Merge pull request #95 from kstribrnAmzn/fixProvision

Fix certificate generation and provisioning script

Author: kstribrnAmzn

Common/crypto/PkiObjectPkcs11.c

@@ -113,7 +113,7 @@
         if( CKR_OK == xResult )
         {
             /* Add space for DER Header */
-            *pulPubKeyDerLen = xTemplate.ulValueLen + sizeof( pucEcP256AsnAndOid ) - sizeof( pucUnusedKeyTag ) + 1;
+            *pulPubKeyDerLen = xTemplate.ulValueLen + sizeof( pucEcP256AsnAndOid ) - sizeof( pucUnusedKeyTag );
 
             /* Allocate a buffer for the DER form  of the key */
             *ppucPubKeyDer = pvPortMalloc( *pulPubKeyDerLen );

tools/provision.py

@@ -337,7 +337,7 @@ def __init__(self, args):
         # Convert Namespace to dict
         args = vars(args)
 
-        aws_profile = args.get("aws_profile", "default")
+        aws_profile = args.get("aws_profile", None)
         aws_region_name = args.get("aws_region", None)
         aws_access_key_id = args.get("aws_access_key_id", None)
         aws_secret_access_key = args.get("aws_secret_access_key", None)
@@ -352,11 +352,10 @@ def __init__(self, args):
             )
 
         # If profile is specified, allow boto3 to determine other arguments from ~/.aws/config
-        elif aws_profile:
+        elif not aws_profile:
             self.session = boto3.session.Session(
                 profile_name=aws_profile,
             )
-
         self.check_credentials()
 
     def check_credentials(self):
@@ -919,7 +918,7 @@ def main():
     # Initialize a connection to AWS IoT
     aws = AwsHelper(args=args)
     if not aws.check_credentials():
-        print("The provided AWS account credentials are inalid.")
+        print("The provided AWS account credentials are invalid.")
         raise SystemExit
 
     target.conf_set("mqtt_endpoint", aws.get_endpoint())