nrf9151 https_client doesn't work

[john.liu]

hi:

I use ncs 2.8.0 ,nrf9151 dk and v2.8.0\nrf\samples\net\https_client.

I modified the DigiCertGlobalG2.pem

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

this is log:

*** Booting nRF Connect SDK v2.8.0-a2386bfc8401 ***
*** Using Zephyr OS v3.7.99-0bc3393fb112 ***
HTTPS client sample started
Bringing network interface up

Provisioning certificate
Certificate match
Connecting to the network
+CGEV: EXCE STATUS 0

%MDMEV: SEARCH STATUS 1

CEREG: 2,"1D23","0D6FC34B",9
%MDMEV: PRACH CE-LEVEL 0
+CSCON: 1

+CGEV: ME PDN ACT 0,0
+CNEC_ESM: 50,0
%MDMEV: SEARCH STATUS 2
+CEREG: 5,"1D23","0D6FC34B",9,,,"11100000","11100000"
Network connectivity established and IP address assigned
Looking up example.com
Resolved 96.7.128.198 (AF_INET)
Connecting to example.com:443

connect() failed, err: 111

+CEREG: 0
+CGEV: ME DETACH
+CSCON: 0
Network connectivity lost
Disconnected from the network

connect() failed, err: 111.

What is the reason for this? How do I fix this?

[Susheel Nuguru]

I am very sorry for a very late response

Can you please check if it works with the default given certificate  and also mention the reason for changing it and where did you get the new certificate from? How did you generate and sign this certificate?

[MalloryLP]

Hi Susheel, 

Using the default certificate and the the default code, connect() failed, err: 111.

*** Booting nRF Connect SDK v2.9.1-60d0d6c8d42d ***
*** Using Zephyr OS v3.7.99-ca954a6216c9 ***
HTTPS client sample started
Bringing network interface up
[00:00:00.511,108] <dbg> lte_lc: xsystemmode_mode_set: System mode set to 7, preference 3
Provisioning certificate
Certificate match
Connecting to the network
[00:00:00.592,529] <dbg> lte_lc: cfun_mode_set: Functional mode set to 21
+CGEV: EXCE STATUS 0
+CEREG: 2,"C10F","09681107",7
[00:00:03.944,946] <dbg> lte_lc: at_handler_cereg: +CEREG notification: +CEREG: 2,"C10F","09681107",7
[00:00:03.945,007] <dbg> lte_lc: parse_cereg: Network registration status: 2
[00:00:03.945,159] <dbg> lte_lc: parse_cereg: LTE mode: 7
[00:00:03.945,190] <dbg> lte_lc: event_handler_list_dispatch: Dispatching event: type=0
[00:00:03.945,190] <dbg> lte_lc: event_handler_list_dispatch:  - handler=0x0000882D
[00:00:03.945,220] <dbg> lte_lc: event_handler_list_dispatch: Done
[00:00:03.945,220] <dbg> lte_lc: event_handler_list_dispatch: Dispatching event: type=4
[00:00:03.945,251] <dbg> lte_lc: event_handler_list_dispatch:  - handler=0x0000882D
[00:00:03.945,251] <dbg> lte_lc: event_handler_list_dispatch: Done
[00:00:03.945,281] <dbg> lte_lc: event_handler_list_dispatch: Dispatching event: type=5
[00:00:03.945,312] <dbg> lte_lc: event_handler_list_dispatch:  - handler=0x0000882D
[00:00:03.945,312] <dbg> lte_lc: event_handler_list_dispatch: Done
%MDMEV: PRACH CE-LEVEL 0
[00:00:03.981,628] <dbg> lte_lc: at_handler_mdmev: %MDMEV notification
[00:00:03.981,689] <dbg> lte_lc: mdmev_parse: Occurrence found: PRACH CE-LEVEL 0

[00:00:03.981,689] <dbg> lte_lc: event_handler_list_dispatch: Dispatching event: type=11
[00:00:03.981,719] <dbg> lte_lc: event_handler_list_dispatch:  - handler=0x0000882D
[00:00:03.981,719] <dbg> lte_lc: event_handler_list_dispatch: Done
+CSCON: 1
[00:00:04.012,664] <dbg> lte_lc: at_handler_cscon: +CSCON notification
[00:00:04.012,725] <dbg> lte_lc: event_handler_list_dispatch: Dispatching event: type=3
[00:00:04.012,725] <dbg> lte_lc: event_handler_list_dispatch:  - handler=0x0000882D
[00:00:04.012,756] <dbg> lte_lc: event_handler_list_dispatch: Done
+CGEV: ME PDN ACT 0,0
+CNEC_ESM: 50,0
%MDMEV: SEARCH STATUS 2
[00:00:04.995,147] <dbg> lte_lc: at_handler_mdmev: %MDMEV notification
[00:00:04.995,208] <dbg> lte_lc: mdmev_parse: Occurrence found: SEARCH STATUS 2

[00:00:04.995,208] <dbg> lte_lc: event_handler_list_dispatch: Dispatching event: type=11
[00:00:04.995,239] <dbg> lte_lc: event_handler_list_dispatch:  - handler=0x0000882D
[00:00:04.995,239] <dbg> lte_lc: event_handler_list_dispatch: Done
+CEREG: 1,"C10F","09681107",7,,,"11100000","11100000"
[00:00:04.995,361] <dbg> lte_lc: at_handler_cereg: +CEREG notification: +CEREG: 1,"C10F","09681107",7,,,"11100000","11100000"
[00:00:04.995,422] <dbg> lte_lc: parse_cereg: Network registration status: 1
[00:00:04.995,635] <dbg> lte_lc: parse_cereg: LTE mode: 7
[00:00:04.995,666] <dbg> lte_lc: event_handler_list_dispatch: Dispatching event: type=0
[00:00:04.995,697] <dbg> lte_lc: event_handler_list_dispatch:  - handler=0x0000882D
[00:00:04.995,758] <dbg> lte_lc: event_handler_list_dispatch: Done
Network connectivity established and IP address assigned
Looking up httpbin.org
Resolved 3.224.7.64 (AF_INET)
Connecting to httpbin.org:443
connect() failed, err: 111
+CEREG: 0
[00:00:07.162,353] <dbg> lte_lc: at_handler_cereg: +CEREG notification: +CEREG: 0
[00:00:07.162,414] <dbg> lte_lc: parse_cereg: Network registration status: 0
[00:00:07.162,445] <dbg> lte_lc: parse_cereg: LTE mode not found, error code: -5
[00:00:07.162,475] <dbg> lte_lc: event_handler_list_dispatch: Dispatching event: type=0
[00:00:07.162,475] <dbg> lte_lc: event_handler_list_dispatch:  - handler=0x0000882D
[00:00:07.309,356] <dbg> lte_lc: cfun_mode_set: Functional mode set to 20
[00:00:07.309,417] <dbg> lte_lc: event_handler_list_dispatch: Done
[00:00:07.309,448] <dbg> lte_lc: event_handler_list_dispatch: Dispatching event: type=4
[00:00:07.309,478] <dbg> lte_lc: event_handler_list_dispatch:  - handler=0x0000882D
[00:00:07.309,478] <dbg> lte_lc: event_handler_list_dispatch: Done
[00:00:07.309,509] <dbg> lte_lc: event_handler_list_dispatch: Dispatching event: type=5
[00:00:07.309,509] <dbg> lte_lc: event_handler_list_dispatch:  - handler=0x0000882D
[00:00:07.309,539] <dbg> lte_lc: event_handler_list_dispatch: Done
+CGEV: ME DETACH
+CSCON: 0
[00:00:07.309,753] <dbg> lte_lc: at_handler_cscon: +CSCON notification
[00:00:07.309,783] <dbg> lte_lc: event_handler_list_dispatch: Dispatching event: type=3
[00:00:07.309,814] <dbg> lte_lc: event_handler_list_dispatch:  - handler=0x0000882D
[00:00:07.309,814] <dbg> lte_lc: event_handler_list_dispatch: Done
Network connectivity lost
Disconnected from the network

Best regards,

MLP.