1.22 TCP/IP WolfSSL TCP Server

This configuration demonstrates creating a simple Internet Web server, that operates with clear text (TCP Port 80), and with encrypted text (TCP Port 443). If IPv6 is enabled than the demonstration also serves both types of connections on IPv6. The Web server only serves one page with the text 'Nothing Here' to all Web clients.

This demonstration uses the NET_PRES layer for encrypted communication through an external service provider for TLS support.

TCP/IP WolfSSL TCP Server MCC Configuration

The following Project Graph diagram shows the Harmony components included in this WolfSSL TCP Server demonstration application.

• MCC is launched by selecting Tools > Embedded > MPLAB® Code Configurator from the MPLAB X IDE and after opening the project, TCP/IP demo project is ready to be configured and regenerated.

• TCP/IP Root Layer Project Graph

  The root layer project shows that USART1 peripheral is selected to do read and write operation for TCP/IP commands.

  This is the basic configuration with SYS_CONSOLE, SYS_DEBUG and SYS_COMMAND modules. These modules are required for TCP/IP command execution.

  

  NOTE:-FreeRTOS component is required for RTOS application. For bare-metal (non-RTOS) FreeRTOS component should not be selected.

  TCP sockets calculate the ISN using the wolfSSL crypto library.

• TCP/IP Configuration

  1. SAM E70 Xplained Ultra

     

• TCP/IP Required Application

  TCP/IP demo use these application module components for this demo.

  Announce module to discover the Microchip devices within a local network.

  DHCP Client module to discover the IPv4 address from the nearest DHCP Server.

  DNS Client provides DNS resolution capabilities to the stack. During these components selection, the required transport and network modules are also selected.

  SNTP Simple Network Time Protocol updates its internal time periodically using a pool of public global time servers.

• TCPIP Data Link Layer

  Internal ethernet driver(gmac) is enabled with the external LAN8740 PHY driver library for SAME70 demonstartion.

  The MIIM Driver supports asynchronous read/write and scan operations for accessing the external PHY registers and notification when MIIM operations have completed.

TCP/IP WolfSSL TCP Server Hardware Configuration

This section describes the hardware configuration for ATSAM E70 Xplained Ultra Evaluation Kit and one can be used for the respective application demonstration.

1. This section describes the required default hardware configuration use SAM E70 Xplained Ultra Evaluation Kit

   • Ensure ERASE jumper is Open.

   • Open the J805 Jumper

   • Refer to the SAM E70 Xplained Ultra User Guide

     

   • Insert the LAN8740 PHY daughter board on the ETHERNET PHY MODULE header.

   • Connect the micro USB cable from the computer to the DEBUG USB connector on the SAM E70 Xplained Ultra Evaluation Kit

   • Establish a connection between the router/switch with the SAM E70 Xplained Ultra Evaluation Kit through the RJ45 connector

     

TCP/IP WolfSSL TCP Server Running Application

This table list the name and location of the MPLAB X IDE project folder for the demonstration.

Running Demonstration Steps

1. Build and download the demonstration project on the target board.

2. If the board has a UART connection:

   1. A virtual COM port will be detected on the computer, when the USB cable is connected to USB-UART connector.

   2. Open a standard terminal application on the computer (like Hyper-terminal or Tera Term) and configure the virtual COM port.

   3. Set the serial baud rate to 115200 baud in the terminal application.

   4. See that the initialization prints on the serial port terminal.

   5. When the DHCP client is enabled in the demonstration, wait for the DHCP server to assign an IP address for the development board. This will be printed on the serial port terminal.

      • Alternatively: Use the Announce service or ping to get the IP address of the board.

      • Run tcpip_discoverer.jar to discover the IPv4 and IPv6 address for the board.

3. Execution :

   1. As soon as a valid IP address is assigned through the DHCP to the demonstration, it is ready to accept a TCP/IP connection on non-secured port 80 or secured port 443.

      

   2. Send a TCP packet to the IP address of the hardware board using port 443 or 80 from any TCP Client application running on the computer.

   3. The TCP Server demonstration running on the evaluation kit will echo back everything it receives along the connection.

   4. For TCP Server test, the TCP Client application is required to run on the computer (SocketTest, Packet Sender etc). In this demonstration, we use the program, SocketTest (http://sockettest.sourceforge.net/). This demonstration is tested with SocketTest v3.0.

      a. Clear text connection (Port 80):

      • Send a TCP packet to the IP address of the hardware board, port 80, from TCP Client application (SocketTest) running on the computer.

      • The TCP Server running on the hardware board will receive the message and prints on console ‘Received a clear text connection’. See the following screenshot.

      • The expected output -

        

      b. Encrypted connection (Port 443):

      • For encrypted mode, send a packet to port 443 in SSL mode from TCP Client application (SocketTest) running on the computer.

      • The TCP Server running on the hardware board will receive the message and prints on console ‘Received a clear ssl connection’. See the following screenshot.

      • The expected output -