I’m attempting to test a gateway against the latest Chirpstack server package via Semtech Basic Station.
My bridge configuration file:
# See https://www.chirpstack.io/gateway-bridge/install/config/ for a full # configuration example and documentation. # Gateway backend configuration. [backend] # Backend type. # # Valid options are: # * semtech_udp # * basic_station type="basic_station" [backend.basic_station] # ip:port to bind the Websocket listener to. bind="172.31.40.150:3001" # TLS certificate and key files. # # When set, the websocket listener will use TLS to secure the connections # between the gateways and ChirpStack Gateway Bridge (optional). tls_cert="/etc/chirpstack-gateway-bridge/certs/server.crt" tls_key="/etc/chirpstack-gateway-bridge/certs/server.key" #tls_cert="/etc/chirpstack-gateway-bridge/certs/cert.pem" #tls_key="/etc/chirpstack-gateway-bridge/certs/privkey.pem" #tls_cert="" #tls_key="" # TLS CA certificate. # # When configured, ChirpStack Gateway Bridge will validate that the client # certificate of the gateway has been signed by this CA certificate. #ca_cert="/etc/chirpstack-gateway-bridge/certs/fullchain.pem" ca_cert="/etc/chirpstack-gateway-bridge/certs/ca.crt" #ca_cert="/etc/chirpstack-gateway-bridge/certs/fullchain.pem" #ca_cert="" # Ping interval. ping_interval="1m0s" # Read timeout. # # This interval must be greater than the configured ping interval. read_timeout="1m5s" # Write timeout. write_timeout="1s" # Region. # # Please refer to the LoRaWAN Regional Parameters specification # for the complete list of common region names. region="AU_915_928" # Minimal frequency (Hz). frequency_min=915000000 # Maximum frequency (Hz). frequency_max=928000000 #Concentrator configuration. # This section contains the configuration for the SX1301 concentrator chips. # Example: [[backend.basic_station.concentrators]] # Multi-SF channel configuration. [backend.basic_station.concentrators.multi_sf] # 916.8, 917.0, 917.2, 917.4, 917.6, 917.8, 918.0, 918.2 - 917.5 # Frequencies (Hz). frequencies=[ 916800000, 917000000, 917200000, 917400000, 917600000, 917800000, 918000000, 918200000, ] # LoRa STD channel. [backend.basic_station.concentrators.lora_std] # Frequency (Hz). frequency=917500000 # Bandwidth (Hz). bandwidth=500000 # Spreading factor. spreading_factor=7 # FSK channel. # [backend.basic_station.concentrators.fsk] # Frequency (Hz). #frequency=868800000 [integration.mqtt.auth.generic] server="tcp://127.0.0.1:1883" username="chirpstack_gw" password="chirpstack_gw"
I have been able to get SBS working fine in unsecured mode - i.e.
However, when I try to use certs, I get output like this (note the router_uri is Null)
gatewaybridge@ip-172-31-40-150:~$ /usr/bin/bridge --log-level 5
INFO starting ChirpStack Gateway Bridge docs=“https://www.chirpstack.io/gateway-bridge/” version=3.6.0
INFO filters: NetID filter configured net_id=000000
INFO filters: JoinEUI range configured join_eui_from=0000000000000000 join_eui_to=ffffffffffffffff
INFO backend/basicstation: starting websocket listener bind=“172.31.40.150:3001” ca_cert=/etc/chirpstack-gateway-bridge/certs/ca.crt tls_cert=/etc/chirpstack-gateway-bridge/certs/server.crt tls_key=/etc/chirpstack-gateway-bridge/certs/server.key
INFO integration/mqtt: connected to mqtt broker
2020/01/16 16:02:56 http: TLS handshake error from 22.214.171.124:59758: EOF
INFO backend/basicstation: router-info request received gateway_id=c0ee40fffe2963d1 remote_addr=“126.96.36.199:59762” router_uri=
I originally tried using my Let’s Encrypt certs - copied to a directory and with permissions so the “gatewaybridge” user can access them.
This didn’t work - so as a last resort, I created a set of self-signed certs and tried those.
Same result - the router_uri is always null - which causes the SBS packet forwarder on the gateway to complain and restart.
Increasing the log level of the bridge didn’t help.
Note - since I couldn’t figure out how to keep the bridge from respawning after I killed it off, I copied it to /usr/bin/bridge and then chmod’d the original to -X to keep it from respawning automatically.
That allowed me to run the copy of the bridge binary manually.
Any help is appreciated.