CC3220: How can I successfully connect to AWS Iot?

user5117029

Part Number: CC3220

I use the CC3220S LAUNCHXL and I want to follow the example "subscribe_publish_sample" from SimpleLink CC32XX SDK AWS IoT Plugin

I read the document "AWS_Quick_Start_Guide" carefully , I signed up, registered a device and got a certificate for the device.

Then I opened the file aws_iot_config.h, and make the revisions:

#define AWS_IOT_MQTT_HOST              "a2w8gdbg327bxd.iot.ap-southeast-1.amazonaws.com" ///< Customer specific MQTT HOST. The same will be used for Thing Shadow
#define AWS_IOT_MQTT_PORT              8883 ///< default port for MQTT/S
#define AWS_IOT_MQTT_CLIENT_ID         "Test_1" ///< MQTT client ID should be unique for every device
#define AWS_IOT_MY_THING_NAME         "Test_1" ///< Thing Name of the Shadow this device is associated with

I copy the information of my certificate into certs.h one array like this:

const char client_cert_pem[] =

"MIIDWTCCAkGgAwIBAgIUdRSmxn3Zr4pXeEZW6T1WIJFPZlkwDQYJKoZIhvcNAQEL\
BQAwTTFLMEkGA1UECwxCQW1hem9uIFdlYiBTZXJ2aWNlcyBPPUFtYXpvbi5jb20g\
SW5jLiBMPVNlYXR0bGUgU1Q9V2FzaGluZ3RvbiBDPVVTMB4XDTE4MDUyMzE1MDkx\
M1oXDTQ5MTIzMTIzNTk1OVowHjEcMBoGA1UEAwwTQVdTIElvVCBDZXJ0aWZpY2F0\
ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZaDPCiT+h4Tl/Jag68\
lEEepi5JVk+FtOhk1m9TreIfJo/yXuhSvCxTl8Vc+NnsTEZoYs9qZf5NGPVFrIjW\
7i3yBcVL0FKeA4jH3vvG4gn/6k8dVG+zsIY1c4VTyUWAkRJ0hWl6GbUkz0DElYgr\
/MZA6b4GP6o163GSa4AeI988oBNxl44MZh6b3/drC6g5TmRLNTR0/QxPM1xCiJPG\
1DOao/118JH1x0dBMB7TKhel+f3OqQTyfDPl240Xw8lymZ7WZEythc/TvfPQLVRF\
zGHP41itiK1gzz45lUguQsRWhAPNb+eX2S37dpwp4Rnbshmm9AFLHC+Qg9YTrRIs\
4psCAwEAAaNgMF4wHwYDVR0jBBgwFoAUXiT6JAWe212Mf3XZTcCJsFkuu+YwHQYD\
VR0OBBYEFM2D+zI3PxMcQBfi0o5TiC+4g6ziMAwGA1UdEwEB/wQCMAAwDgYDVR0P\
AQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4IBAQAihPVR8cPMXToz/L5bygfq/D66\
KRY//+0Q3kQM6AVXzsHbZ/t+Vvs7FmPZe0N0eeGmAqM51/wrOSzJicm/yM2RW7By\
TFSUpRPM0flO9gU/GH6U0mu77ecW8CbQXs9unmZLYe94pb6XGHl1kCZ3F/xGIyhM\
koKAi2npb3ZHdwlQTfBUwyWhWY0r1Yu7XxowptbCGLD9jGqLeSKFMr2RhSSyF3Fz\
vsPu2ryNFjJXPQQylgEXlrYHZJOVecYUFR+gRP2uOVC/pnI7a+hsMD5b7KVwlyz0\
4TShU0r5z1g8kWgRiHpdETvIQtjQ0Fi4MkGb5hQMadPl/zd+eddSWQg1m6K6";

After doing this (also updated the Wi-Fi SSID and SECURITY_KEY macros)

The information from UART is

Error (-24) connect to a2w8gdbg327bxd.iot.ap-southeast-1.amazonaws.com:8883

Could anyone tell me that if I did something wrong or miss something?

Thanks a lot

Wong Ju

over 5 years ago

0 Vincent Rodriguez over 5 years ago

TI__Mastermind 28285 points

Wong,

Can you confirm you AP has access to the Internet?

VR

0 Michael Reymond over 5 years ago in reply to Vincent Rodriguez

TI__Mastermind 40965 points

Hi Wong,

Please also take a look at this E2E post for AWS debugging steps:
e2e.ti.com/.../2218493

If you are using the playground root CA catalog, then you will have to edit network_sl.c since the root CA provided by AWS is not included as a trusted certificate in the playground catalog. This is the most common cause of error -24 when connected to AWS.

If Roger's tips don't help you or if you have any further questions, please let me know.

Regards,
Michael

0 Markel Robregado over 5 years ago in reply to Michael Reymond

Guru 85695 points

Hi Michael,

I am having the same problem. How do you copy the root ca string. When I open the file using notepad++ it is not readable.

-kel

0 Michael Reymond over 5 years ago in reply to Markel Robregado

TI__Mastermind 40965 points

Hi Kel,

For the root CA, you can find the correct Verisign class 3 public primary g5 root ca cert from Amazon here:
docs.aws.amazon.com/.../managing-device-certs.html

There should be a link to it as a plain text doc. You can then copy this to the appropriate array in certs.h

Regards,
Michael

0 user5117029 over 5 years ago in reply to Michael Reymond

Prodigy 90 points

Hi Michael,

I did what Roger said,check the context of cert and flashed the certificate file again ,but it doesn't work,

By the way const char root_ca_pem[] = "-----BEGIN CERTIFICATE-----\ is this nesscessary ? (I tried adding it)

0 Michael Reymond over 5 years ago in reply to user5117029

TI__Mastermind 40965 points

Hi Wong,

You need the "-----BEGIN CERTIFICATE-----" and the "-----END CERTIFICATE-----" exactly as Roger shows in his post. For the private key "-----BEGIN RSA PRIVATE KEY-----" and "-----END RSA PRIVATE KEY-----" is needed instead.

Regards,
Michael

0 user5117029 over 5 years ago in reply to Michael Reymond

Prodigy 90 points

Hi Michael,
I found that I made a stuiped mistake, Roger's tips are useful to me, thank you for being patient for anwsering my question.
-Wong Ju

Wi-Fi

Wi-Fi forum

CC3220: How can I successfully connect to AWS Iot?