pm_conn_sec_params_reply didn't work

RE: pm_conn_sec_params_reply didn't work

Hung Bui — Thu, 01 Feb 2024 08:31:44 GMT

Hi Choayue,

Could you reproduce the issue on any of our example ? If it can't be reproduced by the example, then we will need to look into what make the implementation in your application different to the example, for example multilink example.
We need to be able to reproduce the issue here to be able to find the root cause.

RE: pm_conn_sec_params_reply didn't work

Chaoyue Ying — Wed, 31 Jan 2024 12:52:02 GMT

Hi,

I permit one bonding at thr same time.Once the connection be established，the restart of advertising is not be allowed until bonding is success.You get this on the code showed in the start of this case.

I will try to double PM_FLASH_BUFFERS,but it is still possible that pm write buffer is running out.I am afraid the problem will happen in the future.

I hope get a method to resolve it once and for all.

RE: pm_conn_sec_params_reply didn't work

Hung Bui — Wed, 31 Jan 2024 10:02:11 GMT

Hi Choayue,
It's strange that the pm write buffer is running out. How many bonding do you do at the same time (concurrently) ?

You may consider doing one bonding at a time if you have multiple connection.
Could you try increasing the PM_FLASH_BUFFERS to maybe double it to see if you still have the issue ?

RE: pm_conn_sec_params_reply didn't work

Chaoyue Ying — Wed, 31 Jan 2024 07:37:53 GMT

Hi,

Now I test my idea ,sd_ble_gap_sec_params_reply() didn't called by smd_params_reply().Beacuse sec_keyset_fill() return NRF_ERROR_BUSY.But the annotation tell me that there no buffer exist.

If I need to change PM_FLASH_BUFFERS?The value of PM_FLASH_BUFFERS is 4 now,if you have a suggest value?Or there have other ways to accelerate write so that the write buffer free enough space to deal bonding data?

RE: pm_conn_sec_params_reply didn't work

Chaoyue Ying — Wed, 31 Jan 2024 06:44:59 GMT

I try to recurrence the error but until now it not happened.When the application running before the error happened, I try to bond with central devices like smartphone(the NRF_SDH_BLE_PERIPHERAL_LINK_COUNT is 5,so I will disconnect after bonding)as many as possible.Unfortunately,I didn't count the number of bonds before the error happened.

I check the code that security_dispatcher.c .

Smd_params_reply() called sd_ble_gap_sec_params_reply().But there only have a condition in if() that sec_keyset_fill() return NRF_SUCCESS.

Maybe sec_keyset_fill() return a err_code without NRF_SUCCESS so that the sd_ble_gap_sec_params_reply() didn't work?

I'm trying recurrence the error to test this idea.But I wan to know if there have method to deal the condition that sec_keyset_fill() return wihout NRF_SUCCESS.

RE: pm_conn_sec_params_reply didn't work

Hung Bui — Tue, 30 Jan 2024 10:38:08 GMT

Hi Chaoyue,
Could you clarify how many bond you can create until you see the error . It's not very clear what you mean by "It always happened after running for a while". How long or how many bonds are created until you see the error ?

As I said in the last reply, the central sent a pairing request but got no response. Please check if sd_ble_gap_sec_params_reply() is called by the peer manager library. It should be called by smd_params_reply() function in security_dispatcher.c

The event you should look for is BLE_GAP_EVT_SEC_PARAMS_REQUEST, it's handled in smd_ble_evt_handler() in the same file.

RE: pm_conn_sec_params_reply didn't work

Chaoyue Ying — Tue, 30 Jan 2024 00:48:34 GMT

Hi,

I show how implement the peer manager in my application at the start of the case.If need more imformation,please tell me specific about it.

When the device bond with the first central, the problem will not happened.It always happened after running for a while.

I think it have nothing to do with reach the maximum number of bond.First,I find such a parameter in peer_manager_types.h

#define PM_PEER_ID_N_AVAILABLE_IDS      256

I'm more inclined to run out of memory.

Then,when the problem happened,I try to restart application without pm_peers_delete(), the bonding process is normal.

RE: pm_conn_sec_params_reply didn't work

Hung Bui — Mon, 29 Jan 2024 13:20:31 GMT

Hi Chaoyue,

From what I can see in the trace you provided, the central sent a Pairing request and was expecting the peripheral to send a pairing response back but the peripheral didn't.

So most likely in the peripheral code the sd_ble_gap_sec_params_reply() was not called. (see the sequence chart here: https://infocenter.nordicsemi.com/topic/com.nordic.infocenter.s132.api.v7.3.0/group___b_l_e___g_a_p___p_e_r_i_p_h___b_o_n_d_i_n_g___j_w___m_s_c.html?cp=5_7_3_1_2_1_5_10_7_0

Please note that calling pm_conn_sec_params_reply () is optional and it doesn't call sd_ble_gap_sec_params_reply() directly.

We will need to look why the call for sd_ble_gap_sec_params_reply() in security_manager.c is not called.

Could you show us how you implement the peer manager in your application ? Do you have the same problem when you test with our example in the SDK, for example ble_app_proximity ?

Do you have the issue when the device bond with the first central ? Is there any chance that it is reaching the maximum number of bond ?

RE: pm_conn_sec_params_reply didn't work

Chaoyue Ying — Fri, 26 Jan 2024 01:04:09 GMT

The brand of my phone is Honor,and I try with some brands phone that they use android os.

By the way,I try to use the nRF to connect.You can see the central deal in my code.

But it still puzzled me why the security params request send several times.

I use nRF Sniffer get the information,unfortunately I can't analyze it.

devzone.nordicsemi.com/.../req.pcapng

I never try the samples that does a secutiry params request, because I just hope use the peer_manager to paring and bonding, this problem happened after the application running for a while and bond with several devices.

RE: pm_conn_sec_params_reply didn't work

Jared — Thu, 25 Jan 2024 15:07:15 GMT

Hi,

What kind of phone are you using, have you tried with another phone from different brand?

Why is the security params request sent multiple times from the phone?

Can you use nRF Sniffer and provide a sniffer trace?

Have you tried any of the samples that does a security params request such as ble_app_interactive, any issues with that?

regards

Jared