after bonding, when try reconnect, Failed to authenticate happen. how can I fix?

RE: after bonding, when try reconnect, Failed to authenticate happen. how can I fix?

Torsten Robitzki — Tue, 21 Apr 2020 09:38:27 GMT

I see the very same effect. I have an application running as peripheral on an nrf52832. Using nRF Connect, I can pair and bond with the peripheral. After disconnecting and reconnecting, I see the peripheral sending a SMP Slave Security Request and in response to that, the nRF Connect starts to encrypt the connection.devzone.nordicsemi.com/.../5460.security_5F00_request.pcapng The connection seems to be usable and encrypted.

Maybe just an issue in nRF Connect?

RE: after bonding, when try reconnect, Failed to authenticate happen. how can I fix?

nordzm — Tue, 10 Sep 2019 11:41:58 GMT

I have the same problem for the ble_app_multirole_lesc test example.

Nordic NRF52840 s140

RE: after bonding, when try reconnect, Failed to authenticate happen. how can I fix?

BEN_HB — Thu, 05 Sep 2019 01:14:30 GMT

Sorry to reply late.

under below, it is screenshot. I can use characteristisc.

I think it looks like still pairing. but just try to reconnect, something is problem.

thank you

RE: after bonding, when try reconnect, Failed to authenticate happen. how can I fix?

Edvin — Thu, 29 Aug 2019 09:31:24 GMT

Ok. To get the hang of what the issue really is:

[quote user=""]after bonding, If I try to connect one more, nRF Connect app show Failed to authenticate (NRF_ERROR_INVALID_STATE).[/quote]

Can you send a screenshot of this? It doesn't disconnect, but it doesn't get paired? Or what does it look like? Are you not able to use the characteristics that require pairing?

RE: after bonding, when try reconnect, Failed to authenticate happen. how can I fix?

BEN_HB — Thu, 29 Aug 2019 09:20:04 GMT

I didn't allow that. after changed to allow, error is still occurred

RE: after bonding, when try reconnect, Failed to authenticate happen. how can I fix?

Edvin — Thu, 29 Aug 2019 08:39:26 GMT

        case PM_EVT_CONN_SEC_CONFIG_REQ:
        {
            pm_conn_sec_config_t conn_sec_config = {.allow_repairing = true};
            pm_conn_sec_config_reply(p_evt->conn_handle, &conn_sec_config);
        } break;

Does that allow the device to pair again?

BR,
Edvin

RE: after bonding, when try reconnect, Failed to authenticate happen. how can I fix?

BEN_HB — Thu, 29 Aug 2019 03:14:38 GMT

devzone.nordicsemi.com/.../2047.log.pcapng

using Sniffer , upload file.

after reconnect, it shows Encrypted packet decrypted incorrectly.

one more question.

in file log,

No.4000, Sent Pairing Request part,

on Initiator key Distribution,

Why Id Key(IRK) is false?

I set only bonding, not use LESC , etc..

static void peer_manager_init()
{    
    ret_code_t  err_code;

    err_code = pm_init();
    APP_ERROR_CHECK(err_code);
    //memset(&whitelist, PM_PEER_ID_INVALID, sizeof(whitelist));
    memset(&sec_param, 0, sizeof(sec_param));

    // Security parameters to be used for all security procedures.
    sec_param.bond           = SEC_PARAM_BOND;
    sec_param.mitm           = SEC_PARAM_MITM;
    sec_param.lesc           = SEC_PARAM_LESC;
    sec_param.keypress       = SEC_PARAM_KEYPRESS;
    sec_param.io_caps        = SEC_PARAM_IO_CAPABILITIES;
    sec_param.oob            = SEC_PARAM_OOB;
    sec_param.min_key_size   = SEC_PARAM_MIN_KEY_SIZE;
    sec_param.max_key_size   = SEC_PARAM_MAX_KEY_SIZE;
    sec_param.kdist_own.enc  = 1;
    sec_param.kdist_own.id   = 1;
    sec_param.kdist_peer.enc = 1;
    sec_param.kdist_peer.id  = 1;

    err_code = pm_sec_params_set(&sec_param); 
    // Until this function is called, all bonding procedures that are initiated by the peer are rejected.
    APP_ERROR_CHECK(err_code);        

    err_code = pm_register(pm_evt_handler);
    APP_ERROR_CHECK(err_code);

    NRF_LOG_INFO("PEER MANAGER INIT END\n");

    err_code = pm_peers_delete();
    APP_ERROR_CHECK(err_code);
    
    NRF_LOG_INFO("PEER DELETE END\n");
}

I set

sec_param.kdist_own.id = 1;
sec_param.kdist_peer.id = 1;

is it not set about irk?

Thank you

RE: after bonding, when try reconnect, Failed to authenticate happen. how can I fix?

BEN_HB — Thu, 29 Aug 2019 01:37:13 GMT

if remove, sd_ble_gap_sec_info_reply error log is removed , but nRF Connect still occurred same error

RE: after bonding, when try reconnect, Failed to authenticate happen. how can I fix?

Edvin — Wed, 28 Aug 2019 12:10:36 GMT

Hello,

There are several handlers that handles the different SoftDevice events. One of them is smd_ble_evt_handler() in security_dispatcher.c. This one calls:

sec_info_request_process() in the BLE_GAP_EVT_SEC_INFO_REQUEST event. This function will also call:

sd_ble_gap_sec_info_reply(), and print:

        NRF_LOG_WARNING("sd_ble_gap_sec_info_reply() returned NRF_EROR_INVALID_STATE, which is an"\
                        "error unless the link is disconnecting.");

if it returns NRF_ERROR_INVALID_STATE.

My guess is that since it is called twice (once where you implemented it, and once in the security_dispatcher.c), one of them will return NRF_ERROR_INVALID_STATE.

What happens if you remove your call to sd_ble_gap_sec_info_reply()?