<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://devzone.nordicsemi.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Cert not being sent as part of http request</title><link>https://devzone.nordicsemi.com/f/nordic-q-a/120639/cert-not-being-sent-as-part-of-http-request</link><description>Hi, We&amp;#39;re using the nrf9160 with ncs 2.7, modem FW 1.3.6 We&amp;#39;re trying to send an HTTP request with TLS 1.2. We have provisioned our device and verified the key,cert with a python script and that is able to hit our endpoint OK. However, when we try to</description><dc:language>en-US</dc:language><generator>Telligent Community 13</generator><lastBuildDate>Wed, 16 Apr 2025 14:56:21 GMT</lastBuildDate><atom:link rel="self" type="application/rss+xml" href="https://devzone.nordicsemi.com/f/nordic-q-a/120639/cert-not-being-sent-as-part-of-http-request" /><item><title>RE: Cert not being sent as part of http request</title><link>https://devzone.nordicsemi.com/thread/532048?ContentTypeID=1</link><pubDate>Wed, 16 Apr 2025 14:56:21 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:e9c53304-2ecc-45a8-ae05-ac1a0d3585a0</guid><dc:creator>dave</dc:creator><description>&lt;p&gt;We found our issue.&amp;nbsp;&amp;nbsp;&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;
&lt;p&gt;We were disabling hostname verification, but apparently that was causing an issue with the cert being sent out.&lt;br /&gt;&lt;br /&gt;So adding hostname verification fixed the issue.&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Cert not being sent as part of http request</title><link>https://devzone.nordicsemi.com/thread/531961?ContentTypeID=1</link><pubDate>Wed, 16 Apr 2025 07:42:13 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:7156cbbb-08b6-4487-8025-142744d91402</guid><dc:creator>dejans</dc:creator><description>&lt;p&gt;Hi,&lt;br /&gt;&lt;br /&gt;Can you provide full error log which shows error 400 and error output &lt;span&gt;&amp;quot;No required SSL certificate was sent&amp;quot;?&lt;br /&gt;&lt;br /&gt;Best regards,&lt;br /&gt;Dejan&lt;/span&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Cert not being sent as part of http request</title><link>https://devzone.nordicsemi.com/thread/531730?ContentTypeID=1</link><pubDate>Mon, 14 Apr 2025 14:35:41 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:b5bc6a60-e28e-4a4d-a862-40df5e474b82</guid><dc:creator>dave</dc:creator><description>&lt;p&gt;Thanks.&lt;br /&gt;&lt;br /&gt;We verified a supported cipher is being used.&amp;nbsp; For some reason the cert is not being sent out&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Cert not being sent as part of http request</title><link>https://devzone.nordicsemi.com/thread/531670?ContentTypeID=1</link><pubDate>Mon, 14 Apr 2025 10:21:44 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:5deeb5e1-51e8-4621-98eb-90a5cec11632</guid><dc:creator>dejans</dc:creator><description>&lt;p&gt;Hi,&lt;br /&gt;&lt;br /&gt;The list of supported cipher suites can be found on&amp;nbsp;&lt;a href="https://www.nordicsemi.com/Products/nRF9160/Download"&gt;nRF9160 Product Download&lt;/a&gt;&amp;nbsp;webpage. You can also look at&amp;nbsp;&lt;a href="https://docs.nordicsemi.com/bundle/ncs-latest/page/nrfxlib/nrf_modem/doc/limitations.html"&gt;Limitations&lt;/a&gt;.&lt;br /&gt;&lt;br /&gt;Best regards,&lt;br /&gt;Dejan&amp;nbsp;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Cert not being sent as part of http request</title><link>https://devzone.nordicsemi.com/thread/531574?ContentTypeID=1</link><pubDate>Fri, 11 Apr 2025 20:18:32 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:308c9d12-31ee-4161-b74b-567bb0811acc</guid><dc:creator>dave</dc:creator><description>&lt;p&gt;Where can I find the cipher suites that are supported in modem fw 1.3.6?&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Cert not being sent as part of http request</title><link>https://devzone.nordicsemi.com/thread/531572?ContentTypeID=1</link><pubDate>Fri, 11 Apr 2025 19:50:22 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:88320e01-f523-4a7e-bca4-5cdf0cfd727a</guid><dc:creator>dave</dc:creator><description>&lt;p&gt;Yes, we are using socket offloading and get the same result using nrf_socket() and nrf_send()&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;We wrote a python script that uses the same cert/key and are able to sent the same message to the host/port that the nrf9160 is using and we receive a `200 OK` response from there, so i know the cert/key is good.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;On the nrf9160&amp;nbsp;we are writing the cert/ket to the modem at a sec tag location, and then using the socket options I originally posted, and passing that sec tag to the `TLS_SEC_TAG_LIST` setsocopt() trying to use the same cert/key, but from the error we are getting it looks like the cert isn&amp;#39;t being sent, since we are seeing the message &amp;quot;No required SSL certificate was sent&amp;quot; when we get the 400 error from nrf9160 error output&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Cert not being sent as part of http request</title><link>https://devzone.nordicsemi.com/thread/531564?ContentTypeID=1</link><pubDate>Fri, 11 Apr 2025 16:05:28 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:be677333-b715-49f8-8c83-22f45fc1b57b</guid><dc:creator>dejans</dc:creator><description>&lt;p&gt;Hi,&lt;br /&gt;&lt;br /&gt;Do you use &lt;a href="https://docs.nordicsemi.com/bundle/ncs-latest/page/nrf/libraries/modem/nrf_modem_lib/nrf_modem_lib_socket_offloading.html"&gt;socket offloading&lt;/a&gt;?&lt;br /&gt;&lt;br /&gt;Do you get the same result if you use&amp;nbsp;&lt;a href="https://docs.nordicsemi.com/bundle/nrfxlib-apis-latest/page/group_nrf_socket_api_gad0520bca294bc94772c092f97a044e86.html#gad0520bca294bc94772c092f97a044e86"&gt;nrf_socket()&lt;/a&gt;&amp;nbsp;and&amp;nbsp;&lt;a href="https://docs.nordicsemi.com/bundle/nrfxlib-apis-latest/page/group_nrf_socket_api_gaddfad8d7bea19179e048b8d6588d2f01.html#gaddfad8d7bea19179e048b8d6588d2f01"&gt;nrf_send()&lt;/a&gt;&amp;nbsp;from&amp;nbsp;&lt;a href="https://docs.nordicsemi.com/bundle/nrfxlib-apis-latest/page/group_nrf_socket_api.html"&gt;nRF Socket Interface API&lt;/a&gt;?&lt;br /&gt;&lt;br /&gt;&lt;/p&gt;
[quote user=""]We have provisioned our device and verified the key,cert with a python script and that is able to hit our endpoint OK. However, when we try to do the same thing from the nrf9160 we are getting a `400 bad request No requried SSL certificate was sent` error[/quote]
&lt;p&gt;Can you provide some details about &amp;quot;hit our endpoint OK&amp;quot;? What exactly did you try when you say: &amp;quot;when we try to do the same thing from the nrf9160 ...&amp;quot;?&lt;br /&gt;&lt;br /&gt;Best regards,&lt;br /&gt;Dejan&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>