Received-SPF: pass (google.com: best guess record for domain of linux-bluetooth-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Date:   Mon, 16 Sep 2019 13:08:39 +0200
From:   =?utf-8?Q?Micha=C5=82?= Lowas-Rzechonek 
        <michal.lowas-rzechonek@silvair.com>
To:     "Gix, Brian" <brian.gix@intel.com>
Cc:     "linux-bluetooth@vger.kernel.org" <linux-bluetooth@vger.kernel.org>,
        "Stotland, Inga" <inga.stotland@intel.com>
Subject: Re: [PATCH BlueZ 1/1] mesh: Add local/remote bools to DevKey
 transactions
Message-ID: <20190916110839.jscnzmdnnrbefmqm@mlowasrzechonek2133>
Mail-Followup-To: "Gix, Brian" <brian.gix@intel.com>,
        "linux-bluetooth@vger.kernel.org" <linux-bluetooth@vger.kernel.org>,
        "Stotland, Inga" <inga.stotland@intel.com>
References: <20190915081408.18116-1-brian.gix@intel.com>
 <20190915081408.18116-2-brian.gix@intel.com>
 <20190916095845.htvyalekgr4k2ybt@mlowasrzechonek2133>
 <8DD9DDA0-1081-479F-B215-2E815B1A8F27@intel.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <8DD9DDA0-1081-479F-B215-2E815B1A8F27@intel.com>
User-Agent: NeoMutt/20180716
Sender: linux-bluetooth-owner@vger.kernel.org
Precedence: bulk

Hi Brian,

On 09/16, Gix, Brian wrote:
> > 1. If the application would like to change Config Server states on the
> >   local node, it would need to:
> >    - call ImportRemoteNode, passing the address of a *local* node and
> >      the device key obtained from provisioner
> >    - call DevKeySend to a *local* address, with remote flag set to true
> >    - receive responses via DevKeyMessageReceived from *local* node,
> >      with remote flag set to true
> > 
> >   Essentially this means that talking to a local node using device
> >   security behaves in the same manner as if the node was a remote one.
> > 
> > 2. If the application would like to implement an external model that
> >   uses device security, it would:
> >    - receive DevKeyMessageReceived calls from remote nodes, with remote
> >      flag set to false
> >    - send responses by calling DevKeySend to a *remote* address with
> >      remote flag set to false
> > 
> > This means that calling DevKeySend to a *local* address with remote flag
> > false would be forbidden, in order to force the application to use
> > ImportRemoteNode first?
> 
> I think that is all basically correct. I switched the Boolean
> bit-sense  such that the boolean parameter is “remote” on the send and
> “local” on the receive.
> 
> And most importantly, your last point is an emphatic yes....    you
> will need to import your own device key to the key ring if you want to
> talk to your own builtin servers.  The one exception will be nodes
> that have called “Create()” which are generating brand new mesh
> networks with themselves as unicast 0001.

Ok, sounds good!

-- 
Michał Lowas-Rzechonek <michal.lowas-rzechonek@silvair.com>
Silvair http://silvair.com
Jasnogórska 44, 31-358 Krakow, POLAND