Android chip-tool unable to commission nano leaf bulb, throwing pairing failed error on android chip-tool app

RE: Android chip-tool unable to commission nano leaf bulb, throwing pairing failed error on android chip-tool app

Sravan Kumar — Tue, 16 Jan 2024 09:02:30 GMT

Thanks for your effort Simon

RE: Android chip-tool unable to commission nano leaf bulb, throwing pairing failed error on android chip-tool app

Simonr — Tue, 16 Jan 2024 08:53:38 GMT

Hi Sravan

Unfortunately we stopped supporting the Android CHIP Tool app as of NCS 2.3.0. We recommend using the development CHIP Tool for Linux or MacOS or mobile applications from publicly available Matter Ecosystems. What we can offer in terms of support is unfortunately limited.

The app is made by Google I think, so you will need to ask Google's support services about assistance with the certificates in the Android CHIP Tool app I'm afraid, as we've got no one working on it.

Best regards,

Simon

RE: Android chip-tool unable to commission nano leaf bulb, throwing pairing failed error on android chip-tool app

Simonr — Mon, 15 Jan 2024 10:13:56 GMT

I have asked the Android devs internally now, and will get back to you when I hear from them.

Best regards,

Simon

RE: Android chip-tool unable to commission nano leaf bulb, throwing pairing failed error on android chip-tool app

Sravan Kumar — Thu, 11 Jan 2024 13:34:03 GMT

Thanks for the reply Simon, it would be great if I get help from Android dev team

RE: Android chip-tool unable to commission nano leaf bulb, throwing pairing failed error on android chip-tool app

Simonr — Thu, 11 Jan 2024 13:26:16 GMT

I would think so, but I don't have much experience on Android, so I don't have any specific suggestions. I can ask the Android devs we have here at Nordic for suggestions if you'd like, but it might take a few days before I get back to you.

Best regards,

Simon

RE: Android chip-tool unable to commission nano leaf bulb, throwing pairing failed error on android chip-tool app

Sravan Kumar — Wed, 10 Jan 2024 13:02:36 GMT

Hi Simon,

Is there a way we can include certificates to android chip-tool during build time itself, so that it can fetch from mobile storage and validate certificates during attestation step?

RE: Android chip-tool unable to commission nano leaf bulb, throwing pairing failed error on android chip-tool app

Simonr — Wed, 10 Jan 2024 07:30:30 GMT

I'm not much of an Android developer I'm afraid, so I don't have an exact suggestion here, but it seems the PAA is handled in the following path in our Android CHIPTool project: examples/android/CHIPTool/app/src/main/java/com/google/chip/chiptool/attestation

Please check out the files there as they should have some clues on how to handle the PAA certificates in Android.

Best regards,

Simon

RE: Android chip-tool unable to commission nano leaf bulb, throwing pairing failed error on android chip-tool app

Sravan Kumar — Tue, 09 Jan 2024 12:49:26 GMT

Thanks Simon, for pointing out exact reason.

reg production quality PAA, if it is linux chip-tool, then we can pass below commands:

sudo ./chip-tool pairing ble-thread 1 hex:0e080000000000010000000300000f35060004001fffe0020811111111222222220708fd4d2e4edd59e21f051000112233445566778899aabbccddeeff030e4f70656e54687265616444656d6f010212340410445f2b5ca6f2a93a55ce570a70efeecb0c0402a0f7f8 83611958 1044 --cd-trust-store-path ../../credentials/development/cd-certs --paa-trust-store-path ../../credentials/production/paa-root-certs/ --trace_log 1 --trace_file trace.raw --trace-decode 1

sudo ./chip-tool pairing ble-thread 1 hex:0e080000000000010000000300000b35060004001fffe0020800000b2f4fc084780708fdcf1765bb15ebec051000112233445566778899aabbccddeeff030e4f70656e54687265616444656d6f010231240410445f2b5ca6f2a93a55ce570a70efeecb0c0402a0f7f8 83611958 1044 --bypass-attestation-verifier true

but in android chip-tool how we can achieve the same, let us know if any way is there?

RE: Android chip-tool unable to commission nano leaf bulb, throwing pairing failed error on android chip-tool app

Simonr — Tue, 09 Jan 2024 09:00:03 GMT

Okay, after another look at the logs it seems like the attestation verification isn't able to find a PAA as it reports "Failed in verifying 'Attestation Information' command received from the device: err 101" which points to "kPaaNotFound". Sorry I didn't catch that initially.

This is likely because by default the chip-tool only uses the test PAA, while a "real" product like the nano leaf bulb will use a production quality PAA. You probably need to pass a --paa-trust-store-path argument or something to chip-tool that points to a directory of PAA certs that you want to trust and connect to. If you just want to trust them all, passing the credentials/development/paa-root-certs or credentials/production/paa-root-certs directory in the Matter repo should work.

Best regards,

Simon

RE: Android chip-tool unable to commission nano leaf bulb, throwing pairing failed error on android chip-tool app

Sravan Kumar — Tue, 09 Jan 2024 04:44:32 GMT

Hi Simon,

Please find inline answers

Simon: Have you followed this Android commissioning guide to see how to do the commissioning process and set up the accessory device? Are you sure the NanoLeaf bulb isn't already connected to the network over the RPi already, and that is why the phone isn't able to commission it?

Sravan: we used prebuilt chip-tool apk from https://github.com/nrfconnect/sdk-connectedhomeip/releases/download/v2.2.0/chip-tool-android_aarch64.apk, and NanoLeaf bulb not connected to the network over the RPi

Simon: What phone exactly are you using for commissioning? Have you checked the requirements saying you need a smartphone with Android 8 or newer and that you have a Wi-Fi Access Point supporting IPv6 (without the IPv6 Router Advertisement Guard enabled on the router).

Sravan: tried with one plus nord 2 mobile (note same app and mobile able to commission and control nrf DK board (light example)).

Simon: Can you also share a screenshot of the phone when trying to commission so we get a better view of what's going on, as this error message doesn't tell me much I'm afraid.

Sravan : please find screenshots of chip-toll app.

as per previous attached debug logs, we found that its failing at AttestationVerification.

Is there a way to skip AttestationVerification or find required certificates of end device and available for AttestationVerification.

RE: Android chip-tool unable to commission nano leaf bulb, throwing pairing failed error on android chip-tool app

Simonr — Mon, 08 Jan 2024 13:50:13 GMT

Have you followed this Android commissioning guide to see how to do the commissioning process and set up the accessory device? Are you sure the NanoLeaf bulb isn't already connected to the network over the RPi already, and that is why the phone isn't able to commission it?

What phone exactly are you using for commissioning? Have you checked the requirements saying you need a smartphone with Android 8 or newer and that you have a Wi-Fi Access Point supporting IPv6 (without the IPv6 Router Advertisement Guard enabled on the router).

Can you also share a screenshot of the phone when trying to commission so we get a better view of what's going on, as this error message doesn't tell me much I'm afraid.

Best regards,

Simon