Hi all,
So I've been following the saga of trying to get a commercially available code signing certificate to work with the standard certificate catalog. There is an extensive thread here which largely involves the process of creating a custom catalog for self-signed certificates.
I'd rather not have to deal with the fuss of creating a custom catalog. However, as has been noted previously (source 1, source 2, source 3), all new code signing certs must have a minimum key length of 3072 bits, which exceeds the CC3220 and CC3235's maximum capability of 2048 bits. We have an existing product which uses a 2048-bit certificate from DigiCert that was obtained 2-3 years ago, but it's now impossible to obtain another certificate of that same vintage.
Question for TI - are you aware of any code signing certificate solution that is compatible with the SDK standard certificate catalog (not playground)? If not, does this mean that anyone implementing code signing on the CC3220 or CC3235 is effectively required to create their own custom root CA catalog? Thanks.
David R.
