lwip_httpssrv_mbedTLS_freertos#
Overview#
The lwip_httpsrv_mbedTLS demo application demonstrates an HTTP server set up on lwIP TCP/IP and the MbedTLS stack with FreeRTOS. The user uses an internet browser to send an HTTPS request for connection. The board acts as an HTTP server and sends a web page back to the PC.
The example supports both IPv4 and IPv6 protocols. But some combinations of boards or build configurations may have only IPv4 enabled due to memory constraints. If it fits into memory, it is possible for the example to be compiled with both IPv4 and IPv6 (LWIP_IPV4=1 and LWIP_IPV6=1 in lwipopts.h), IPv4 only (LWIP_IPV4=1 and LWIP_IPV6=0 in lwipopts.h) or IPv6 only (LWIP_IPV4=0 and LWIP_IPV6=1 in lwipopts.h). If IPv6 is enabled, the board will assign a link-local IPv6 address to its interface, but this is often not enough as web browsers tend to not support link-local address with zone index in URL (e.g. https://[FE80::5627:8DFF:FE46:29F8%eth0]). So if the board is connected directly to the host PC, the PC should be configured to send ICMPv6 Router Advertisement messages with Prefix option, which the board could use to assign itself a routable address using the Stateless Address Autoconfiguration mechanism. If the board and the host PC are connected through a router, sending of Router Advertisement messages could be configured on that router (if it supports IPv6). Instructions how to set the IPv6 network correctly can be different on each system and it is out of scope of this readme. It can take a couple of seconds until the addresses are validated and assigned to the board’s ethernet interface, so the board will print “IPv6 address update” messages followed by all valid IPv6 addresses anytime there is a change. The assigned unique local or global unique addresses could be typed into the web browser’s address bar in a form like “https://[FD00:AABB:CCDD:EEFF:5627:8DFF:FE46:29F8]” to access the web server over IPv6.
Prepare the Demo#
Connect a USB cable between the PC host and the OpenSDA(or USB to Serial) USB port on the target board.
Open a serial terminal on PC for OpenSDA serial(or USB to Serial) device with these settings:
115200 baud rate
8 data bits
No parity
One stop bit
No flow control
Insert the Ethernet Cable into the target board’s RJ45 port and connect it to your PC network adapter.
Configure the host PC IP address to 192.168.0.100.
Configure the host PC to advertise IPv6 address prefix.
Open a web browser.
Download the program to the target board.
Either press the reset button on your board or launch the debugger in your IDE to begin running the demo.
Running the demo#
When the demo runs successfully, the terminal will display the following: Initializing PHY…
*********************************************************** mbedTLS HTTPS Server example *********************************************************** IPv4 Address : 192.168.0.102 IPv4 Subnet mask : 255.255.255.0 IPv4 Gateway : 192.168.0.100 IPv6 Address0 : - IPv6 Address1 : - IPv6 Address2 : - *********************************************************** IPv6 address update, valid addresses: IPv6 Address0 : FE80::5627:8DFF:FE46:29F8 IPv6 Address1 : - IPv6 Address2 : - IPv6 address update, valid addresses: IPv6 Address0 : FE80::5627:8DFF:FE46:29F8 IPv6 Address1 : FD00:AABB:CCDD:EEFF:5627:8DFF:FE46:29F8 IPv6 Address2 : -
If the example has been compiled with IPv4 enabled (LWIP_IPV4=1), type https://192.168.0.102 (IP address of the board) into the browser address bar. The browser should show a web page. Username admin and password admin is required to access “Authorization example” section of the web page.
If the example has been compiled with IPv6 enabled (LWIP_IPV6=1), wait for the unique local or global unique IPv6 address to appear in the list of valid addresses in the console output. Then the server could be reached over IPv6. For the example output above, https://[FD00:AABB:CCDD:EEFF:5627:8DFF:FE46:29F8] could be typed into the browser’s address bar to make it show the web page and communicate with the board over IPv6.
Modifying content of static web pages#
To modify content available through the web server you must complete following steps:
Modify, add or delete files in folder “boards/<board_name>/lwip_examples/lwip_httpssrv_mbedTLS_freertos/webpage”.
Run the script file “middleware/lwip/src/apps/httpsrv/mkfs/mkfs.pl <directory name>” to generate new “httpsrv_fs_data.c”. Make sure to execute it from a folder where the file “httpsrv_fs_data.c” is. For example:
C:\sdk\boards\<board_name>\lwip_examples\lwip_httpssrv_mbedTLS_freertos> C:\sdk\middleware\lwip\src\apps\httpsrv\mkfs\mkfs.pl webpage Processing file webpage/auth.html Processing file webpage/cgi.html Processing file webpage/favicon.ico Processing file webpage/help.html Processing file webpage/httpsrv.css Processing file webpage/index.html Processing file webpage/NXP_logo.png Processing file webpage/poll.html Processing file webpage/request.js Processing file webpage/ssi.shtml Processing file webpage/welcome.html Done.
Make sure the “httpsrv_fs_data.c” file has been overwritten with the newly generated content.
Re-compile the HTTP server application example and download it to your board.
Supported Boards#
MIMXRT1060-EVKB
Hardware requirements
Mini/micro USB cable
MIMXRT1060-EVKB board
Personal Computer
Board settings
No special settings are required.
MIMXRT1170-EVKB
Hardware requirements
Mini/micro USB cable
Network cable RJ45 standard
MIMXRT1170-EVKB board
Personal Computer
Board settings
This example uses 1G port(J4) as default. If want to test 100M port(J3), please set the macro BOARD_NETWORK_USE_100M_ENET_PORT to 1.
MIMXRT1060-EVKC
Hardware requirements
Mini/micro USB cable
MIMXRT1060-EVKC board
Personal Computer
Board settings
No special settings are required.
MIMXRT1040-EVK
Hardware requirements
Mini/micro USB cable
MIMXRT1040-EVK board
Personal Computer
Board settings
No special settings are required.
EVK-MIMXRT1064
Hardware requirements
Mini/micro USB cable
EVK-MIMXRT1064 board
Personal Computer
Board settings
No special settings are required.
MIMXRT1160-EVK
Hardware requirements
Mini/micro USB cable
Network cable RJ45 standard
MIMXRT1160-EVK board
Personal Computer
Board settings
This example uses 1G port(J4) as default. If want to test 100M port(J3), please set the macro BOARD_NETWORK_USE_100M_ENET_PORT to 1.
MIMXRT1180-EVK
Hardware requirements
Mini/micro USB cable
Network cable RJ45 standard
MIMXRT1180-EVK board
Personal Computer
Board settings
This example uses Ethernet RJ45 port J32.
FRDM-IMXRT1186
Hardware requirements
Type-C USB cable
Network cable RJ45 standard
FRDM-IMXRT1186 board
Personal Computer
Board settings
Short jumpers J12 (1-2) and J13 (2-3) and connect network cable to J56A.
FRDM-MCXA577
Hardware requirements
Type-C USB cable
RJ45 Network cable (for 100BASE-TX mode)
10BASE-T1S network adapter and cable (optional for 10BASE-T1S mode)
FRDM-MCXA577 board
Personal Computer
Board settings
Short position 2-3 on J29.
Use with 10BASE-T1S Ethernet
The example uses 100BASE-TX Ethernet over RJ45 by default. If you want to use the internal 10BASE-T1S digital PHY, redefine BOARD_NETWORK_USE_TENBASET_PHY from board.h to 1 and rebuild. Connect to a PC with a 10BASE-T1S network adapter instead of RJ45 and enable PLCA on a PC with the following parameters: - node ID: 0 (PLCA coordinator) - node count: 8 - TO timer: 32 BT - burst count: 0 - burst timer: 128 BT
FRDM-MCXN947
Hardware requirements
Type-C USB cable
RJ45 Network cable
FRDM-MCXN947 board
Personal Computer
Board settings
Connect JP13 2-3 pin. Populate R274 to sync reference clock.
FRDM-MCXN947T
Hardware requirements
Type-C USB cable
RJ45 Network cable
FRDM-MCXN947T board
Personal Computer
Board settings
Connect JP13 2-3 pin. Populate R274 to sync reference clock.