NRF9160 FOTA SSL Certification issue

[hmdra]

Hi,

 i am working with aws-fota example, i copied my certificate to certificate.h file, once i run the program it shows like 

The MQTT AWS Jobs FOTA Sample
nrf_inbuilt_key_delete(16842753, 0) => result=13
nrf_inbuilt_key_delete(16842753, 1) => result=13
nrf_inbuilt_key_delete(16842753, 2) => result=13
nrf_inbuilt_key_write => result=13

CLOUD_CA_CERTIFICATE err: 13

my certification.h file be like 

#define CLOUD_CLIENT_PRIVATE_KEY \
"-----BEGIN RSA PRIVATE KEY-----\n" \
"MII********************************************************a\
****************************************************************\
****************************************************************\
****************************************************************\
****************************************************************\n" \
"-----END RSA PRIVATE KEY-----\n"

#define CLOUD_CLIENT_PUBLIC_CERTIFICATE \
"-----BEGIN CERTIFICATE-----\n" \
"MII********************************************************a\
****************************************************************\
****************************************************************\
****************************************************************\
****************************************************************\n" \
"-----END CERTIFICATE-----\n"

#define CLOUD_CA_CERTIFICATE \
"-----BEGIN CERTIFICATE-----\n" \
"MII********************************************************a\
****************************************************************\
****************************************************************\
****************************************************************\
****************************************************************\n" \
"-----END CERTIFICATE-----\n"

in Error code info the 13 will be shown below

#define EACCES 13 /* Permission denied */

why should it be saying the default delete process result as 13..

kindly help me to sort out..

[Amanda Hsieh]

Hi, 

According to the NCS documentation the function nrf_inbuilt_key_write(..) and nrf_inbuilt_key_delete(..) need to run before the modem is in an active state:

Run this function only when LTE link is inactive. If used during active link, NRF_EACCES will be returned and the key material will not be written.

This is the reason it fails for you, nrf_inbuilt_key_delete(..) and nrf_inbuilt_key_write(..) returns error 13 (=NRF_EACCES), which means there is an active link.

 Take a look at the AWS FOTA example, where CONFIG_LTE_AUTO_INIT_AND_CONNECT is set to n. This will avoid the lte init function to run automatically, and you'll have to run it yourself, after nrf_inbuilt_key_write(..) is called.

So in short:  

• Set CONFIG_LTE_AUTO_INIT_AND_CONNECT to n
• Create the function modem_configure() and run it after nrf_inbuilt_key_delete(..) and nrf_inbuilt_key_write(..)

-Amanda H

[hmdra]

hi amanda,

Thank you for your valuable response, it works well.. but i cannot able to send the data to my mqtt broker..

in my program the log shows the mqtt connected but it also give 

POLLNVAL response..

kindly help me to sort this out..

thanks

hmdra

[Amanda Hsieh]

Hi, 

Sorry for the delay.

I saw your new question is handled by this case https://devzone.nordicsemi.com/support-private/support/241648. 

-Amanda H.