Merge pull request #44 from henryk86/master

adapted to latest changes

Author: SciLor

content/docs/tools/teddyCloud/setup/dump-certs/esp32.md

@@ -6,6 +6,7 @@ description: ""
 # ESP32
 You can extract the flash memory via the debug port of the box and the esptool. Keep your backup! Please use a recent version of [esptool](https://github.com/espressif/esptool). (>v4.4)
 Please connect the jumper J100 (Boot) and reset the box to put it into the required UARTmode. Connect your 3.3V UART to J103 (TxD, RxD, GND).
+
 ![J103 Pinout](/img/tb-esp32-uart.jpg)
 
 If connected with the Boot jumper, the box just start in "DOWNLOAD (USB/UART0)" mode (Check with a serial monitor) and the LED will be off. Beware, if the serial monitor is open it will block esptool.py from accessing the esp. If you get a "BROWNOUT_RST" check your power supply / battery. "SPI_FAST_FLASH_BOOT" indicates a boot without the J100 jumper. 
@@ -23,18 +24,28 @@ If the flash is read sucessfully, you can download the unpatched firmware.
 
 ![Flash successfully read](/img/esp32_gui_flashing_02_patchflash.png)
 
-After that you can manually extract the certificates into the ```/certs/client/``` directory. You can either do that with the teddycloud executable on your computer or you may do it via the docker shell `docker exec -it <container-name> bash`.
+
+_(Optionally as you can do it automatically at the end of the flashing process!)_
+
+After that you can manually extract the certificates. You can either do that with the teddycloud executable on your computer or you may do it via the docker shell `docker exec -it <container-name> bash`.
 ```
 # Please check the filename of your backup
-# Be sure you are in the teddycloud directory
+# Be sure you are in the TeddyCloud directory
 # cd /teddycloud/ # just for docker
-teddycloud --esp32-extract data/firmware/ESP32_<mac>.bin --destination certs/client
+mkdir certs/client/<mac>
+teddycloud --esp32-extract data/firmware/ESP32_<mac>.bin --destination certs/client/<mac>
 ```
 Please check the filename of the extracted certs, especially the case! Change them to lowercase if they are uppercase.
 ```
-mv certs/client/CLIENT.DER certs/client/client.der
-mv certs/client/PRIVATE.DER certs/client/private.der
-mv certs/client/CA.DER certs/client/ca.der
+mv certs/client/<mac>/CLIENT.DER certs/client/<mac>/client.der
+mv certs/client/<mac>/PRIVATE.DER certs/client/<mac>/private.der
+mv certs/client/<mac>/CA.DER certs/client/<mac>/ca.der
+```
+For your first Toniebox setup with TeddyCloud, copy the certificates into the base client certificates directory. TeddyCloud uses these certificates to authenticate with the official Tonies Cloud, allowing content to be downloaded without Toniebox interaction (e.g., when you click 'Download' on a Tonie in the GUI).
+```
+cp certs/client/<mac>/client.der certs/client/client.der
+cp certs/client/<mac>/private.der certs/client/private.der
+cp certs/client/<mac>/ca.der certs/client/ca.der
 ```
 
 Be sure, that the dump is okay and you are able to extract the certificates. 
@@ -47,11 +58,18 @@ Be sure, that the dump is okay and you are able to extract the certificates.
 esptool.py -b 921600 read_flash 0x0 0x800000 tb.esp32.bin
 # extract certficates from firmware
 mkdir certs/client/esp32
+mkdir certs/client/<mac>
 teddycloud --esp32-extract tb.esp32.bin --destination certs/client/esp32
+
 # Copy box certificates to teddyCloud
-cp certs/client/esp32/CLIENT.DER  certs/client/client.der
-cp certs/client/esp32/PRIVATE.DER  certs/client/private.der
-cp certs/client/esp32/CA.DER  certs/client/ca.der
+cp certs/client/esp32/CLIENT.DER certs/client/<mac>/client.der
+cp certs/client/esp32/PRIVATE.DER certs/client/<mac>/private.der
+cp certs/client/esp32/CA.DER certs/client/<mac>/ca.der
+
+# In case of first Toniebox setup for TeddyCloud
+cp certs/client/<mac>/client.der certs/client/client.der
+cp certs/client/<mac>/private.der certs/client/private.der
+cp certs/client/<mac>/ca.der certs/client/ca.der
 
 # Copy certificates to temporary dir
 mkdir certs/client/esp32-fakeca

content/docs/tools/teddyCloud/setup/flash-ca/esp32.md

@@ -28,6 +28,7 @@ If the flashing was successful, you can download the unpatched and patched Firmw
 
 ![Flashing done](/img/esp32_gui_flashing_06_flashingdone.png)
 
+You can now also extract and place the certificates automatically.
 
 ## Legacy
 Replace the original CA within your flash dump with esptool.