This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

LAUNCHCC3220MODASF: TIDEP-0083: Connection to server failed.

Guru 24520 points
Other Parts Discussed in Thread: TIDEP-0083, CC3220SF, UNIFLASH

Hi TI Experts,

Now we are trying to do the demonstration of TIDEP-0083. But I had some error when run the demonstration.Would you please teach me the following questions?

I could not find the "geotrustglobalca.der" at "\c55_csl_3.08\demos\voice_ui_cloud\cc3220\IBM_Voice_UI_Demo_CC3220SF_LAUNCHXL". Would you please provide it?
I copied it from web site as below, but I am not sure this is correct file.

Root 1 - Equifax Secure Certificate Authority

I had the following error on console. Would you please provide the advice to resolve it?

Ready to perform network task
Buffer full! Sending audio data
SL_SOCKET_ASYNC_EVENT socket event 2, do restart
Connection to server failed. error(-102)
Error [-2011] at line [833] in function [ConnectToHTTPServer]

If you have any questions, please let me know.
Best regards.

  • Hi Kaka,

    It seems like the IBM Watson Voice Recognition service has changed the root CA used to sign its certificate. This means that the geotrustglobalca.der that is distributed with the project is no longer correct.

    Instead, the certificate you now need is the "VeriSign Class 3 Public Primary Certification Authority - G5" certificate.

    You can get this certificate through a variety of ways, but the way I get it is I simply copy it from my local Windows machine. After all, in order for your own computer to be able to connect using TLS, your computer needs to have a copy of all the root CAs that it trusts so that it can perform certificate chain verification. You can also get the certificate online through the certification authority's website.

    To copy the certificate in Windows for use on the CC3220, you simply open the certificate manager by pressing windows+R to open the Run... dialog, then typing in "certlm.msc".

    Once there, navigate to the desired Verisign certificate, double click to open its properties, and then click on "Copy to file...":

    Once in the export dialog, simply follow the steps to export a DER encoded binary X.509.

    If you don't want to rebuild the IBM_Voice_UI_Demo project, you can rename your certificate file to "geotrustglobalca.der" when loading it into Uniflash. This is because the included binary expects the root CA to be named as such. If you want to rename the root CA to be something more sensible, then you simply have to change the ROOT_CA_CERT define in src/httpvars.h to your new file name.

    That should fix your problem. Let me know if it doesn't or if you have any other questions.


  • Hi Michael,

    Thank you for your response. I could access the IBM cloud.
    I hope to update the sample code of this.

    Best regards.