• State Resolved
  • Locked Locked
  • Replies 7 replies
  • Subscribers 40 subscribers
  • Views 939 views
  • Users 0 members are here
Support feedback
Options
Options
Related

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

CC3100 SSL connection errors

David Fletcher
Prodigy 80 points

Other Parts Discussed in Thread: CC3100

Like a number of other posters I am having problems with connecting to a server over SSL. I have imported the server cert DER encoded from the server I want to connect with. The Cert is open source from letsencrypt and is beta release. The error returned on connect is -155, from other posts i see that there appears to be a work around  not to verify the server which returns error -453 which is easy to filter. This work around allows me to carry on with my project. My question is there any service pack updates planned to fix this issue as my application will need to verify the server.

Dave.

  • 0
    TI__Genius 16370 points
    David, Which is this server? Can you please share the certificate and the Wireshark/Sniffer logs?

    -/Praneet
  • 0 in reply to Praneet Kumar
    TI__Genius 16370 points
    David, Any update?

    -/Praneet
  • 0 in reply to Praneet Kumar
    Prodigy 80 points
    @Praneet, Sorry for the delay, been really busy. There is a change, I am no longer getting error -155, just -543, not sure why at the moment, as I have reworked my whole app. The DER encoded cert can be downloaded from Letsencypt, I cannot see any option here to attach the file. My next step is to setup wireshark. Below is a copy of my app log.

    Trying to connect
    [CC3100 : SOCKET] Socket created (fd: 81 type: 1, protocol: 100)
    [CC3100 : SOCKET] remote host address (string): 88.86.111.61
    [CC3100 : SOCKET] remote host address from s_addr : 88.86.111.61
    [CC3100 : SOCKET] port: 8443
    [WebSocket : DBG] Configured the socket with CA certificate for server verification

    [CC3100 : SOCKET] Attemting to connect to peer server

    [CC3100 : SOCKET] Warning! Failed to verify server, error -453

    [CC3100 : SOCKET] Connected to Server (Without server verification)

    [WebSocket : DBG]Connected

    [CC3100 : SOCKET]
    Select on sock_fd: 81, returns 1. fdSet: 1
    [WebSocket : DBG]Connected

    [CC3100 : SOCKET]
    Select on sock_fd: 81, returns 1. fdSet: 1
    [WebSocket : DBG]Connected

    [CC3100 : SOCKET]
    Select on sock_fd: 81, returns 1. fdSet: 1
    [WebSocket : DBG]Connected

    [CC3100 : SOCKET]
    Select on sock_fd: 81, returns 1. fdSet: 1
    [WebSocket : DBG]Connected

    [CC3100 : SOCKET]
    Select on sock_fd: 81, returns 1. fdSet: 1
    [WebSocket : DBG]Connected

    [CC3100 : SOCKET]
    Select on sock_fd: 81, returns 1. fdSet: 1
    [WebSocket : DBG]Connected

    [CC3100 : SOCKET]
    Select on sock_fd: 81, returns 1. fdSet: 1
    [CC3100 : SOCKET]
    Select on sock_fd: 81, returns 1. fdSet: 1
    [WebSocket : DBG]receive_all Received 0 size packet

    [WebSocket : DBG]receive_all returned 170
    [WebSocket : DBG]Not connected

    [WebSocket : DBG]recv: HTTP/1.1 101 Switching Protocols
    Date: Wed, 17 Feb 2016 10:30:29 GMT
    Connection: Upgrade
    Sec-WebSocket-Accept: DdLWT/1JcX+nQFHebYP+rqEx5xI=
    Upgrade: WebSocket

    ˆè

    [WebSocket : INFO]
    host: api.bill-air.com
    path: /deviceswscloud?device_hash=/removed.
    port: 8443
  • 0 in reply to David Fletcher
    TI__Genius 16370 points
    David, Error/warning code -453 (SL_ESECSNOVERIFY) means that the client is connected to the server but w/o server verification - You can choose to ignore this warning. I think your client application is not configuring the CA file.

    -/Praneet
  • 0 in reply to Praneet Kumar
    Prodigy 80 points

    Praneet, The cipher required is TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, is this supported, if not will it be in the future, or can I use something else.

    Dave.

  • 0 in reply to David Fletcher
    TI__Genius 16370 points
    Dave, It's not supported, and no plans to support it in near future. Please refer the release-notes (that's part of CC3x00-SDK) for the list of supported ciphers.

    -/Praneet
  • 0 in reply to Praneet Kumar
    Prodigy 80 points
    Praneet, Thanks that's what I thought, but I find that it's best to ask anyway.

    Regards.