the new() function in the implementation. Is there a service that can verify via the internet? Also I'm running into an error with CertificateVerify not existing in the embedded-tls crate. I tried to import it via the handshake module, but it says it's private and for internals only.

struct MyCertVerifier;

impl MyCertVerifier {
    pub fn new() -> Self {
        MyCertVerifier {}
    }
}

impl<'a, CipherSuite> TlsVerifier<'a, CipherSuite> for MyCertVerifier
where
    CipherSuite: embedded_tls::TlsCipherSuite + 'a, // This bounds CipherSuite to the trait and the lifetime
{

    fn new (host: Option<&'a str>) -> Self {
        MyCertVerifier {}
    }
    
    fn verify_signature(
        &mut self,
        verify: CertificateVerify<'_>
    ) -> Result<(), TlsError> {
        Ok(())
    }

    fn verify_certificate(
        &self,
        transcript: &CipherSuite::Hash,
        ca: &Option<Certificate<'_>>,
        cert: Certificate<'_>
    ) -> Result<(), TlsError> {
        // Need certificate verification logic here
        Ok(())
    }
}

I'm getting some errors that I don't understand:

the traitRngCore is not implemented for Rng

the trait CryptoRng is not implemented for Rng

this is how I'm generating my hardware rng:

//Generate RNG for TLS Encryption
let rng_peripherals = Peripherals::take();

let mut rng_system = rng_peripherals.SYSTEM.split();
let rng_clocks = ClockControl::boot_defaults(rng_system.clock_control).freeze();

let mut rng_rtc = Rtc::new(rng_peripherals.LPWR);
let rng_timer_group0 = TimerGroup::new(
        rng_peripherals.TIMG0,
        &rng_clocks,
);
let mut wdt0 = rng_timer_group0.wdt;
let rng_timer_group1 = TimerGroup::new(
        rng_peripherals.TIMG1,
        &rng_clocks,
);
let mut wdt1 = rng_timer_group1.wdt;

rng_rtc.swd.disable();
rng_rtc.rwdt.disable();
wdt0.disable();
wdt1.disable();

let mut rng = Rng::new(rng_peripherals.RNG);

and this is my implementation of the ring:

let tls_context = TlsContext::new(&tls_config, &mut rng);

I'm getting some errors that I don't understand:

the traitRngCore is not implemented for Rng

the trait CryptoRng is not implemented for Rng

this is how I'm generating my hardware rng:

//Generate RNG for TLS Encryption
let rng_peripherals = Peripherals::take();

let mut rng_system = rng_peripherals.SYSTEM.split();
let rng_clocks = ClockControl::boot_defaults(rng_system.clock_control).freeze();

let mut rng_rtc = Rtc::new(rng_peripherals.LPWR);
let rng_timer_group0 = TimerGroup::new(
        rng_peripherals.TIMG0,
        &rng_clocks,
);
let mut wdt0 = rng_timer_group0.wdt;
let rng_timer_group1 = TimerGroup::new(
        rng_peripherals.TIMG1,
        &rng_clocks,
);
let mut wdt1 = rng_timer_group1.wdt;

rng_rtc.swd.disable();
rng_rtc.rwdt.disable();
wdt0.disable();
wdt1.disable();

let mut rng = Rng::new(rng_peripherals.RNG);

and this is my implementation of the ring:

let tls\_context = TlsContext::new(&tls\_config, &mut rng);

I'm getting some errors that I don't understand:

the traitRngCore is not implemented for Rng

the trait CryptoRng is not implemented for Rng

this is how I'm generating my hardware rng:

//Generate RNG for TLS Encryption
let rng_peripherals = Peripherals::take();

let mut rng_system = rng_peripherals.SYSTEM.split();
let rng_clocks = ClockControl::boot_defaults(rng_system.clock_control).freeze();

let mut rng_rtc = Rtc::new(rng_peripherals.LPWR);
let rng_timer_group0 = TimerGroup::new(
        rng_peripherals.TIMG0,
        &rng_clocks,
);
let mut wdt0 = rng_timer_group0.wdt;
let rng_timer_group1 = TimerGroup::new(
        rng_peripherals.TIMG1,
        &rng_clocks,
);
let mut wdt1 = rng_timer_group1.wdt;

rng_rtc.swd.disable();
rng_rtc.rwdt.disable();
wdt0.disable();
wdt1.disable();

let mut rng = Rng::new(rng_peripherals.RNG);

and this is my implementation of the ring:

let tls_context = TlsContext::new(&tls_config, &mut rng);

I'm getting some errors that I don't understand:

the traitRngCore is not implemented for Rng

the trait CryptoRng is not implemented for Rng

this is how I'm generating my hardware rng:

//Generate RNG for TLS Encryption
let rng_peripherals = Peripherals::take();

let mut rng_system = rng_peripherals.SYSTEM.split();
let rng_clocks = ClockControl::boot_defaults(rng_system.clock_control).freeze();

let mut rng_rtc = Rtc::new(rng_peripherals.LPWR);
let rng_timer_group0 = TimerGroup::new(
        rng_peripherals.TIMG0,
        &rng_clocks,
);
let mut wdt0 = rng_timer_group0.wdt;
let rng_timer_group1 = TimerGroup::new(
        rng_peripherals.TIMG1,
        &rng_clocks,
);
let mut wdt1 = rng_timer_group1.wdt;

rng_rtc.swd.disable();
rng_rtc.rwdt.disable();
wdt0.disable();
wdt1.disable();

let mut rng = Rng::new(rng_peripherals.RNG);

and this is my implementation of the rng:

let tls_context = TlsContext::new(&tls_config, &mut rng);