AWS Device Qualifications Fails

[Alexey Papkovskiy]

Hi guys,

We are building an IoT device on nRF9160

The main protocol is MQTT and we are using AWS IoT Core as a Cloud provider.

MQTT client is based on nRF Connect SDK 2.5.0 mqtt_helper library.

We want to use AWS Device Adviser (https://docs.aws.amazon.com/iot/latest/developerguide/device-advisor.html) in our tests.

Most of the supported tests are green, but we are facing a problem with TLS Expired Server Certificate test (https://docs.aws.amazon.com/iot/latest/developerguide/device-advisor-tests-tls.html#expired-server) The test always fails, that means the device can connect to a server with an expired certificate.

I've attached the test log from AWS Device Adviser

Any thoughts on what can be wrong? Missed config options?

BR,

Alexey

log-events-viewer-result.csv

[Charlie]

Hi Alexey,

We are short of staff due to the public holiday period.

Please expect a reply to come in next week.

Best regards,

Charlie

[Alexey Papkovskiy]

Ok, no problem)))

[Charlie]

Hi Alexey,

This seems related to TLS_PEER_VERIFY.

Are you able to check if this socket option is enabled in your codes?

Best regards,

Charlie

[Alexey Papkovskiy]

Hi Charlie,

Yeh, it is enabled. And other tests, for instance, "TLS Incorrect Subject Name Server Cert" and "TLS Unsecure Server Cert" are green.

[Charlie]

Hi Alexey,

Thanks for the clarification.

Are you able to share a modem trace recording and its log printout when you do this kind of test?

This will help us to understand what happened when this TLS Expired Server Certificate test failed.

Best regards,

Charlie