Calling socket connect() triggers errno=95

RE: Calling socket connect() triggers errno=95

Loren Rogers — Thu, 14 Oct 2021 17:34:59 GMT

I realized that the server(s) I was trying to connect to didn't support the ciphers that the nrf modem does. I did manage to find a server that support ONE of the ciphers that the modem does (*CBC*). However, I downloaded the 1.3.1 mfw and ran a wireshark trace. Indeed I saw the GCM_SHA384 cipher selected from the server! Thank you Nordic! So if you happen to run into this, making sure your server supports the modem's cipher list is a good start.

RE: Calling socket connect() triggers errno=95

Charlie — Wed, 13 Oct 2021 15:02:08 GMT

Hi Loren,

Glad to hear your good news. My colleague will help you with that ticket.

Happy work! :-)

Best regards,

Charlie

RE: Calling socket connect() triggers errno=95

Loren Rogers — Tue, 12 Oct 2021 14:49:29 GMT

Hi Charlie,

I've managed to get around this problem. However I have a new problem and I was wondering if you could please give me some assistance.

New ticket is here: devzone.nordicsemi.com/.../recv-returning-0

RE: Calling socket connect() triggers errno=95

Charlie — Wed, 06 Oct 2021 07:59:17 GMT

Hi Loren,

The nRF9160 Modem firmware v1.3.1 is going to be released in one week and it will add support to TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384 cipher suite. Please pay attention to this page.

Best regards,

Charlie

RE: Calling socket connect() triggers errno=95

Loren Rogers — Tue, 05 Oct 2021 17:14:59 GMT

After an inadvertent reboot of my PC, I have been able to capture traces now. I'm uploading a wireshark trace to publicapis.org with a rejection (95) because the server didn't support any of my ciphers. I did manage to find a server that would accept one of nrf9160 ciphers.

Because of internal network issues, I am unable to attempt a connection to our server to see if our server would reject the nrf9160 ciphers. That being said, how hard would it be to add GCMdevzone.nordicsemi.com/.../trace_2D00_2021_2D00_10_2D00_04T19_2D00_04_2D00_12.146Z.pcapng-based cipher support to the nrf SDK? I looked at Zephyr API's and THEY support GCM-based ciphers.

RE: Calling socket connect() triggers errno=95

Charlie — Fri, 01 Oct 2021 10:51:01 GMT

Hi Loren,

nRF9160 modem can only support limited TLS Cipher suites, unsupported cipher suites cannot be used, please modify your server setting first.

Best regards,

Charlie

RE: Calling socket connect() triggers errno=95

Charlie — Fri, 01 Oct 2021 10:46:36 GMT

Hi Loren,

This trace file has no meaningful data

Did you see the following printout from LTE Link Monitor?

Best regards,

Charlie

RE: Calling socket connect() triggers errno=95

Loren Rogers — Thu, 30 Sep 2021 21:01:33 GMT

I just found something interesting that could be a problem: I ran Postman on 2 separate servers. Both servers use TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384 for the cipher. I noticed that Nordic does not support this. It does support TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384. (CBC vs. GCM). Would this cause what I am seeing? Also could we add our own 'TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384' encryption somehow?

RE: Calling socket connect() triggers errno=95

Loren Rogers — Thu, 30 Sep 2021 19:23:38 GMT

devzone.nordicsemi.com/.../trace_2D00_2021_2D00_09_2D00_30T18_2D00_56_2D00_20.088Z.bin

RE: Calling socket connect() triggers errno=95

Charlie — Wed, 29 Sep 2021 14:15:58 GMT

What about the size of your trace bin file? Can you share it with me?

I suggest you recording raw format with Trace Collector and monitoring the log through the serial terminal at the same time, this can make sure the whole process is recorded.

Trace Collector V2 preview is still under preview, so do not expect to hight to it now.

Best regards,

Charlie

RE: Calling socket connect() triggers errno=95

Loren Rogers — Wed, 29 Sep 2021 13:27:48 GMT

Hi Charlie,

I seem to be able to now capture. But every time I try to convert to pcap I get:

2021-09-29T13:22:58.931Z ERROR Failed conversion to pcap: end of file reached while searching db uid plugin path: C:\Users\lrogers\.nrfconnect-apps\node_modules\pc-nrfconnect-tracecollector-preview\node_modules\nrf-monitor-lib-js\Release\win32-ia32\nrfml-insight-source.nrfml
2021-09-29T13:22:58.931Z DEBUG Full error: {"error_code":100,"message":"end of file reached while searching db uid plugin path: C:\\Users\\lrogers\\.nrfconnect-apps\\node_modules\\pc-nrfconnect-tracecollector-preview\\node_modules\\nrf-monitor-lib-js\\Release\\win32-ia32\\nrfml-insight-source.nrfml","origin":"Error when running nrfml operation worker."}

I really wish Nordic's stuff worked reliably. This is frustrating.

RE: Calling socket connect() triggers errno=95

Charlie — Wed, 29 Sep 2021 08:01:57 GMT

Hi Loren,

I just test with Trace Collector V2 preview v0..0.11, PCAP seems not to work, please use RAW and convert the log data later.

Also, remember to try with a different serial port if it still does not work.

Best regards,

Charlie

RE: Calling socket connect() triggers errno=95

Loren Rogers — Tue, 28 Sep 2021 13:09:42 GMT

Hi Charlie!

Thanks for the welcome. HTTPS Client definitely can connect, send the data and receive. However I cannot get any captures in Connect Trace Collector. In the https_client prj.conf I definitely have the line: CONFIG_NRF_MODEM_LIB_TRACE_ENABLED=y. I've updated the board itself. But every time I capture either with trace collector or trace collector v2, I get 0 packets captured. Please help.

/Loren

RE: Calling socket connect() triggers errno=95

Charlie — Tue, 28 Sep 2021 08:34:29 GMT

Hi Loren,

Welcome to the embedded world! You are not alone as a beginner struggling with this new field, even me can not fully understand every part of NCS. I suggest you do not bother with CONFIG too much at the beginning, the existing samples and applications and satisfy most of your needs already. nRF9160: HTTPS Client sounds like a good start for you, can you make sure this sample can work on your setup first?

The network-related applications are quite time-sensitive, so the "step and stop" debug is not fit this condition. You can use nRF Connect Trace Collector to log the communication process and analysis the issue.

Best regards,

Charlie

RE: Calling socket connect() triggers errno=95

Loren Rogers — Mon, 27 Sep 2021 19:53:15 GMT

Hi Charlie,

It is the standard nrf9160 dk board. I'm not going to lie. I am totally lost and pretty overwhelmed. Especially when it comes to what CONFIG options I need. All I want is an application that will create and connect to a TLS socket (443) to ANY server I choose (not just nRF Cloud) and be able to call the http_client_req() method with my particular REST method and an url. I come from the iOS/Android world where there are libraries that do this automatically. Could you please let me know what CONFIG options I need and some source code on how to set this up?

The other thing that I find infuriating is that I can't seem to reliably debug this thing. I'll tap 'step over' and it jumps to some other place I have no clue about. And I believe I've set the NO_OPTIMIZATIONS configuration but I still can't see some local variables.

Thanks!

/Loren

RE: Calling socket connect() triggers errno=95

Charlie — Mon, 27 Sep 2021 10:57:49 GMT

Hi Loren,

Is this a customize board? Did you test with a TLS connection? If the connection is lost during data transmission, there can be an error thrown (for TLS, it is normally -95). Could you check if the signal strength (via AT+CESQ) is good when this occurs?

If the problem still exists, could you provide your current modem firmware version and a modem trace when the failure happens?

Best regards,

Charlie