Upgrading project from NCS 2.7.0 to 3.0.2 breaks native TLS

[basvkesteren]

Hi,

I'm attempting to upgrade an existing project (which is still in the development stage) from NCS 2.7.0 to 3.0.2; this seems to break native TLS, and I'm not sure why.

Would you be willing to take a look? I've created a trimmed down version of the project, running on an nrf9160dk

Attached are the console output (verbose logging) and traces of both the 2.7 and 3.0.2 versions.

The project connects to test.mosquitto.org over TLS and then does a single publish. The 2.7 version works, the 3.0.2 version fails to connect with:

[00:00:10.472,381] <err> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9061: mbedtls_cipher_setkey() returned -24704 (-0x6080)
[00:00:10.488,311] <err> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7345: ssl_tls12_populate_transform() returned -24704 (-0x6080)
[00:00:10.504,852] <err> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:3268: mbedtls_ssl_derive_keys() returned -24704 (-0x6080)
[00:00:10.521,606] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4672: <= handshake
[00:00:10.534,149] <err> net_sock_tls: TLS handshake error: -0x6080

I've also attached both projects, difference is in some new CONFIG_ lines in prj.conf and overlay_native_tls.conf and an mqtt API change.

Build as follows;

0572.trace_3.0.2.mtrace

5353.trace_2.7.mtrace

Fullscreen 3034.console_3.0.2.txt Download

All pins have been configured as non-secure
Booting TF-M v2.1.1-ncs4-2
[Sec Thread] Secure image initializing!
TF-M isolation level is: 0x00000001
TF-M Float ABI: Hard
Lazy stacking enabled

[00:00:00.623,657] <inf> nrf_modem_lib_trace: Trace thread ready
[00:00:00.639,892] <inf> nrf_modem_lib_trace: Trace level override: 2
[00:00:00.664,916] <dbg> modem: cert_provision: cert_provision tag 1, 2095 bytes
[00:00:00.675,018] <dbg> modem: cert_provision: cert_provision tag 2, 1940 bytes
[00:00:00.685,119] <dbg> modem: cert_provision: cert_provision tag 3, 1453 bytes
Ready!
Waiting for network..
[00:00:00.721,008] <dbg> modem: lte_event_handler: Modem sleep event, type flight mode, time -1
[00:00:00.769,927] <dbg> modem: lte_event_handler: LTE event 9
[00:00:00.869,842] <err> modem: Functional mode has changed to 1
[00:00:00.878,784] <inf> modem: Waiting for LTE connection..
[00:00:01.760,650] <dbg> modem: lte_event_handler: Cell update: id 26545411, tac 22201
[00:00:01.771,301] <dbg> modem: lte_event_handler: LTE mode update: LTE-M
[00:00:01.832,397] <dbg> modem: lte_event_handler: RRC update: connected
[00:00:04.101,104] <dbg> modem: lte_event_handler: Modem domain event: Search done
[00:00:04.112,030] <dbg> modem: lte_event_handler: Connected to LTE
[00:00:04.121,032] <dbg> modem: lte_event_handler: PSM update: active_time 180, tau 32400
[00:00:04.132,141] <dbg> modem: lte_event_handler: eDRX update: mode 7, interval 163.839996, window 2.560000
[00:00:04.144,989] <inf> modem: LTE up!
[00:00:04.154,357] <err> modem: Functional mode has changed to 1
[00:00:04.195,404] <inf> modem: Waiting for time update..
Network up!
[00:00:04.346,466] <dbg> mqtt: mqtt_setup_connection: MQTT connecting to 5.196.78.28:8885
[00:00:04.549,011] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4661: => handshake
[00:00:04.561,584] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2354: => flush output
[00:00:04.574,401] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2363: <= flush output
[00:00:04.587,280] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4580: client state: MBEDTLS_SSL_HELLO_REQUEST
[00:00:04.602,233] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2354: => flush output
[00:00:04.615,051] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2363: <= flush output
[00:00:04.627,929] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4580: client state: MBEDTLS_SSL_CLIENT_HELLO
[00:00:04.642,730] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0921: => write client hello
[00:00:04.656,677] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0487: dumping 'client hello, random bytes' (32 bytes)
[00:00:04.672,668] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0487: 0000:  43 d4 29 60 d1 7b a3 5d 7d 30 cf c4 82 2c ff 66  C.)`.{.]}0...,.f
[00:00:04.690,795] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0487: 0010:  a8 b1 17 67 6c 74 b4 77 18 95 2b 62 87 95 98 06  ...glt.w..+b....
[00:00:04.708,648] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0512: dumping 'session id' (0 bytes)
[00:00:04.722,869] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c02c, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
[00:00:04.741,149] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c030, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
[00:00:04.759,216] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c0ad, TLS-ECDHE-ECDSA-WITH-AES-256-CCM
[00:00:04.776,855] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c024, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384
[00:00:04.795,104] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c028, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384
[00:00:04.813,201] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c00a, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA
[00:00:04.831,207] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c014, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA
[00:00:04.848,999] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c0af, TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8
[00:00:04.866,821] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c02b, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
[00:00:04.885,009] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c02f, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256
[00:00:04.903,045] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c0ac, TLS-ECDHE-ECDSA-WITH-AES-128-CCM
[00:00:04.920,684] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c023, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256
[00:00:04.938,934] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c027, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256
[00:00:04.956,939] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c009, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA
[00:00:04.974,884] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c013, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA
[00:00:04.992,645] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c0ae, TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8
[00:00:05.010,467] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c0ff, TLS-ECJPAKE-WITH-AES-128-CCM-8
[00:00:05.027,893] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: 009d, TLS-RSA-WITH-AES-256-GCM-SHA384
[00:00:05.045,410] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c09d, TLS-RSA-WITH-AES-256-CCM
[00:00:05.062,286] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: 003d, TLS-RSA-WITH-AES-256-CBC-SHA256
[00:00:05.079,803] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: 0035, TLS-RSA-WITH-AES-256-CBC-SHA
[00:00:05.097,045] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c032, TLS-ECDH-RSA-WITH-AES-256-GCM-SHA384
[00:00:05.114,990] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c02a, TLS-ECDH-RSA-WITH-AES-256-CBC-SHA384
[00:00:05.132,934] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c00f, TLS-ECDH-RSA-WITH-AES-256-CBC-SHA
[00:00:05.150,634] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c02e, TLS-ECDH-ECDSA-WITH-AES-256-GCM-SHA384
[00:00:05.168,731] <inf> mbedtls: WEST_TOPDIR/mo[00:00:05.174,652] <inf> modem: GNSS blocked by LTE activity
uart:~$ ypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c026, TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA384
[00:00:05.195,190] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c005, TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA
[00:00:05.213,104] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c0a1, TLS-RSA-WITH-AES-256-CCM-8
[00:00:05.230,194] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: 009c, TLS-RSA-WITH-AES-128-GCM-SHA256
[00:00:05.247,741] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c09c, TLS-RSA-WITH-AES-128-CCM
[00:00:05.264,648] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: 003c, TLS-RSA-WITH-AES-128-CBC-SHA256
[00:00:05.282,165] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: 002f, TLS-RSA-WITH-AES-128-CBC-SHA
[00:00:05.299,407] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c031, TLS-ECDH-RSA-WITH-AES-128-GCM-SHA256
[00:00:05.317,382] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c029, TLS-ECDH-RSA-WITH-AES-128-CBC-SHA256
[00:00:05.335,327] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c00e, TLS-ECDH-RSA-WITH-AES-128-CBC-SHA
[00:00:05.353,027] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c02d, TLS-ECDH-ECDSA-WITH-AES-128-GCM-SHA256
[00:00:05.371,154] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c025, TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA256
[00:00:05.389,282] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c004, TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA
[00:00:05.407,135] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0370: client hello, add ciphersuite: c0a0, TLS-RSA-WITH-AES-128-CCM-8
[00:00:05.424,346] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0388: adding EMPTY_RENEGOTIATION_INFO_SCSV
[00:00:05.439,025] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0397: client hello, got zu cipher suites
[00:00:05.453,521] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0041: client hello, adding server name extension: test.mosquitto.org
[00:00:05.470,458] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0231: client hello, adding supported_groups extension
[00:00:05.486,083] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0250: got supported group(0017)
[00:00:05.499,786] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0282: NamedGroup: secp256r1 ( 17 )
[00:00:05.513,763] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0250: got supported group(0018)
[00:00:05.527,496] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0282: NamedGroup: secp384r1 ( 18 )
[00:00:05.541,503] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0302: dumping 'Supported groups extension' (6 bytes)
[00:00:05.557,281] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0302: 0000:  00 04 00 17 00 18                                ......
[00:00:05.574,249] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9503: adding signature_algorithms extension
[00:00:05.588,806] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9523: got signature scheme [603] ecdsa_secp521r1_sha512
[00:00:05.604,370] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9532: sent signature scheme [603] ecdsa_secp521r1_sha512
[00:00:05.620,025] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9523: got signature scheme [601] rsa_pkcs1_sha512
[00:00:05.635,040] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9532: sent signature scheme [601] rsa_pkcs1_sha512
[00:00:05.650,177] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9523: got signature scheme [503] ecdsa_secp384r1_sha384
[00:00:05.665,740] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9532: sent signature scheme [503] ecdsa_secp384r1_sha384
[00:00:05.681,396] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9523: got signature scheme [501] rsa_pkcs1_sha384
[00:00:05.696,441] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9532: sent signature scheme [501] rsa_pkcs1_sha384
[00:00:05.711,578] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9523: got signature scheme [403] ecdsa_secp256r1_sha256
[00:00:05.727,142] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9532: sent signature scheme [403] ecdsa_secp256r1_sha256
[00:00:05.742,797] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9523: got signature scheme [401] rsa_pkcs1_sha256
[00:00:05.757,843] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9532: sent signature scheme [401] rsa_pkcs1_sha256
[00:00:05.772,949] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:0105: client hello, adding supported_point_formats extension
[00:00:05.789,733] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:0150: client hello, adding ecjpake_kkpp extension
[00:00:05.805,511] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:0165: generating new ecjpake parameters
[00:00:05.949,890] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:0272: client hello, adding max_fragment_length extension
[00:00:05.966,308] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:0338: client hello, adding extended_master_secret extension
[00:00:05.983,001] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0689: client hello, total extension length: zu
[00:00:05.998,016] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: dumping 'client hello extensions' (404 bytes)
[00:00:06.013,793] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0000:  01 94 00 00 00 17 00 15 00 00 12 74 65 73 74 2e  ...........test.
[00:00:06.031,921] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0010:  6d 6f 73 71 75 69 74 74 6f 2e 6f 72 67 00 0a 00  mosquitto.org...
[00:00:06.050,048] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0020:  06 00 04 00 17 00 18 00 0d 00 0e 00 0c 06 03 06  ................
[00:00:06.068,176] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0030:  01 05 03 05 01 04 03 04 01 00 0b 00 02 01 00 01  ................
[00:00:06.086,303] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0040:  00 01 4a 41 04 de b7 5a 40 d8 22 e5 37 35 0b e4  ..JA...Z@.".75..
[00:00:06.104,400] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0050:  c6 ca 94 ce a8 fb c5 22 32 3d 4b 91 39 5d d3 40  ......."2=K.9].@
[00:00:06.122,528] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0060:  13 90 0b 6d bc 87 15 f5 83 00 8d 9b 9b f0 d0 2d  ...m...........-
[00:00:06.140,655] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0070:  b2 ca dc 24 a7 7c 10 68 be 19 49 b5 99 18 50 33  ...$.|.h..I...P3
[00:00:06.158,752] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0080:  fe af fb ef 76 41 04 55 4d 3d 09 c8 95 1f 0a 4f  ....vA.UM=.....O
uart:~$[00:00:06.176,300] <inf> modem: GNSS blocked by LTE activity
u[00:00:06.185,180] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0090:  a5 b1 71 91 70 2e 94 79 af c6 b4 ae 16 b2 8d 0c  ..q.p..y........
[00:00:06.203,369] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 00a0:  bc 07 bb c0 73 c6 38 99 ee 8e 73 ee 98 03 e4 b8  ....s.8...s.....
[00:00:06.221,527] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 00b0:  1f 56 2f 01 91 1d 93 dc cd 89 a8 64 bc 14 92 cd  .V/........d....
[00:00:06.239,654] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 00c0:  d7 ee f3 3f b9 2d 53 20 19 13 f2 62 40 12 88 64  ...?.-S [email protected]
[00:00:06.257,781] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 00d0:  18 f4 e7 ba 59 42 16 29 c2 cb 26 59 38 ce 42 b9  ....YB.)..&Y8.B.
[00:00:06.275,878] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 00e0:  e4 39 47 a8 db 6e ba 78 41 04 94 9e 89 8d d7 58  .9G..n.xA......X
[00:00:06.294,006] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 00f0:  43 03 15 2e 30 c9 d3 1d c0 85 fd ca ac 5b 56 4b  C...0........[VK
[00:00:06.312,133] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0100:  1a 80 bb 7a c9 af c1 ef f1 b6 53 c3 74 14 1c 69  ...z......S.t..i
[00:00:06.330,261] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0110:  48 7d af 5f b2 c8 fc ae 75 92 b6 fd 32 60 e7 b6  H}._....u...2`..
[00:00:06.348,388] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0120:  28 15 6e 00 46 c0 8e 19 7e 7a 41 04 e8 cc ba 0f  (.n.F...~zA.....
[00:00:06.366,516] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0130:  cf 10 38 0f 34 bc d8 0c 57 f9 3d 68 14 6c a2 2d  ..8.4...W.=h.l.-
[00:00:06.384,643] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0140:  65 80 ed de d8 dc dd c8 7c 7d 3d d1 93 92 57 4c  e.......|}=...WL
[00:00:06.402,770] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0150:  25 b1 c5 41 af 17 f0 ff 73 cf 8d d7 04 14 95 d9  %..A....s.......
[00:00:06.420,898] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0160:  6f c5 86 dd ad 0c 3a 15 46 ef 36 5a 20 95 36 e8  o.....:.F.6Z .6.
[00:00:06.438,995] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0170:  c0 1c c1 0f 01 97 3b 5b a2 79 c5 e7 1d f3 c0 ff  ......;[.y......
[00:00:06.457,122] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0180:  cc b4 e1 32 3b 33 e4 ca b6 36 7f b3 69 00 01 00  ...2;3...6..i...
[00:00:06.475,067] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0691: 0190:  01 04 00 17                                      ....
[00:00:06.494,079] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2784: => write handshake message
[00:00:06.507,873] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2944: => write record
[00:00:06.520,812] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3028: output record: msgtype = 22, version = [3:3], msglen = zu
[00:00:06.537,048] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3081: <= write record
[00:00:06.549,865] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2905: <= write handshake message
[00:00:06.563,629] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:1014: <= write client hello
[00:00:06.577,239] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2354: => flush output
[00:00:06.590,087] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2368: message length: zu, out_left: zu
[00:00:06.611,511] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2375: ssl->f_send() returned 534 (-0xfffffdea)
[00:00:06.626,525] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2402: <= flush output
[00:00:06.639,373] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4580: client state: MBEDTLS_SSL_SERVER_HELLO
[00:00:06.654,205] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1196: => parse server hello
[00:00:06.668,304] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4298: => read record
[00:00:06.681,030] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2156: => fetch input
[00:00:06.693,786] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2296: in_left: zu, nb_want: zu
[00:00:06.707,458] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2316: in_left: zu, nb_want: zu
[00:00:06.721,069] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4672: <= handshake
[00:00:06.887,084] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4661: => handshake
[00:00:06.899,658] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2354: => flush output
[00:00:06.912,536] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2363: <= flush output
[00:00:06.925,415] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4580: client state: MBEDTLS_SSL_SERVER_HELLO
[00:00:06.940,338] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1196: => parse server hello
[00:00:06.954,498] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4298: => read record
[00:00:06.967,254] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2156: => fetch input
[00:00:06.980,072] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2296: in_left: zu, nb_want: zu
[00:00:06.993,804] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2316: in_left: zu, nb_want: zu
[00:00:07.007,446] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2319: ssl->f_recv(_timeout)() returned 5 (-0xfffffffb)
[00:00:07.023,193] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2341: <= fetch input
[00:00:07.036,010] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3966: input record: msgtype = 22, version = [0x303], msglen = zu
[00:00:07.052,307] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2156: => fetch input
[00:00:07.065,093] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2296: in_left: zu, nb_want: zu
[00:00:07.078,796] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2316: in_left: zu, nb_want: zu
[00:00:07.092,468] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2319: ssl->f_recv(_timeout)() returned 102 (-0xffffff9a)
[00:00:07.108,367] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2341: <= fetch input
[00:00:07.121,185] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3239: handshake message: msglen = zu, type = 102, hslen = zu
[00:00:07.137,268] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3328: sole handshake fragment: zu, 102..0 of zu
[00:00:07.152,557] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4370: <= read record
[00:00:07.165,344] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1270: d[00:00:07.176,177] <inf> modem: GNSS blocked by LTE activity
uart:~$ server hello, version' (2 bytes)
[00:00:07.189,575] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1270: 0000:  03 03                                            ..
[00:00:07.206,756] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1291: server hello, current time: 15941011
[00:00:07.222,045] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1301: dumping 'server hello, random bytes' (32 bytes)
[00:00:07.238,525] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1301: 0000:  00 f3 3d 93 a1 5b 92 bf f2 c1 09 5a d7 f2 d1 f3  ..=..[.....Z....
[00:00:07.257,232] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1301: 0010:  c9 e5 7d b7 8f 8f 03 ac 44 4f 57 4e 47 52 44 01  ..}.....DOWNGRD.
[00:00:07.275,604] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1363: server hello, session id len.: zu
[00:00:07.290,557] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1364: dumping 'server hello, session id' (32 bytes)
[00:00:07.306,823] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1364: 0000:  14 1c 6a 0c d8 f2 b0 7c 0a e1 44 21 c0 b1 cb fa  ..j....|..D!....
[00:00:07.325,469] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1364: 0010:  8d 74 7a 17 05 1e bc cb 13 63 f5 71 f7 50 1f e8  .tz......c.q.P..
[00:00:07.343,841] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1388: no session has been resumed
[00:00:07.358,245] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1391: server hello, chosen ciphersuite: c030
[00:00:07.373,626] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1392: server hello, compress alg.: 0
[00:00:07.388,305] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1427: server hello, chosen ciphersuite: TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
[00:00:07.406,585] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1448: server hello, total extension length: zu
[00:00:07.422,363] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1466: found renegotiation extension
[00:00:07.436,950] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1593: unknown extension found: 0 (ignoring)
[00:00:07.452,270] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1480: found max_fragment_length extension
[00:00:07.467,407] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1545: found supported_point_formats extension
[00:00:07.482,879] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1518: found extended_master_secret extension
[00:00:07.498,260] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1662: <= parse server hello
[00:00:07.512,390] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2354: => flush output
[00:00:07.525,177] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2363: <= flush output
[00:00:07.538,024] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4580: client state: MBEDTLS_SSL_SERVER_CERTIFICATE
[00:00:07.553,375] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8093: => parse certificate
[00:00:07.566,619] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4298: => read record
[00:00:07.579,345] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2156: => fetch input
[00:00:07.592,071] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2296: in_left: zu, nb_want: zu
[00:00:07.605,743] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2316: in_left: zu, nb_want: zu
[00:00:07.619,415] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2319: ssl->f_recv(_timeout)() returned 5 (-0xfffffffb)
[00:00:07.635,101] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2341: <= fetch input
[00:00:07.647,888] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3966: input record: msgtype = 22, version = [0x303], msglen = zu
[00:00:07.664,184] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2156: => fetch input
[00:00:07.676,910] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2296: in_left: zu, nb_want: zu
[00:00:07.690,704] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2316: in_left: zu, nb_want: zu
[00:00:07.704,345] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2319: ssl->f_recv(_timeout)() returned 933 (-0xfffffc5b)
[00:00:07.720,214] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2341: <= fetch input
[00:00:07.733,001] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3239: handshake message: msglen = zu, type = 933, hslen = zu
[00:00:07.749,053] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3328: sole handshake fragment: zu, 933..0 of zu
[00:00:07.766,418] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4370: <= read record
[00:00:07.779,815] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9961: Use configuration-specific verification callback
[00:00:07.858,642] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:10121: Certificate verification flags clear
[00:00:07.873,107] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8207: <= parse certificate
[00:00:07.886,352] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2354: => flush output
[00:00:07.899,169] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2363: <= flush output
[00:00:07.912,017] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4580: client state: MBEDTLS_SSL_SERVER_KEY_EXCHANGE
[00:00:07.927,459] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2090: => parse server key exchange
[00:00:07.942,169] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4298: => read record
[00:00:07.954,895] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2156: => fetch input
[00:00:07.967,651] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2296: in_left: zu, nb_want: zu
[00:00:07.981,292] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2316: in_left: zu, nb_want: zu
[00:00:07.994,934] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2319: ssl->f_recv(_timeout)() returned 5 (-0xfffffffb)
[00:00:08.010,650] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2341: <= fetch input
[00:00:08.023,437] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3966: input record: msgtype = 22, version = [0x303], msglen = zu
[00:00:08.039,733] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2156: => fetch input
[00:00:08.052,490] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2296: in_left: zu, nb_want: zu
[00:00:08.066,162] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2316: in_left: zu, nb_want: zu
[00:00:08.079,864] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2319: ssl->f_recv(_timeout)() returned 333 (-0xfffffeb3)
[00:00:08.095,764] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2341: <= fetch input
[00:00:08.108,612] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3239: handshake message: msglen = zu, type = 333, hslen = zu
[00:00:08.124,664] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3328: sole handshake fragment: zu, 333..0 of zu
[00:00:08.140,289] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4370: <= read record
[00:00:08.153,045] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: dumping 'server key exchange' (329 bytes)
[00:00:08.168,975] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0000:  03 00 17 41 04 a8 67 e8 2e da fb 52 f2 d2 c0 0b  ...A..g....R....
[00:00:08.186,004] <inf> modem: GNSS blocked by LTE activity
uart:~$ t:~$[00:00:08.195,739] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0010:  95 fb 19 5b 42 d9 92 26 69 00 5a 3a 07 44 2a ec  ...[B..&i.Z:.D*.
[00:00:08.214,385] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0020:  38 4d db 9c f5 0b 59 78 af 68 82 f4 2d d9 ad e3  8M....Yx.h..-...
[00:00:08.233,032] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0030:  cc 56 2b 70 2c 6f 37 7f 5f 3f c5 1e 2b b6 c0 b7  .V+p,o7._?..+...
[00:00:08.251,678] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0040:  0a 5c 8f b7 05 04 01 01 00 2c 9f 9a 8e 9e a8 14  .\.......,......
[00:00:08.270,324] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0050:  09 a4 02 83 51 b7 b0 3c ea 79 2f e5 bc 92 b8 c1  ....Q..<.y/.....
[00:00:08.289,001] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0060:  af 3a c6 63 da 7a 76 13 16 63 7c 05 90 dd 50 d3  .:.c.zv..c|...P.
[00:00:08.307,647] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0070:  56 ed 9a 19 38 84 de 63 d9 0c 7e 3b 3b db 6c 08  V...8..c..~;;.l.
[00:00:08.326,293] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0080:  14 84 3d 46 fa f1 2e cd c7 46 1b df 2d db 8f 9d  ..=F.....F..-...
[00:00:08.344,940] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0090:  4d a2 f2 bd 04 b1 a5 36 15 11 dd b6 47 11 11 2d  M......6....G..-
[00:00:08.363,586] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 00a0:  22 63 cd 0b 11 ad b6 bf b4 62 a3 e0 69 eb de 14  "c.......b..i...
[00:00:08.382,232] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 00b0:  2c 76 e7 29 6a 9b 88 09 e5 68 f1 ed d9 83 db bc  ,v.)j....h......
[00:00:08.400,909] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 00c0:  71 38 76 bb e9 a0 4a e0 e8 be 3c 29 a3 6a 15 ba  q8v...J...<).j..
[00:00:08.419,586] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 00d0:  97 4f 54 ba 32 9e 64 a6 85 7b 95 b8 e0 42 47 f7  .OT.2.d..{...BG.
[00:00:08.438,293] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 00e0:  f4 5a 6a c9 76 01 b8 5d 64 1b 1a 2a 92 64 f9 e9  .Zj.v..]d..*.d..
[00:00:08.456,970] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 00f0:  19 9b 6c 60 cc 36 40 91 16 2a 82 51 f6 f6 ba 3e  ..l`.6@..*.Q...>
[00:00:08.475,616] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0100:  18 e6 9e 7a e3 a0 c0 da 89 d6 60 4c cc d8 66 36  ...z......`L..f6
[00:00:08.494,262] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0110:  73 04 bb 35 8f b9 8a 00 29 56 ce 28 50 f6 29 2f  s..5....)V.(P.)/
[00:00:08.512,908] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0120:  5c b8 1c 29 1c 71 2f 8e 13 29 72 fb 12 31 a2 ac  \..).q/..)r..1..
[00:00:08.531,555] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0130:  f6 29 89 f3 42 73 37 aa 25 66 4f d6 15 bd c9 4a  .)..Bs7.%fO....J
[00:00:08.550,109] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0140:  67 16 4e 2a d1 0b 0c b0 f1                       g.N*.....
[00:00:08.567,871] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1806: ECDH curve: secp256r1
[00:00:08.582,061] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1813: value of 'ECDH: Qp(X)' (256 bits) is:
[00:00:08.597,564] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1813:  a8 67 e8 2e da fb 52 f2 d2 c0 0b 95 fb 19 5b 42
[00:00:08.614,074] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1813:  d9 92 26 69 00 5a 3a 07 44 2a ec 38 4d db 9c f5
[00:00:08.630,340] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1813: value of 'ECDH: Qp(Y)' (252 bits) is:
[00:00:08.645,874] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1813:  0b 59 78 af 68 82 f4 2d d9 ad e3 cc 56 2b 70 2c
[00:00:08.662,353] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1813:  6f 37 7f 5f 3f c5 1e 2b b6 c0 b7 0a 5c 8f b7 05
[00:00:08.678,619] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: dumping 'signature' (256 bytes)
[00:00:08.693,664] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0000:  2c 9f 9a 8e 9e a8 14 09 a4 02 83 51 b7 b0 3c ea  ,..........Q..<.
[00:00:08.712,341] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0010:  79 2f e5 bc 92 b8 c1 af 3a c6 63 da 7a 76 13 16  y/......:.c.zv..
[00:00:08.731,018] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0020:  63 7c 05 90 dd 50 d3 56 ed 9a 19 38 84 de 63 d9  c|...P.V...8..c.
[00:00:08.749,664] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0030:  0c 7e 3b 3b db 6c 08 14 84 3d 46 fa f1 2e cd c7  .~;;.l...=F.....
[00:00:08.768,402] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0040:  46 1b df 2d db 8f 9d 4d a2 f2 bd 04 b1 a5 36 15  F..-...M......6.
[00:00:08.787,048] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0050:  11 dd b6 47 11 11 2d 22 63 cd 0b 11 ad b6 bf b4  ...G..-"c.......
[00:00:08.805,694] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0060:  62 a3 e0 69 eb de 14 2c 76 e7 29 6a 9b 88 09 e5  b..i...,v.)j....
[00:00:08.824,310] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0070:  68 f1 ed d9 83 db bc 71 38 76 bb e9 a0 4a e0 e8  h......q8v...J..
[00:00:08.842,956] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0080:  be 3c 29 a3 6a 15 ba 97 4f 54 ba 32 9e 64 a6 85  .<).j...OT.2.d..
[00:00:08.861,602] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0090:  7b 95 b8 e0 42 47 f7 f4 5a 6a c9 76 01 b8 5d 64  {...BG..Zj.v..]d
[00:00:08.880,249] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 00a0:  1b 1a 2a 92 64 f9 e9 19 9b 6c 60 cc 36 40 91 16  ..*.d....l`.6@..
[00:00:08.898,895] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 00b0:  2a 82 51 f6 f6 ba 3e 18 e6 9e 7a e3 a0 c0 da 89  *.Q...>...z.....
[00:00:08.917,541] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 00c0:  d6 60 4c cc d8 66 36 73 04 bb 35 8f b9 8a 00 29  .`L..f6s..5....)
[00:00:08.936,187] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 00d0:  56 ce 28 50 f6 29 2f 5c b8 1c 29 1c 71 2f 8e 13  V.(P.)/\..).q/..
[00:00:08.954,803] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 00e0:  29 72 fb 12 31 a2 ac f6 29 89 f3 42 73 37 aa 25  )r..1...)..Bs7.%
[00:00:08.973,449] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 00f0:  66 4f d6 15 bd c9 4a 67 16 4e 2a d1 0b 0c b0 f1  fO....Jg.N*.....
[00:00:08.991,790] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9303: Perform mbedtls-based computation of digest of ServerKeyExchange
[00:00:09.009,857] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2389: dumping 'parameters hash' (32 bytes)
[00:00:09.025,360] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2389: 0000:  c6 77 b2 b0 e8 b3 0f 3c 7b 98 a3 a9 20 65 8b bf  .w.....<{... e..
[00:00:09.044,006] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2389: 0010:  da 22 b3 38 d0 22 b5 3f d7 14 07 1e c3 df 12 be  .".8.".?........
[00:00:09.124,694] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2460: <= parse server key exchange
[00:00:09.139,404] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2354: => flush output
[00:00:09.152,221] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2363: <= flush output
[00:00:09.165,069] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4580: client state: MBEDTLS_SSL_CERTIFICATE_REQUEST
[00:00:09.180,511] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2499: => parse certificate request
[00:00:09.195,983] <inf> modem: GNSS blocked by LTE activity
uart:~$ 00:00:09.195,220] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4298: => read record
[00:00:09.216,308] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2156: => fetch input
[00:00:09.229,064] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2296: in_left: zu, nb_want: zu
[00:00:09.242,706] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2316: in_left: zu, nb_want: zu
[00:00:09.256,347] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2319: ssl->f_recv(_timeout)() returned 5 (-0xfffffffb)
[00:00:09.272,033] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2341: <= fetch input
[00:00:09.284,820] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3966: input record: msgtype = 22, version = [0x303], msglen = zu
[00:00:09.301,116] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2156: => fetch input
[00:00:09.313,873] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2296: in_left: zu, nb_want: zu
[00:00:09.327,575] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2316: in_left: zu, nb_want: zu
[00:00:09.341,247] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2319: ssl->f_recv(_timeout)() returned 4 (-0xfffffffc)
[00:00:09.356,933] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2341: <= fetch input
[00:00:09.369,750] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3239: handshake message: msglen = zu, type = 4, hslen = zu
[00:00:09.385,650] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3328: sole handshake fragment: zu, 4..0 of zu
[00:00:09.400,451] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4370: <= read record
[00:00:09.413,238] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2525: got no certificate request
[00:00:09.427,520] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2661: <= parse certificate request
[00:00:09.442,230] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2354: => flush output
[00:00:09.455,047] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2363: <= flush output
[00:00:09.467,864] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4580: client state: MBEDTLS_SSL_SERVER_HELLO_DONE
[00:00:09.483,123] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2672: => parse server hello done
[00:00:09.497,680] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4298: => read record
[00:00:09.510,406] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4366: reuse previously read message
[00:00:09.524,414] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4370: <= read record
[00:00:09.537,139] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2700: <= parse server hello done
[00:00:09.551,696] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2354: => flush output
[00:00:09.564,514] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2363: <= flush output
[00:00:09.577,362] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4580: client state: MBEDTLS_SSL_CLIENT_CERTIFICATE
[00:00:09.592,681] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7688: => write certificate
[00:00:09.605,926] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7699: <= skip write certificate
[00:00:09.619,598] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2354: => flush output
[00:00:09.632,415] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2363: <= flush output
[00:00:09.645,233] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4580: client state: MBEDTLS_SSL_CLIENT_KEY_EXCHANGE
[00:00:09.660,675] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2715: => write client key exchange
[00:00:09.708,068] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2861: value of 'ECDH: Q(X)' (256 bits) is:
[00:00:09.723,571] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2861:  fa 5e 59 a2 5e 88 a9 f1 79 b8 24 92 51 a0 16 78
[00:00:09.740,112] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2861:  fb d4 94 4e 32 a3 e8 78 19 ab fd 95 8a f0 34 42
[00:00:09.756,378] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2861: value of 'ECDH: Q(Y)' (255 bits) is:
[00:00:09.771,820] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2861:  77 b4 2b da 69 3d e0 f1 57 55 da b5 32 55 17 5a
[00:00:09.788,299] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2861:  f1 37 dc 3e 44 ea 47 1f d8 37 fc 96 f4 e9 58 a8
[00:00:09.836,029] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2889: value of 'ECDH: z' (256 bits) is:
[00:00:09.851,196] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2889:  83 ad 0e 98 3e 7c 9d b1 5f dc 01 ed af e6 b0 60
[00:00:09.867,675] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2889:  c4 51 aa 4d c8 3f 86 2b 19 ba b9 d5 01 39 8f 9b
[00:00:09.883,911] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2784: => write handshake message
[00:00:09.898,101] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2944: => write record
[00:00:09.910,980] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3028: output record: msgtype = 22, version = [3:3], msglen = zu
[00:00:09.927,185] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2354: => flush output
[00:00:09.940,032] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2368: message length: zu, out_left: zu
[00:00:09.961,334] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2375: ssl->f_send() returned 75 (-0xffffffb5)
[00:00:09.976,257] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2402: <= flush output
[00:00:09.989,044] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3081: <= write record
[00:00:10.001,861] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2905: <= write handshake message
[00:00:10.015,655] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:3210: <= write client key exchange
[00:00:10.030,426] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2354: => flush output
[00:00:10.043,273] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2363: <= flush output
[00:00:10.056,121] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4580: client state: MBEDTLS_SSL_CERTIFICATE_VERIFY
[00:00:10.071,472] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:3258: => write certificate verify
[00:00:10.086,120] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7302: => derive keys
[00:00:10.098,876] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7426: => calc verify
[00:00:10.112,426] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7444: dumping 'calculated verify result' (48 bytes)
[00:00:10.127,960] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7444: 0000:  76 ca d8 75 ac 2c b4 59 2a 33 c7 0f f4 3e 39 ff  v..u.,.Y*3...>9.
[00:00:10.145,874] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7444: 0010:  03 dd 78 6c 98 35 73 28 7a 4b 83 5a 6f af 9e 37  ..xl.5s(zK.Zo..7
[00:00:10.163,787] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7444: 0020:  12 f7 8d 31 07 85 0a 83 39 18 e4 b0 3e 1a ae 48  ...1....9...>..H
[00:00:10.181,365] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7445: <= calc verify
[00:00[00:00:10.196,258] <inf> modem: GNSS blocked by LTE activity
uart:~$ 335] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7145: dumping 'session hash for extended master secret' (48 bytes)
[00:00:10.219,573] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7145: 0000:  76 ca d8 75 ac 2c b4 59 2a 33 c7 0f f4 3e 39 ff  v..u.,.Y*3...>9.
[00:00:10.237,487] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7145: 0010:  03 dd 78 6c 98 35 73 28 7a 4b 83 5a 6f af 9e 37  ..xl.5s(zK.Zo..7
[00:00:10.255,401] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7145: 0020:  12 f7 8d 31 07 85 0a 83 39 18 e4 b0 3e 1a ae 48  ...1....9...>..H
[00:00:10.282,348] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7285: dumping 'premaster secret' (32 bytes)
[00:00:10.297,210] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7285: 0000:  83 ad 0e 98 3e 7c 9d b1 5f dc 01 ed af e6 b0 60  ....>|.._......`
[00:00:10.315,185] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7285: 0010:  c4 51 aa 4d c8 3f 86 2b 19 ba b9 d5 01 39 8f 9b  .Q.M.?.+.....9..
[00:00:10.372,680] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8840: ciphersuite = TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
[00:00:10.388,458] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8842: dumping 'master secret' (48 bytes)
[00:00:10.403,045] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8842: 0000:  69 24 b6 8b 70 14 ad b5 4d 3b 63 f8 67 79 e4 f0  i$..p...M;c.gy..
[00:00:10.420,989] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8842: 0010:  11 3f ac 7e 84 47 d7 a6 2d ae ed 8b 19 81 7a dd  .?.~.G..-.....z.
[00:00:10.438,873] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8842: 0020:  41 13 a6 d1 40 cc b1 8c 54 01 27 8d ca 69 16 c7  [email protected].'..i..
[00:00:10.456,512] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8962: keylen: 32, minlen: 24, ivlen: 12, maclen: 0
[00:00:10.472,381] <err> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9061: mbedtls_cipher_setkey() returned -24704 (-0x6080)
[00:00:10.488,311] <err> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7345: ssl_tls12_populate_transform() returned -24704 (-0x6080)
[00:00:10.504,852] <err> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:3268: mbedtls_ssl_derive_keys() returned -24704 (-0x6080)
[00:00:10.521,606] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4672: <= handshake
[00:00:10.534,149] <err> net_sock_tls: TLS handshake error: -0x6080
[00:00:10.546,844] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:6333: => write close notify
[00:00:10.560,211] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:6344: <= write close notify
MQTT connect failed (-128)

4101.console_2.7.txt

[dejans]

Hi,

Is your error reproducible on nrf9160-dk? I have tried to build your project in NCS v3.0.2. The build was unsuccessful, but I could not replicate the same error.

Best regards,
Dejan

[basvkesteren]

Think I see the problem, the projects i uploaded tried to get version-info from SVN, this fails because they are exports and thus the build fails.

Fixed projects attached:

test_nativetls_3.0.2.zip

test_nativetls_2.7.zip

[dejans]

Hi,

Which modem firmware version do you use?

Can you provide your project in NCS v2.8.0 and show the log where the same error can be seen?

Have you been able to do some debugging yourself? Here is the information in the documentation - debugging application and
debugging in VS Code.

Best regards,
Dejan

[basvkesteren]

Hi,

Modem firmware is 1.3.7.

The 3.0.2 project builds on NCS 2.8.0 as-is, there's no code-change needed. Output is in essence the same, full log attached.

Wrt debugging; the problem is not how to debug, but understanding of the PSA code. Thats rather dense stuff.

 

Fullscreen console_nativetls_2.8.txt Download

All pins have been configured as non-secure
Booting TF-M v2.1.1-ncs1
[Sec Thread] Secure image initializing!
TF-M isolation level is: 0x00000001
TF-M Float ABI: Hard
Lazy stacking enabled

[00:00:00.621,368] <inf> nrf_modem_lib_trace: Trace thread ready
[00:00:00.637,908] <inf> nrf_modem_lib_trace: Trace level override: 2
[00:00:00.692,932] <dbg> modem: cert_provision: cert_provision tag 1, 2095 bytes
[00:00:00.703,216] <dbg> modem: cert_provision: cert_provision tag 2, 1940 bytes
[00:00:00.713,562] <dbg> modem: cert_provision: cert_provision tag 3, 1453 bytes
Ready!
Waiting for network..
[00:00:00.748,962] <dbg> modem: lte_event_handler: Modem sleep event, type flight mode, time -1
[00:00:00.798,522] <dbg> modem: lte_event_handler: LTE event 9
[00:00:00.898,345] <err> modem: Functional mode has changed to 1
[00:00:00.907,531] <inf> modem: Waiting for LTE connection..
[00:00:01.975,524] <dbg> modem: lte_event_handler: Cell update: id 4065547, tac 32601
[00:00:01.986,389] <dbg> modem: lte_event_handler: LTE mode update: LTE-M
[00:00:02.050,079] <dbg> modem: lte_event_handler: RRC update: connected
[00:00:03.505,798] <dbg> modem: lte_event_handler: Modem domain event: Search done
[00:00:03.517,242] <dbg> modem: lte_event_handler: Connected to LTE
[00:00:03.526,550] <dbg> modem: lte_event_handler: PSM update: active_time 180, tau 32400
[00:00:03.538,330] <dbg> modem: lte_event_handler: eDRX update: mode 7, interval 163.839996, window 2.560000
[00:00:03.551,788] <inf> modem: LTE up!
[00:00:03.561,859] <err> modem: Functional mode has changed to 1
[00:00:03.604,553] <inf> modem: Waiting for time update..
Network up!
[00:00:03.754,058] <dbg> mqtt: mqtt_setup_connection: MQTT connecting to 5.196.78.28:8885
[00:00:04.008,544] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4601: => handshake
[00:00:04.021,575] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2353: => flush output
[00:00:04.035,003] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2362: <= flush output
[00:00:04.048,339] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4520: client state: MBEDTLS_SSL_HELLO_REQUEST
[00:00:04.063,812] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2353: => flush output
[00:00:04.076,843] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2362: <= flush output
[00:00:04.089,935] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4520: client state: MBEDTLS_SSL_CLIENT_HELLO
[00:00:04.105,285] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0919: => write client hello
[00:00:04.119,750] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0486: dumping 'client hello, random bytes' (32 bytes)
[00:00:04.136,352] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0486: 0000:  1b 20 97 17 2d ed 73 5f 49 ad 57 9f c4 45 61 33  . ..-.s_I.W..Ea3
[00:00:04.154,937] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0486: 0010:  0a a2 fd 9b 90 e2 a7 89 69 41 8c d1 c7 c5 99 d4  ........iA......
[00:00:04.173,278] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0511: dumping 'session id' (0 bytes)
[00:00:04.187,744] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c02c, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
[00:00:04.206,451] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c030, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
[00:00:04.224,914] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c0ad, TLS-ECDHE-ECDSA-WITH-AES-256-CCM
[00:00:04.242,919] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c024, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384
[00:00:04.261,566] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c028, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384
[00:00:04.280,090] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c00a, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA
[00:00:04.298,492] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c014, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA
[00:00:04.316,772] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c0af, TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8
[00:00:04.334,991] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c02b, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
[00:00:04.353,668] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c02f, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256
[00:00:04.372,192] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c0ac, TLS-ECDHE-ECDSA-WITH-AES-128-CCM
[00:00:04.390,258] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c023, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256
[00:00:04.408,996] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c027, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256
[00:00:04.427,734] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c009, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA
[00:00:04.446,380] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c013, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA
[00:00:04.464,874] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c0ae, TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8
[00:00:04.483,459] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c0ff, TLS-ECJPAKE-WITH-AES-128-CCM-8
[00:00:04.501,647] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: 009d, TLS-RSA-WITH-AES-256-GCM-SHA384
[00:00:04.519,744] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c09d, TLS-RSA-WITH-AES-256-CCM
[00:00:04.537,414] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: 003d, TLS-RSA-WITH-AES-256-CBC-SHA256
[00:00:04.555,664] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: 0035, TLS-RSA-WITH-AES-256-CBC-SHA
[00:00:04.573,638] <inf> mbedtls: WEST_TOPDIR/modules/cry[00:00:04.580,627] <inf> modem: GNSS blocked by LTE activity
uart:~$ tls/library/ssl_client.c:0369: client hello, add ciphersuite: c032, TLS-ECDH-RSA-WITH-AES-256-GCM-SHA384
[00:00:04.600,677] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c02a, TLS-ECDH-RSA-WITH-AES-256-CBC-SHA384
[00:00:04.619,445] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c00f, TLS-ECDH-RSA-WITH-AES-256-CBC-SHA
[00:00:04.637,878] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c02e, TLS-ECDH-ECDSA-WITH-AES-256-GCM-SHA384
[00:00:04.656,707] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c026, TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA384
[00:00:04.675,415] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c005, TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA
[00:00:04.694,000] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c0a1, TLS-RSA-WITH-AES-256-CCM-8
[00:00:04.711,761] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: 009c, TLS-RSA-WITH-AES-128-GCM-SHA256
[00:00:04.729,980] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c09c, TLS-RSA-WITH-AES-128-CCM
[00:00:04.747,558] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: 003c, TLS-RSA-WITH-AES-128-CBC-SHA256
[00:00:04.765,777] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: 002f, TLS-RSA-WITH-AES-128-CBC-SHA
[00:00:04.783,813] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c031, TLS-ECDH-RSA-WITH-AES-128-GCM-SHA256
[00:00:04.802,276] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c029, TLS-ECDH-RSA-WITH-AES-128-CBC-SHA256
[00:00:04.820,922] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c00e, TLS-ECDH-RSA-WITH-AES-128-CBC-SHA
[00:00:04.839,233] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c02d, TLS-ECDH-ECDSA-WITH-AES-128-GCM-SHA256
[00:00:04.858,123] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c025, TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA256
[00:00:04.876,892] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c004, TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA
[00:00:04.895,477] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0369: client hello, add ciphersuite: c0a0, TLS-RSA-WITH-AES-128-CCM-8
[00:00:04.913,330] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0387: adding EMPTY_RENEGOTIATION_INFO_SCSV
[00:00:04.928,649] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0396: client hello, got zu cipher suites
[00:00:04.943,817] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0040: client hello, adding server name extension: test.mosquitto.org
[00:00:04.961,334] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0230: client hello, adding supported_groups extension
[00:00:04.977,600] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0249: got supported group(0017)
[00:00:04.991,882] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0281: NamedGroup: secp256r1 ( 17 )
[00:00:05.006,378] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0249: got supported group(0018)
[00:00:05.020,721] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0281: NamedGroup: secp384r1 ( 18 )
[00:00:05.035,339] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0301: dumping 'Supported groups extension' (6 bytes)
[00:00:05.051,727] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0301: 0000:  00 04 00 17 00 18                                ......
[00:00:05.069,305] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9443: adding signature_algorithms extension
[00:00:05.084,350] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9463: got signature scheme [603] ecdsa_secp521r1_sha512
[00:00:05.100,555] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9472: sent signature scheme [603] ecdsa_secp521r1_sha512
[00:00:05.116,790] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9463: got signature scheme [601] rsa_pkcs1_sha512
[00:00:05.132,354] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9472: sent signature scheme [601] rsa_pkcs1_sha512
[00:00:05.148,071] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9463: got signature scheme [503] ecdsa_secp384r1_sha384
[00:00:05.164,276] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9472: sent signature scheme [503] ecdsa_secp384r1_sha384
[00:00:05.180,419] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9463: got signature scheme [501] rsa_pkcs1_sha384
[00:00:05.196,044] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9472: sent signature scheme [501] rsa_pkcs1_sha384
[00:00:05.211,791] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9463: got signature scheme [403] ecdsa_secp256r1_sha256
[00:00:05.227,966] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9472: sent signature scheme [403] ecdsa_secp256r1_sha256
[00:00:05.244,262] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9463: got signature scheme [401] rsa_pkcs1_sha256
[00:00:05.259,826] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9472: sent signature scheme [401] rsa_pkcs1_sha256
[00:00:05.275,512] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:0105: client hello, adding supported_point_formats extension
[00:00:05.292,785] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:0150: client hello, adding ecjpake_kkpp extension
[00:00:05.309,204] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:0165: generating new ecjpake parameters
[00:00:05.459,960] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:0272: client hello, adding max_fragment_length extension
[00:00:05.477,050] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:0338: client hello, adding extended_master_secret extension
[00:00:05.494,537] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0688: client hello, total extension length: zu
[00:00:05.510,314] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: dumping 'client hello extensions' (404 bytes)
[00:00:05.526,641] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0000:  01 94 00 00 00 17 00 15 00 00 12 74 65 73 74 2e  ...........test.
[00:00:05.545,410] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0010:  6d 6f 73 71 75 69 74 74 6f 2e 6f 72 67 00 0a 00  mosquitto.org...
[00:00:05.564,331] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0020:  06 00 04 00 17 00 18 00 0d 00 0e 00 0c 06 03 06  ........[00:00:05.580,841] <inf> modem: GNSS blocked by LTE activity
uart:~$ [0m
[00:00:05.591,735] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0030:  01 05 03 05 01 04 03 04 01 00 0b 00 02 01 00 01  ................
[00:00:05.610,565] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0040:  00 01 4a 41 04 bf 12 72 9f 10 fc 22 1a a3 64 59  ..JA...r..."..dY
[00:00:05.629,425] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0050:  6d 5a 52 6c f9 d1 c1 c1 35 6e eb a3 e5 cc f2 99  mZRl....5n......
[00:00:05.648,315] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0060:  12 e4 2f f4 31 6f b3 ce c3 76 04 9a 34 d8 fa f7  ../.1o...v..4...
[00:00:05.667,236] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0070:  8e 5e 85 10 c9 6c 3c fc 7b 19 7c a3 e6 77 f8 27  .^...l<.{.|..w.'
[00:00:05.686,096] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0080:  0a 05 6a d2 4d 41 04 85 41 ed 0b 75 fe c4 ea 3d  ..j.MA..A..u...=
[00:00:05.704,864] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0090:  f4 9a bb 65 8d 5a cc 1f 5e b3 82 6a 3f b3 25 a1  ...e.Z..^..j?.%.
[00:00:05.723,754] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 00a0:  a0 2d 44 f8 c8 95 00 93 99 38 59 f1 8a 1f b0 f4  .-D......8Y.....
[00:00:05.742,736] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 00b0:  92 23 86 7b 5a 47 2f 3c c3 b6 42 5a 8e 12 ce 7c  .#.{ZG/<..BZ...|
[00:00:05.761,505] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 00c0:  a0 0f 0e b4 b6 8b 4c 20 5f 68 79 be 48 e7 40 9b  ......L _hy.H.@.
[00:00:05.780,242] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 00d0:  a0 c3 09 55 41 7c ec c3 c7 a3 e4 7f 62 41 d1 6b  ...UA|......bA.k
[00:00:05.799,133] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 00e0:  a9 1b a2 a9 25 10 23 51 41 04 9a 0e cc cb 71 b7  ....%.#QA.....q.
[00:00:05.817,993] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 00f0:  f2 1f 24 14 26 5d 44 da d0 12 a7 10 0b b6 c8 df  ..$.&]D.........
[00:00:05.836,883] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0100:  8e b9 2b b0 3a a5 db 72 0e 97 89 6b 6b 7c 28 b3  ..+.:..r...kk|(.
[00:00:05.855,834] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0110:  a0 63 0a 57 0c 89 70 67 3e 82 05 bb 7f 80 f0 46  .c.W..pg>......F
[00:00:05.874,633] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0120:  a4 52 2f c1 5c c6 97 19 7d 0c 41 04 c3 66 c5 1d  .R/.\...}.A..f..
[00:00:05.893,524] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0130:  bf 24 fe ea 92 e3 d1 a5 cc 9b 49 8e ff 3d a9 d1  .$........I..=..
[00:00:05.912,353] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0140:  d7 64 88 cf 30 e9 17 ce 86 9e 72 e1 49 29 d4 e0  .d..0.....r.I)..
[00:00:05.931,243] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0150:  05 c1 d5 34 fe bf 93 c5 9d 8c bd 46 46 55 02 a2  ...4.......FFU..
[00:00:05.950,103] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0160:  45 c6 5c 23 17 33 38 ae 14 cb ee 13 20 c2 ea 2e  E.\#.38..... ...
[00:00:05.969,055] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0170:  10 72 39 3b c2 d5 2c 13 1f 49 93 6a 0f a8 92 6a  .r9;..,..I.j...j
[00:00:05.988,006] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0180:  0a c8 94 1a 16 f3 55 f5 af 1b 8c 22 9a 00 01 00  ......U...."....
[00:00:06.006,591] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:0690: 0190:  01 04 00 17                                      ....
[00:00:06.026,550] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2783: => write handshake message
[00:00:06.040,863] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2943: => write record
[00:00:06.054,290] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3027: output record: msgtype = 22, version = [3:3], msglen = zu
[00:00:06.071,136] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3080: <= write record
[00:00:06.084,533] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2904: <= write handshake message
[00:00:06.098,785] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_client.c:1012: <= write client hello
[00:00:06.112,976] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2353: => flush output
[00:00:06.126,373] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2367: message length: zu, out_left: zu
[00:00:06.142,639] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2374: ssl->f_send() returned 534 (-0xfffffdea)
[00:00:06.158,142] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2401: <= flush output
[00:00:06.171,569] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4520: client state: MBEDTLS_SSL_SERVER_HELLO
[00:00:06.187,072] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1196: => parse server hello
[00:00:06.201,782] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4189: => read record
[00:00:06.215,026] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2155: => fetch input
[00:00:06.228,240] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2295: in_left: zu, nb_want: zu
[00:00:06.242,614] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2315: in_left: zu, nb_want: zu
[00:00:06.256,744] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4612: <= handshake
[00:00:06.380,187] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4601: => handshake
[00:00:06.393,280] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2353: => flush output
[00:00:06.406,494] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2362: <= flush output
[00:00:06.420,013] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4520: client state: MBEDTLS_SSL_SERVER_HELLO
[00:00:06.435,424] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1196: => parse server hello
[00:00:06.450,286] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4189: => read record
[00:00:06.463,409] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2155: => fetch input
[00:00:06.476,776] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2295: in_left: zu, nb_want: zu
[00:00:06.490,966] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2315: in_left: zu, nb_want: zu
[00:00:06.505,035] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2318: ssl->f_recv(_timeout)() returned 5 (-0xfffffffb)
[00:00:06.521,331] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2340: <= fetch input
[00:00:06.534,759] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3857: input record: msgtype = 22, version = [0x303], msglen = zu
[00:00:06.551,757] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2155: => fetch input
[00:00:06.565,002] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2295: in_left: zu, nb_want: zu
[00:00:06[00:00:06.581,451] <inf> modem: GNSS blocked by LTE activity
uart:~$ ] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2315: in_left: zu, nb_want: zu
[00:00:06.601,806] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2318: ssl->f_recv(_timeout)() returned 102 (-0xffffff9a)
[00:00:06.618,408] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2340: <= fetch input
[00:00:06.631,805] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3231: handshake message: msglen = zu, type = 102, hslen = zu
[00:00:06.648,864] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4261: <= read record
[00:00:06.662,048] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1270: dumping 'server hello, version' (2 bytes)
[00:00:06.678,466] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1270: 0000:  03 03                                            ..
[00:00:06.696,228] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1291: server hello, current time: 643851336
[00:00:06.712,097] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1301: dumping 'server hello, random bytes' (32 bytes)
[00:00:06.729,309] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1301: 0000:  26 60 64 48 ff 2c 30 a8 6e 2b f6 f6 7d 0f 31 5a  &`dH.,0.n+..}.1Z
[00:00:06.748,657] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1301: 0010:  97 d8 d2 6b 6d e7 e9 a1 44 4f 57 4e 47 52 44 01  ...km...DOWNGRD.
[00:00:06.767,700] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1363: server hello, session id len.: zu
[00:00:06.783,325] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1364: dumping 'server hello, session id' (32 bytes)
[00:00:06.800,384] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1364: 0000:  93 8f 62 8a ae 76 d7 a4 3a 5e 7e 86 89 04 b9 f3  ..b..v..:^~.....
[00:00:06.819,854] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1364: 0010:  41 54 35 88 a1 16 03 3f 43 e9 35 22 b0 f8 32 32  AT5....?C.5"..22
[00:00:06.838,897] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1388: no session has been resumed
[00:00:06.853,942] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1391: server hello, chosen ciphersuite: c030
[00:00:06.869,964] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1392: server hello, compress alg.: 0
[00:00:06.885,162] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1427: server hello, chosen ciphersuite: TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
[00:00:06.904,205] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1448: server hello, total extension length: zu
[00:00:06.920,593] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1466: found renegotiation extension
[00:00:06.935,821] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1593: unknown extension found: 0 (ignoring)
[00:00:06.951,751] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1480: found max_fragment_length extension
[00:00:06.967,468] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1545: found supported_point_formats extension
[00:00:06.983,581] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1518: found extended_master_secret extension
[00:00:06.999,572] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1662: <= parse server hello
[00:00:07.014,282] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2353: => flush output
[00:00:07.027,557] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2362: <= flush output
[00:00:07.040,832] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4520: client state: MBEDTLS_SSL_SERVER_CERTIFICATE
[00:00:07.056,762] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8035: => parse certificate
[00:00:07.070,373] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4189: => read record
[00:00:07.083,587] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2155: => fetch input
[00:00:07.096,832] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2295: in_left: zu, nb_want: zu
[00:00:07.111,083] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2315: in_left: zu, nb_want: zu
[00:00:07.125,366] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2318: ssl->f_recv(_timeout)() returned 5 (-0xfffffffb)
[00:00:07.141,754] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2340: <= fetch input
[00:00:07.155,059] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3857: input record: msgtype = 22, version = [0x303], msglen = zu
[00:00:07.171,875] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2155: => fetch input
[00:00:07.185,028] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2295: in_left: zu, nb_want: zu
[00:00:07.199,401] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2315: in_left: zu, nb_want: zu
[00:00:07.213,623] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2318: ssl->f_recv(_timeout)() returned 933 (-0xfffffc5b)
[00:00:07.230,163] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2340: <= fetch input
[00:00:07.243,469] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3231: handshake message: msglen = zu, type = 933, hslen = zu
[00:00:07.262,908] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4261: <= read record
[00:00:07.276,885] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9880: Use configuration-specific verification callback
[00:00:07.363,952] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:10034: Certificate verification flags clear
[00:00:07.378,997] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8149: <= parse certificate
[00:00:07.392,639] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2353: => flush output
[00:00:07.406,005] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2362: <= flush output
[00:00:07.419,342] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4520: client state: MBEDTLS_SSL_SERVER_KEY_EXCHANGE
[00:00:07.435,363] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2090: => parse server key exchange
[00:00:07.450,653] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4189: => read record
[00:00:07.463,928] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2155: => fetch input
[00:00:07.477,203] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2295: in_left: zu, nb_want: zu
[00:00:07.491,424] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2315: in_left: zu, nb_want: zu
[00:00:07.505,493] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2318: ssl->f_recv(_timeout)() returned 5 (-0xfffffffb)
[00:00:07.521,850] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2340: <= fetch input
[00:00:07.535,156] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3857: input record: msgtype = 22, version = [0x303], msglen = zu
[00:00:07.552,001] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2155: => fetch input
[00:00:07.565,185] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2295: in_left: zu, nb_want: zu
[00:00:0[00:00:07.581,726] <inf> modem: GNSS blocked by LTE activity
uart:~$ 8] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2315: in_left: zu, nb_want: zu
[00:00:07.602,050] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2318: ssl->f_recv(_timeout)() returned 333 (-0xfffffeb3)
[00:00:07.618,560] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2340: <= fetch input
[00:00:07.631,835] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3231: handshake message: msglen = zu, type = 333, hslen = zu
[00:00:07.649,383] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4261: <= read record
[00:00:07.662,811] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: dumping 'server key exchange' (329 bytes)
[00:00:07.679,443] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0000:  03 00 17 41 04 43 af 6d ae 31 86 25 d7 7b 6f 1e  ...A.C.m.1.%.{o.
[00:00:07.698,791] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0010:  e7 b6 4a c3 f9 55 fa 83 fb ce ce 74 42 54 cc 1c  ..J..U.....tBT..
[00:00:07.718,200] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0020:  ab fe 5a 62 10 dc cb 40 e3 e4 3e 58 93 62 ff e0  ..Zb...@..>X.b..
[00:00:07.737,670] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0030:  02 6f 70 8d ed e8 33 a4 58 64 e2 70 7e 49 fe a2  .op...3.Xd.p~I..
[00:00:07.757,049] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0040:  4b b4 ee 7d 9d 04 01 01 00 e4 6b f5 f0 f2 48 b5  K..}......k...H.
[00:00:07.776,458] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0050:  15 9c ae d3 dd cf 3f 0d 97 d3 39 b2 f8 97 f4 09  ......?...9.....
[00:00:07.795,806] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0060:  b6 8d 48 d7 8b 96 2c f1 82 99 e7 b1 57 59 4e 5e  ..H...,.....WYN^
[00:00:07.815,216] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0070:  6c 12 f8 1c 97 38 ec 49 20 0c b3 13 e3 ca d1 74  l....8.I ......t
[00:00:07.834,503] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0080:  18 82 68 1f c0 56 d0 7f 5f 03 ff d0 30 2f 6d bf  ..h..V.._...0/m.
[00:00:07.854,003] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0090:  31 1d a1 b7 2a e7 fc a9 ba 96 d8 55 36 1e 67 0c  1...*......U6.g.
[00:00:07.873,168] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 00a0:  62 c0 46 5f 84 40 50 ac 0e a9 32 3f c3 94 0c 09  [email protected]?....
[00:00:07.892,639] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 00b0:  0b 62 21 37 19 a8 3a 8f 44 2c d4 f2 b5 82 3a c6  .b!7..:.D,....:.
[00:00:07.912,139] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 00c0:  63 a0 a6 d2 69 a2 02 e5 30 7d fd 18 00 1c f4 86  c...i...0}......
[00:00:07.931,671] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 00d0:  fe 91 7c c2 f5 b8 2c a9 12 01 0c 71 ca 1c 98 4c  ..|...,....q...L
[00:00:07.951,141] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 00e0:  38 52 84 a7 83 06 6a 91 cc 07 fd 3b 94 e5 e2 26  8R....j....;...&
[00:00:07.970,672] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 00f0:  ed ef c4 6e 9f 0c 41 01 94 ab 30 3f 0d 49 cf 9f  ...n..A...0?.I..
[00:00:07.990,051] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0100:  4c 90 af b2 b0 91 1f 3d 99 1c 54 93 e9 f3 1a f5  L......=..T.....
[00:00:08.009,399] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0110:  9a af b9 d6 43 22 8b ba 5c 94 ae f4 f5 2a 00 01  ....C"..\....*..
[00:00:08.028,808] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0120:  95 71 86 d0 ac 6a bf c4 41 3c f1 24 fa 53 1e e6  .q...j..A<.$.S..
[00:00:08.048,278] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0130:  65 61 8f 19 51 fc 03 f2 74 1b a2 85 81 ce 0b 66  ea..Q...t......f
[00:00:08.067,657] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2177: 0140:  d9 fe bb dd d8 cd 7d 6d 34                       ......}m4
[00:00:08.086,120] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1806: ECDH curve: secp256r1
[00:00:08.100,921] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1813: value of 'ECDH: Qp(X)' (255 bits) is:
[00:00:08.117,065] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1813:  43 af 6d ae 31 86 25 d7 7b 6f 1e e7 b6 4a c3 f9
[00:00:08.134,246] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1813:  55 fa 83 fb ce ce 74 42 54 cc 1c ab fe 5a 62 10
[00:00:08.151,153] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1813: value of 'ECDH: Qp(Y)' (256 bits) is:
[00:00:08.167,358] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1813:  dc cb 40 e3 e4 3e 58 93 62 ff e0 02 6f 70 8d ed
[00:00:08.184,509] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:1813:  e8 33 a4 58 64 e2 70 7e 49 fe a2 4b b4 ee 7d 9d
[00:00:08.201,446] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: dumping 'signature' (256 bytes)
[00:00:08.217,071] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0000:  e4 6b f5 f0 f2 48 b5 15 9c ae d3 dd cf 3f 0d 97  .k...H.......?..
[00:00:08.236,480] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0010:  d3 39 b2 f8 97 f4 09 b6 8d 48 d7 8b 96 2c f1 82  .9.......H...,..
[00:00:08.255,981] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0020:  99 e7 b1 57 59 4e 5e 6c 12 f8 1c 97 38 ec 49 20  ...WYN^l....8.I
[00:00:08.275,421] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0030:  0c b3 13 e3 ca d1 74 18 82 68 1f c0 56 d0 7f 5f  ......t..h..V.._
[00:00:08.294,952] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0040:  03 ff d0 30 2f 6d bf 31 1d a1 b7 2a e7 fc a9 ba  ...0/m.1...*....
[00:00:08.314,331] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0050:  96 d8 55 36 1e 67 0c 62 c0 46 5f 84 40 50 ac 0e  ..U6.g.b.F_.@P..
[00:00:08.333,709] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0060:  a9 32 3f c3 94 0c 09 0b 62 21 37 19 a8 3a 8f 44  .2?.....b!7..:.D
[00:00:08.353,088] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0070:  2c d4 f2 b5 82 3a c6 63 a0 a6 d2 69 a2 02 e5 30  ,....:.c...i...0
[00:00:08.372,467] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0080:  7d fd 18 00 1c f4 86 fe 91 7c c2 f5 b8 2c a9 12  }........|...,..
[00:00:08.391,998] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 0090:  01 0c 71 ca 1c 98 4c 38 52 84 a7 83 06 6a 91 cc  ..q...L8R....j..
[00:00:08.411,407] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 00a0:  07 fd 3b 94 e5 e2 26 ed ef c4 6e 9f 0c 41 01 94  ..;...&...n..A..
[00:00:08.430,816] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 00b0:  ab 30 3f 0d 49 cf 9f 4c 90 af b2 b0 91 1f 3d 99  .0?.I..L......=.
[00:00:08.450,225] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 00c0:  1c 54 93 e9 f3 1a f5 9a af b9 d6 43 22 8b ba 5c  .T.........C"..\
[00:00:08.469,635] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 00d0:  94 ae f4 f5 2a 00 01 95 71 86 d0 ac 6a bf c4 41  ....*...q...j..A
[00:00:08.489,074] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 00e0:  3c f1 24 fa 53 1e e6 65 61 8f 19 51 fc 03 f2 74  <.$.S..ea..Q...t
[00:00:08.508,514] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2372: 00f0:  1b a2 85 81 ce 0b 66 d9 fe bb dd d8 cd 7d 6d 34  ......f......}m4
[00:00:08.527,709] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9243: Perform mbedtls-based computation of digest of ServerKeyExchange
[00:00:08.546,508] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2389: dumping 'parameters hash' (32 bytes)
[00:00:08.562,683] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2389: 0000:  b5 c3 e9 0d 7e ee 21 2d 82 01 b9 b9 8e eb 4f 28  ....~.!-......O(
[00:00:08.582,000] <inf> modem: GNSS blocked by LTE activity
[00:00:08.590,606] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2389: 0010:  46 44 02 82 b7 8e c5 bb 62 81 c9 2d 05 e0 4a a0  FD......b..-..J.
[00:00:08.678,955] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2460: <= parse server key exchange
[00:00:08.694,213] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2353: => flush output
[00:00:08.707,641] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2362: <= flush output
[00:00:08.720,947] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4520: client state: MBEDTLS_SSL_CERTIFICATE_REQUEST
[00:00:08.736,999] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2499: => parse certificate request
[00:00:08.752,288] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4189: => read record
[00:00:08.765,472] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2155: => fetch input
[00:00:08.778,686] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2295: in_left: zu, nb_want: zu
[00:00:08.792,968] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2315: in_left: zu, nb_want: zu
[00:00:08.807,098] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2318: ssl->f_recv(_timeout)() returned 5 (-0xfffffffb)
[00:00:08.823,333] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2340: <= fetch input
[00:00:08.836,639] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3857: input record: msgtype = 22, version = [0x303], msglen = zu
[00:00:08.853,607] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2155: => fetch input
[00:00:08.866,912] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2295: in_left: zu, nb_want: zu
[00:00:08.881,225] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2315: in_left: zu, nb_want: zu
[00:00:08.895,477] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2318: ssl->f_recv(_timeout)() returned 4 (-0xfffffffc)
[00:00:08.911,682] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2340: <= fetch input
[00:00:08.924,957] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3231: handshake message: msglen = zu, type = 4, hslen = zu
[00:00:08.941,650] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4261: <= read record
[00:00:08.954,864] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2525: got no certificate request
[00:00:08.969,787] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2661: <= parse certificate request
[00:00:08.985,046] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2353: => flush output
[00:00:08.998,413] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2362: <= flush output
[00:00:09.011,718] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4520: client state: MBEDTLS_SSL_SERVER_HELLO_DONE
[00:00:09.027,679] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2672: => parse server hello done
[00:00:09.042,877] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4189: => read record
[00:00:09.056,030] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4257: reuse previously read message
[00:00:09.070,617] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:4261: <= read record
[00:00:09.083,801] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2700: <= parse server hello done
[00:00:09.098,907] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2353: => flush output
[00:00:09.112,213] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2362: <= flush output
[00:00:09.125,457] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4520: client state: MBEDTLS_SSL_CLIENT_CERTIFICATE
[00:00:09.141,418] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7630: => write certificate
[00:00:09.155,181] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7641: <= skip write certificate
[00:00:09.169,403] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2353: => flush output
[00:00:09.182,861] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2362: <= flush output
[00:00:09.196,105] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4520: client state: MBEDTLS_SSL_CLIENT_KEY_EXCHANGE
[00:00:09.212,188] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2715: => write client key exchange
[00:00:09.261,260] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2861: value of 'ECDH: Q(X)' (256 bits) is:
[00:00:09.277,191] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2861:  c7 48 6e 15 73 62 2a 2c 91 ab 6b 4e fa 94 c8 5c
[00:00:09.294,311] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2861:  7a 79 d7 a6 da e7 fc 26 99 ab 03 c0 da 83 71 87
[00:00:09.311,279] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2861: value of 'ECDH: Q(Y)' (255 bits) is:
[00:00:09.327,362] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2861:  62 42 83 a0 92 7c 4c df 6b a7 64 3a ac 66 37 b8
[00:00:09.344,787] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2861:  dd 20 6d 86 42 c4 64 ab e3 e7 ca 9e 0c 3c fb 4e
[00:00:09.395,172] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2889: value of 'ECDH: z' (256 bits) is:
[00:00:09.410,980] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2889:  db 84 c9 1e bb ab 23 8c 3e e5 13 c9 cd 1e 52 e1
[00:00:09.428,161] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:2889:  97 d2 6c dc ed 59 c0 c8 01 77 e3 7d 65 67 66 8d
[00:00:09.445,007] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2783: => write handshake message
[00:00:09.459,686] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2943: => write record
[00:00:09.472,991] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3027: output record: msgtype = 22, version = [3:3], msglen = zu
[00:00:09.489,959] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2353: => flush output
[00:00:09.503,265] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2367: message length: zu, out_left: zu
[00:00:09.519,134] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2374: ssl->f_send() returned 75 (-0xffffffb5)
[00:00:09.534,606] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2401: <= flush output
[00:00:09.547,912] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:3080: <= write record
[00:00:09.561,218] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2904: <= write handshake message
[00:00:09.575,469] <wrn> mbedtls: WEST_TOPDIR/modu[00:00:09.582,092] <inf> modem: GNSS blocked by LTE activity
uart:~$ to/mbedtls/library/ssl_tls12_client.c:3210: <= write client key exchange
[00:00:09.599,243] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2353: => flush output
[00:00:09.612,640] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:2362: <= flush output
[00:00:09.625,915] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4520: client state: MBEDTLS_SSL_CERTIFICATE_VERIFY
[00:00:09.641,876] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:3258: => write certificate verify
[00:00:09.657,073] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7244: => derive keys
[00:00:09.670,196] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7368: => calc verify
[00:00:09.684,234] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7386: dumping 'calculated verify result' (48 bytes)
[00:00:09.700,439] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7386: 0000:  28 a8 7c f5 95 ab 34 11 08 35 20 be c8 0f 6d a3  (.|...4..5 ...m.
[00:00:09.719,055] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7386: 0010:  43 5b 85 15 83 24 38 d3 80 fc c8 b5 bb 3a e7 55  C[...$8......:.U
[00:00:09.737,792] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7386: 0020:  10 f0 6f 46 2a 3a 2b 03 ec 6f e8 01 3d 6b 1f 63  ..oF*:+..o..=k.c
[00:00:09.755,981] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7387: <= calc verify
[00:00:09.769,470] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7087: dumping 'session hash for extended master secret' (48 bytes)
[00:00:09.786,956] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7087: 0000:  28 a8 7c f5 95 ab 34 11 08 35 20 be c8 0f 6d a3  (.|...4..5 ...m.
[00:00:09.805,511] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7087: 0010:  43 5b 85 15 83 24 38 d3 80 fc c8 b5 bb 3a e7 55  C[...$8......:.U
[00:00:09.824,188] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7087: 0020:  10 f0 6f 46 2a 3a 2b 03 ec 6f e8 01 3d 6b 1f 63  ..oF*:+..o..=k.c
[00:00:09.852,691] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7227: dumping 'premaster secret' (32 bytes)
[00:00:09.868,164] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7227: 0000:  db 84 c9 1e bb ab 23 8c 3e e5 13 c9 cd 1e 52 e1  ......#.>.....R.
[00:00:09.886,840] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7227: 0010:  97 d2 6c dc ed 59 c0 c8 01 77 e3 7d 65 67 66 8d  ..l..Y...w.}egf.
[00:00:09.948,516] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8780: ciphersuite = TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
[00:00:09.964,904] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8782: dumping 'master secret' (48 bytes)
[00:00:09.980,163] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8782: 0000:  37 8d 1c f3 da 26 d5 f3 48 76 c9 18 0b 35 56 f6  7....&..Hv...5V.
[00:00:09.998,535] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8782: 0010:  4f 87 21 2f f6 88 cc 3b ec a9 46 d2 cd b9 59 5a  O.!/...;..F...YZ
[00:00:10.017,181] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8782: 0020:  55 9c 48 26 f2 06 e8 60 d4 90 ce fc fd db 96 8c  U.H&...`........
[00:00:10.035,430] <inf> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:8902: keylen: 32, minlen: 24, ivlen: 12, maclen: 0
[00:00:10.052,001] <err> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:9001: mbedtls_cipher_setkey() returned -24704 (-0x6080)
[00:00:10.068,542] <err> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:7287: ssl_tls12_populate_transform() returned -24704 (-0x6080)
[00:00:10.085,662] <err> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls12_client.c:3268: mbedtls_ssl_derive_keys() returned -24704 (-0x6080)
[00:00:10.103,057] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_tls.c:4612: <= handshake
[00:00:10.115,905] <err> net_sock_tls: TLS handshake error: -0x6080
[00:00:10.129,394] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:6196: => write close notify
[00:00:10.143,280] <wrn> mbedtls: WEST_TOPDIR/modules/crypto/mbedtls/library/ssl_msg.c:6207: <= write close notify
MQTT connect failed (-128)

[dejans]

Hi,

Here are some observations and recommendations.
You are using a lot of legacy configurations as well as CONFIG_NORDIC_SECURITY_BACKEND. It might be that your AES configs and hashes are not properly forwarded to secure image. Please coonsider disabling CONFIG_NORDIC_SECURITY_BACKEND and rely on CONFIG_NRF_SECURITY and PSA crypto configurations moving forward because this is expected to be fully working with TF-M enabled on newer SDK versions. You can find configuration list with PSA dependencies in the PSA TLS sample project configuration. For your ciphersuite support, these configs seem to be missing

CONFIG_PSA_WANT_ALG_GCM=y
CONFIG_PSA_WANT_ALG_SHA_384=y

RSA is not fully supported in PSA crypto. Therefore, several configuration options might be needed. You can refer to RSA configs from this RSA overlay.

Best regards,
Dejan

[basvkesteren]

Thanks, will look into this and report back.

But, does this mean that the serial_lte_modem native-tls support is broken? (https://github.com/nrfconnect/sdk-nrf/blob/main/applications/serial_lte_modem/overlay-native_tls.conf)

Because that's what my project is based upon.

[dejans]

Hi,

You can check if there is any change when you disable CONFIG_NORDIC_SECURITY_BACKEND in the overlay_native_tls.conf and add two _PSA_WANT_ and RSA configs mentioned previously.

Best regards,
Dejan