Secure OTAU with BLE in STM32WB55 is not working

[daleonpz]

Hi!! I'm trying to perform a DFU with CONFIG_MCUMGR_TRANSPORT_BT_PERM_RW_AUTHEN=y but the DFU never starts

setup

nucleo_stm32wb55
MCUMGR + MCUBoot
Android App nRF Connect from nordic
Zephyr: v4.1.0-951-g1bdffce3b296
MCU:  v2.1.0-rc1-271-gc8470fb145f8

Here are the Kernels options

CONFIG_IMG_MANAGER=y
CONFIG_STREAM_FLASH=y 
CONFIG_BOOTLOADER_MCUBOOT=y 
CONFIG_MCUMGR=y 
CONFIG_MCUMGR_GRP_OS=y 

CONFIG_NET_BUF=y
CONFIG_ZCBOR=y
CONFIG_CRC=y
CONFIG_FLASH_MAP=y
CONFIG_FLASH=y

CONFIG_MCUMGR_TRANSPORT_BT=y 
CONFIG_MCUMGR_GRP_IMG=y
CONFIG_SYSTEM_WORKQUEUE_STACK_SIZE=2304
CONFIG_MAIN_STACK_SIZE=2048

CONFIG_BT=y
CONFIG_BT_PERIPHERAL=y
CONFIG_BT_AUTO_PHY_UPDATE=n
CONFIG_BT_DEVICE_NAME="My Device"
CONFIG_BT_DEVICE_APPEARANCE=0 

CONFIG_BT_SMP=y 
CONFIG_BT_SETTINGS=y 
CONFIG_SETTINGS=y
CONFIG_BT_SIGNING=y
CONFIG_BT_KEYS_OVERWRITE_OLDEST=y
CONFIG_BT_BONDABLE=y
CONFIG_BT_BONDING_REQUIRED=y
CONFIG_FCB=y

CONFIG_MCUMGR_TRANSPORT_BT_PERM_RW_AUTHEN=y 
CONFIG_MCUMGR_LOG_LEVEL_DBG=y

CONFIG_BT_L2CAP_TX_MTU=498
CONFIG_BT_BUF_ACL_TX_SIZE=502
CONFIG_BT_BUF_ACL_RX_SIZE=502
CONFIG_BT_CTLR_DATA_LENGTH_MAX=251

CONFIG_MCUMGR_TRANSPORT_BT_CONN_PARAM_CONTROL=y
CONFIG_MCUMGR_TRANSPORT_BT_REASSEMBLY=y
CONFIG_MCUMGR_TRANSPORT_NETBUF_SIZE=2475
CONFIG_MCUMGR_GRP_OS_MCUMGR_PARAMS=y
CONFIG_MCUMGR_TRANSPORT_WORKQUEUE_STACK_SIZE=4608
CONFIG_MCUMGR_GRP_ZBASIC=y
CONFIG_MCUMGR_GRP_ZBASIC_STORAGE_ERASE=y

CONFIG_BT_CTLR_LE_PING=n

in some github repo someone wrote

some logic can be added to the application to perform this process (Secure OTAU) and CONFIG_MCUMGR_TRANSPORT_BT_PERM_RW_AUTHEN should be used

i'm not sure if i'm missing some extra code. i'm using the following callbacks which are standard from zephyr examples

static struct bt_conn_auth_cb conn_auth_callbacks = {
    .passkey_display = auth_passkey_display,
    .cancel = auth_cancel,
    .pairing_confirm = pairing_confirm,
};

static struct bt_conn_auth_info_cb conn_auth_info_callbacks = {
    .pairing_complete = pairing_complete,
    .pairing_failed = pairing_failed
};

BT_CONN_CB_DEFINE(conn_callbacks) = {
    .connected = connected,
    .disconnected = disconnected,
    .security_changed = security_changed,
};

The bonding works

*** Booting MCUboot v2.1.0-rc1-271-gc8470fb145f8 ***
*** Using Zephyr OS build v4.1.0-951-g1bdffce3b296 ***
*** Booting Zephyr OS build v4.1.0-951-g1bdffce3b296 ***
[00:00:00.003,000] <dbg> otau_smp_sample: main: Board: nucleo_wb55rg
[00:00:00.003,000] <dbg> otau_smp_sample: main: >>> Revision: 0.1.0
[00:00:00.003,000] <dbg> otau_smp_sample: main: Build time: Jan  1 1980 00:00:00
[00:00:00.021,000] <inf> bt_hci_core: No ID address. App must call settings_load()
[00:00:00.056,000] <inf> bt_hci_core: Identity: 02:80:E1:00:00:00 (public)
[00:00:00.057,000] <inf> bt_hci_core: HCI: version 1.0b (0x00) revision 0x807f, manufacturer 0x0030
[00:00:00.057,000] <inf> bt_hci_core: LMP: version 1.0b (0x00) subver 0x007f
[00:00:00.058,000] <inf> otau_smp_sample: Bond deleted succesfully
[00:00:00.061,000] <inf> otau_smp_sample: Advertising successfully started
[00:00:07.010,000] <inf> otau_smp_sample: Connected
[00:00:07.010,000] <wrn> bt_hci_core: opcode 0x2016 status 0x3a
[00:00:07.010,000] <err> bt_conn: Failed read remote features (-5)
[00:00:12.155,000] <dbg> otau_smp_sample: auth_passkey_display: Passkey for 7E:07:D8:13:8D:BD (random): 722465
[00:00:22.185,000] <dbg> otau_smp_sample: security_changed: Security changed: 7E:07:D8:13:8D:BD (random) level 4
[00:00:22.291,000] <dbg> otau_smp_sample: pairing_complete: Pairing completed: 40:FA:FE:94:F8:1B (public), bonded: 1

but for some reason the process stays on "Uploading firmware..." , no idea why . Here is the log from the android app

D 16:40:20.887 [McuMgr] gatt.writeCharacteristic(da2e7828-fbce-4e01-ae9e-261174997c48, value=0x0800000100000008A0, WRITE COMMAND) 
I 16:40:20.892 [McuMgr] Data written to da2e7828-fbce-4e01-ae9e-261174997c48 
I 16:40:20.930 [McuMgr] Notification received from da2e7828-fbce-4e01-ae9e-261174997c48, value: (0x) 09-00-00-06-00-00-00-08-BF-62-72-63-08-FF 
A 16:40:20.936 [McuMgr] Received Header (Version: 1, Op: 1, Flags: 0, Len: 6, Group: 0, Seq: 0, Command: 8) CBOR {"rc":8} 
W 16:40:20.940 [McuMgr] Error: NOT_SUPPORTED (8) 
A 16:40:20.946 [McuMgr] Sending (9 bytes) Header (Version: 1, Op: 0, Flags: 0, Len: 1, Group: 1, Seq: 1, Command: 0) CBOR {}
V 16:40:20.948 [McuMgr] Writing characteristic da2e7828-fbce-4e01-ae9e-261174997c48 (WRITE COMMAND) 
D 16:40:20.950 [McuMgr] gatt.writeCharacteristic(da2e7828-fbce-4e01-ae9e-261174997c48, value=0x0800000100010100A0, WRITE COMMAND) 
I 16:40:20.955 [McuMgr] Data written to da2e7828-fbce-4e01-ae9e-261174997c48
I 16:40:20.961 Connection parameters updated (interval: 11.25ms, latency: 0, timeout: 420ms) 
I 16:40:20.965 [McuMgr] Connection parameters updated (interval: 11.25ms, latency: 0, timeout: 420ms) 
I 16:40:20.974 [McuMgr] Notification received from da2e7828-fbce-4e01-ae9e-261174997c48, value: (0x) 09-...-FF 
A 16:40:20.977 [McuMgr] Received Header (Version: 1, Op: 1, Flags: 0, Len: 134, Group: 1, Seq: 1, Command: 0) CBOR {"images":[{"slot":0,"version":"0.0.0","hash":"UIBCKQTnaKmSmqAIste0c0+7lgcyVXJ1IKEXz72yNfs=","bootable":true,"pending":false,"confirmed":true,"active":true,"permanent":false}],"splitStatus":0} 
V 16:40:20.981 [McuMgr] Uploading firmware... 
I 16:40:21.081 Connection parameters updated (interval: 15.0ms, latency: 0, timeout: 5000ms)

I would appreciate any tips.. thank you!

[daleonpz]

i found the solution

https://community.st.com/t5/stm32-mcus-wireless/intergration-issues-with-example-ble-rfwithflash/td-p/230901

the STM32WB55RG requires a longer conn interval to allow correct sync between CPUs.

CONFIG_MCUMGR_TRANSPORT_BT_CONN_PARAM_CONTROL_TIMEOUT=1000
CONFIG_MCUMGR_TRANSPORT_BT_CONN_PARAM_CONTROL_MAX_INT=50
CONFIG_MCUMGR_TRANSPORT_BT_CONN_PARAM_CONTROL_MIN_INT=24