Modem Firmware Reverting TLS Version?

[Jared]

Does the modem firmware revert to using TLSv1 on a failure to connect? I'm getting some occasional weirdness connecting to an OpenSSL based server:

Error = Ssl(Error { code: ErrorCode(1), c
ause: Some(Ssl(ErrorStack([Error { code: 336130315, library: "SSL routines", function: "ssl3_get_record", reason: "wrong version number", file: "/usr/src/crypto/openss
l/ssl/record/ssl3_record.c", line: 332 }]))) }, X509VerifyResult { code: 0, error: "ok" })

It works most of the time but after a while or on a reconnect it fails and doesn't connect again. 

Thanks for your help! 

Jared

[Charlie]

Hi Jared,

According to  nRF9160 SiP modem firmware - what it is and how it works: MFW is only "Integrated TLS(1.2)/DTLS(1.2)".

Searching keywords"OpenSSL wrong version number" shows this issue seems related to server configuration, can you try the following workaround?

SSL3_GET_RECORD:wrong version number' while validating ssl certificate - Blue Sky Systems | Cloud - On-Premise IT

Best regards,

Charlie

[Jared]

Hey Charlie,

Thanks for the tips. I guess it doesn't really get much closer to resolution though as I already knew this info. I'll keep working it on my end. 

Thanks again