MQTT With GSM PPP and TLS

Question

I am trying to use The GSM PPP sample with MQTT and TLS, I manage to get the NET_L4_CONNECTED event but I cant connect to the broker. I had tested the same broker with other platfroms and it works fine with TLS. My GSM modem is SIM800A connected over UART wit h NRF52840 and I tried both offloading and MBEDTLS, I get Similar results.

I managed to connect to the same broker in the past using the same setup but over insecure transport. It's RabbitMQ with the MQTT plugin if its somehow relevent.

Here is my conf file

CONFIG_LOG=y
CONFIG_USE_SEGGER_RTT=y
CONFIG_LOG_DEFAULT_LEVEL=4
CONFIG_LOG_BACKEND_RTT=y
CONFIG_LOG_PRINTK=y
CONFIG_GPIO=y

CONFIG_MAIN_THREAD_PRIORITY=7

CONFIG_ZIGBEE_SMARTAIR_CLIENT=n
CONFIG_ZIGBEE_SMARTAIR_SERVER=y
CONFIG_ZIGBEE=y
CONFIG_ZIGBEE_APP_UTILS=y
CONFIG_ZIGBEE_ROLE_COORDINATOR=y
CONFIG_MPSL=y
CONFIG_NET_IF_MAX_IPV4_COUNT=4

# This example requires more workqueue stack
CONFIG_SYSTEM_WORKQUEUE_STACK_SIZE=8192

# Enable nRF ECB driver
CONFIG_CRYPTO=y
CONFIG_CRYPTO_NRF_ECB=y
CONFIG_CRYPTO_INIT_PRIORITY=90

#Networking
CONFIG_NET_IPV6_MLD=n
CONFIG_NET_IPV6_NBR_CACHE=n
CONFIG_NET_IP_ADDR_CHECK=n
CONFIG_IEEE802154_NRF5=y
CONFIG_IEEE802154_NRF5_UICR_EUI64_ENABLE=y
CONFIG_IEEE802154_NRF5_UICR_EUI64_REG=0

# GSM modem support
CONFIG_MODEM=y
CONFIG_MODEM_GSM_PPP=y
CONFIG_MODEM_GSM_APN="APN"
CONFIG_GSM_PPP_AUTOSTART=n
CONFIG_MODEM_GSM_FACTORY_RESET_AT_BOOT=y
# PPP networking support
CONFIG_NET_DRIVERS=y
CONFIG_NET_PPP=y
CONFIG_NET_L2_PPP=y
CONFIG_NET_NATIVE=y
CONFIG_NETWORKING=y
CONFIG_NET_L2_PPP_TIMEOUT=10000


# IPv4 enables PPP IPCP support
CONFIG_NET_IPV4=y
CONFIG_NET_IPV6=n
# Network management events
CONFIG_NET_CONNECTION_MANAGER=y
CONFIG_NET_MGMT_EVENT_STACK_SIZE=1024
CONFIG_NET_MGMT_EVENT_QUEUE_SIZE=5
CONFIG_NET_MGMT_EVENT_LOG_LEVEL_DBG=n
CONFIG_MODEM_SIM_NUMBERS=y
CONFIG_MODEM_CELL_INFO=y
CONFIG_MODEM_SOCKET=y
CONFIG_NET_SHELL=y
CONFIG_MODEM_SHELL=y
CONFIG_NET_L2_PPP_OPTION_MRU=y
#CONFIG_GSM_MUX_MRU_DEFAULT_LEN=1024
CONFIG_NET_PPP_MTU_MRU=2048
CONFIG_NET_PPP_RX_STACK_SIZE=2048
CONFIG_NET_PPP_RINGBUF_SIZE=512
CONFIG_NET_TCP_WORKQ_STACK_SIZE=2048

# # Networking config
CONFIG_NET_UDP=y
CONFIG_NET_TCP=y
CONFIG_NET_SOCKETS=y
CONFIG_MQTT_LIB=y
CONFIG_MQTT_LIB_TLS=y
CONFIG_NET_SOCKETS_SOCKOPT_TLS=y
CONFIG_NET_SOCKETS_TLS_MAX_CONTEXTS=4
CONFIG_MQTT_KEEPALIVE=30
CONFIG_NET_SOCKETS_OFFLOAD=y
CONFIG_MINIMAL_LIBC_MALLOC_ARENA_SIZE=4096 #Not sure why, i see and Error that says this value is 0, so make it not 0
CONFIG_TLS_CREDENTIAL_FILENAMES=y
# Network buffers
CONFIG_NET_PKT_RX_COUNT=32
CONFIG_NET_PKT_TX_COUNT=32
CONFIG_NET_BUF_RX_COUNT=64
CONFIG_NET_BUF_TX_COUNT=64
CONFIG_NET_CONTEXT_NET_PKT_POOL=y

# # Enable MBEDTLS
# CONFIG_MBEDTLS_ENABLE_HEAP=y
# CONFIG_MBEDTLS_HEAP_SIZE=56240
# CONFIG_NRF_SECURITY=y
# CONFIG_MBEDTLS_X509_LIBRARY=y
# CONFIG_MBEDTLS_X509_CRT_PARSE_C=y
# CONFIG_MBEDTLS_MD_C=y
# CONFIG_MBEDTLS_LEGACY_CRYPTO_C=y
# CONFIG_MBEDTLS_RSA_C=y
# CONFIG_MBEDTLS_ECDH_C=y
# CONFIG_MBEDTLS_ECP_DP_CURVE25519_ENABLED=y
# # Enable Logging support
CONFIG_NET_LOG=y
CONFIG_NET_TCP_LOG_LEVEL_ERR=y
CONFIG_NET_SOCKETS_LOG_LEVEL_ERR=y
CONFIG_MQTT_LOG_LEVEL_ERR=y
CONFIG_NET_IF_LOG_LEVEL_ERR=y
CONFIG_MBEDTLS_DEBUG=n
CONFIG_NET_CONFIG_LOG_LEVEL_ERR=y
CONFIG_NET_CONNECTION_MANAGER_LOG_LEVEL_ERR=y
CONFIG_NET_CONTEXT_LOG_LEVEL_ERR=y
CONFIG_NET_PKT_LOG_LEVEL_ERR=y
CONFIG_NET_L2_PPP_LOG_LEVEL_ERR=y
CONFIG_NET_PPP_LOG_LEVEL_ERR=y
CONFIG_MODEM_LOG_LEVEL_DBG=y

Then The log output is:....GSM STARTUP LOGS .....Then:00> [00:00:35.313,446] <inf> sample_gsm_ppp: ###################################### Network connected ######################################
00> [00:00:35.314,666] <dbg> net_conn: conn_register_debug: (): [0x2000d818/6/1/0x3f] remote "The IP address of my server"/8883
00> [00:00:35.314,727] <dbg> net_conn: conn_register_debug: ():   local 0.0.0.0/47228 cb 0x15bbd ud 0x2000d43c
00> [00:00:35.783,142] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 46
00> [00:00:35.783,203] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 46
00> [00:00:35.783,386] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:00:35.783,477] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 47228 family 1
00> [00:00:35.783,508] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:00:35.789,276] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:00:35.795,593] <inf> net_mqtt_publisher_sample: mqtt_connect -22
00> [00:00:35.884,948] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 46
00> [00:00:35.885,009] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 46
00> [00:00:35.885,192] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:00:35.885,284] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 47228 family 1
00> [00:00:35.885,314] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:00:35.885,437] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:00:36.203,491] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:00:36.203,582] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:00:36.203,735] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:00:36.203,826] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 47228 family 1
00> [00:00:36.203,857] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:00:36.209,655] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:00:36.382,629] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:00:36.382,720] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:00:36.382,873] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:00:36.382,965] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 47228 family 1
00> [00:00:36.382,995] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:00:36.383,117] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:00:37.883,178] <dbg> net_conn: net_conn_unregister: (tcp_work): Connection handler 0x2000d818 removed
00> [00:00:43.796,722] <dbg> net_conn: conn_register_debug: (): [0x2000d818/6/1/0x3f] remote "The IP address of my server"/8883
00> [00:00:43.796,783] <dbg> net_conn: conn_register_debug: ():   local 0.0.0.0/44109 cb 0x15bbd ud 0x2000d43c
00> [00:00:44.484,222] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 46
00> [00:00:44.484,313] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 46
00> [00:00:44.484,466] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:00:44.484,558] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 44109 family 1
00> [00:00:44.484,588] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:00:44.490,234] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:00:44.496,032] <inf> net_mqtt_publisher_sample: mqtt_connect -22
00> [00:00:44.544,830] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 46
00> [00:00:44.544,891] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 46
00> [00:00:44.545,074] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:00:44.545,166] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 44109 family 1
00> [00:00:44.545,196] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:00:44.545,318] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:00:44.885,070] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:00:44.885,131] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:00:44.885,314] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:00:44.885,406] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 44109 family 1
00> [00:00:44.885,437] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:00:44.891,021] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:00:45.023,651] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:00:45.023,712] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:00:45.023,895] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:00:45.023,956] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 44109 family 1
00> [00:00:45.024,017] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:00:45.024,108] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:00:46.524,169] <dbg> net_conn: net_conn_unregister: (tcp_work): Connection handler 0x2000d818 removed
00> [00:00:52.497,161] <dbg> net_conn: conn_register_debug: (): [0x2000d818/6/1/0x3f] remote "The IP address of my server"/8883
00> [00:00:52.497,222] <dbg> net_conn: conn_register_debug: ():   local 0.0.0.0/33755 cb 0x15bbd ud 0x2000d43c
00> [00:00:53.184,692] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 46
00> [00:00:53.184,753] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 46
00> [00:00:53.184,906] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:00:53.184,997] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 33755 family 1
00> [00:00:53.185,058] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:00:53.190,826] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:00:53.196,990] <inf> net_mqtt_publisher_sample: mqtt_connect -22
00> [00:00:53.244,934] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 46
00> [00:00:53.245,025] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 46
00> [00:00:53.245,208] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:00:53.245,269] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 33755 family 1
00> [00:00:53.245,330] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:00:53.245,422] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:00:53.603,912] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:00:53.603,973] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:00:53.604,156] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:00:53.604,217] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 33755 family 1
00> [00:00:53.604,278] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:00:53.610,137] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:00:53.784,271] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:00:53.784,332] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:00:53.784,515] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:00:53.784,606] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 33755 family 1
00> [00:00:53.784,637] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:00:53.784,759] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:00:55.284,790] <dbg> net_conn: net_conn_unregister: (tcp_work): Connection handler 0x2000d818 removed
00> [00:01:01.198,120] <dbg> net_conn: conn_register_debug: (): [0x2000d818/6/1/0x3f] remote "The IP address of my server"/8883
00> [00:01:01.198,181] <dbg> net_conn: conn_register_debug: ():   local 0.0.0.0/49579 cb 0x15bbd ud 0x2000d43c
00> [00:01:01.908,294] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 46
00> [00:01:01.908,355] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 46
00> [00:01:01.908,538] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:01.908,630] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 49579 family 1
00> [00:01:01.908,660] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:01.914,184] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:01.919,921] <inf> net_mqtt_publisher_sample: mqtt_connect -22
00> [00:01:01.944,854] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 46
00> [00:01:01.944,915] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 46
00> [00:01:01.945,098] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:01.945,190] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 49579 family 1
00> [00:01:01.945,220] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:01.945,312] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:02.304,260] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:01:02.304,321] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:01:02.304,504] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:02.304,595] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 49579 family 1
00> [00:01:02.304,626] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:02.310,119] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:02.484,466] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:01:02.484,527] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:01:02.484,710] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:02.484,802] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 49579 family 1
00> [00:01:02.484,832] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:02.484,985] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:03.985,015] <dbg> net_conn: net_conn_unregister: (tcp_work): Connection handler 0x2000d818 removed
00> [00:01:09.921,051] <dbg> net_conn: conn_register_debug: (): [0x2000d818/6/1/0x3f] remote "The IP address of my server"/8883
00> [00:01:09.921,112] <dbg> net_conn: conn_register_debug: ():   local 0.0.0.0/52204 cb 0x15bbd ud 0x2000d43c
00> [00:01:10.626,678] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 46
00> [00:01:10.626,739] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 46
00> [00:01:10.626,922] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:10.626,983] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 52204 family 1
00> [00:01:10.627,044] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:10.632,629] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:10.638,458] <inf> net_mqtt_publisher_sample: mqtt_connect -22
00> [00:01:10.669,036] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 46
00> [00:01:10.669,097] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 46
00> [00:01:10.669,281] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:10.669,372] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 52204 family 1
00> [00:01:10.669,403] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:10.669,525] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:11.006,652] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:01:11.006,713] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:01:11.006,896] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:11.006,988] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 52204 family 1
00> [00:01:11.007,019] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:11.007,141] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:11.046,539] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:01:11.046,600] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:01:11.046,783] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:11.046,844] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 52204 family 1
00> [00:01:11.046,905] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:11.052,490] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:11.184,814] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:01:11.184,875] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:01:11.185,058] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:11.185,119] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 52204 family 1
00> [00:01:11.185,180] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:11.185,272] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:12.685,333] <dbg> net_conn: net_conn_unregister: (tcp_work): Connection handler 0x2000d818 removed
00> [00:01:18.639,617] <dbg> net_conn: conn_register_debug: (): [0x2000d818/6/1/0x3f] remote "The IP address of my server"/8883
00> [00:01:18.639,648] <dbg> net_conn: conn_register_debug: ():   local 0.0.0.0/53708 cb 0x15bbd ud 0x2000d43c
00> [00:01:19.346,069] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 46
00> [00:01:19.346,160] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 46
00> [00:01:19.346,313] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:19.346,405] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 53708 family 1
00> [00:01:19.346,435] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:19.352,050] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:19.357,940] <inf> net_mqtt_publisher_sample: mqtt_connect -22
00> [00:01:19.406,127] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 46
00> [00:01:19.406,188] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 46
00> [00:01:19.406,372] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:19.406,463] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 53708 family 1
00> [00:01:19.406,494] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:19.406,616] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:19.706,207] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:01:19.706,268] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:01:19.706,451] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:19.706,542] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 53708 family 1
00> [00:01:19.706,573] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:19.712,188] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:19.987,030] <dbg> net_core: net_recv_data: (ppp_workq): prio 0 iface 0x20000cd8 pkt 0x2002d810 len 42
00> [00:01:19.987,121] <dbg> net_core: net_rx: (rx_q[0]): Received pkt 0x2002d810 len 42
00> [00:01:19.987,274] <dbg> net_ipv4: net_ipv4_input: (rx_q[0]): IPv4 packet received from "The IP address of my server" to 100.118.237.221
00> [00:01:19.987,365] <dbg> net_conn: net_conn_input: (rx_q[0]): Check TCP listener for pkt 0x2002d810 src port 8883 dst port 53708 family 1
00> [00:01:19.987,396] <dbg> net_conn: net_conn_input: (rx_q[0]): [0x2000d818] match found cb 0x15bbd ud 0x2000d43c rank 0x3f
00> [00:01:19.987,518] <dbg> net_core: processing_data: (rx_q[0]): Dropping pkt 0x2002d810
00> [00:01:21.487,579] <dbg> net_conn: net_conn_unregister: (tcp_work): Connection handler 0x2000d818 removedI am down to give the support in NRF a temp account on my server to verify it works with other platforms.I include the CA cert like this :

static const unsigned char ca_certificate[] =  "ca_cert.der";

and

static int tls_init(void)
{
    int err;

    err = tls_credential_add(APP_CA_CERT_TAG, TLS_CREDENTIAL_CA_CERTIFICATE,
                             ca_certificate, sizeof(ca_certificate));
    if (err < 0)
    {
        LOG_ERR("Failed to register public certificate: %d", err);
        return err;
    }

    return err;
}

I get Success when I call tls_init

my Client start is :

static void client_init(struct mqtt_client *client)
{
    static struct mqtt_utf8 password;
    static struct mqtt_utf8 username;
    struct mqtt_sec_config *tls_config;
    char device_id_username[50];
    sprintf(device_id_username, "mqttvhost:%s", device_id);
    
    mqtt_client_init(client);

    broker_init();

    /* MQTT client configuration */
    client->broker = &broker;
    client->evt_cb = mqtt_event_handler;

    client->client_id.utf8 = (uint8_t *)device_id_username;
    client->client_id.size = strlen(device_id_username);
    password.utf8 = (uint8_t *)device_ic;
    password.size = strlen(device_ic);

    client->password = &password;

    username.utf8 = (uint8_t *)device_id_username;
    username.size = strlen(device_id_username);

    client->user_name = &username;

    client->protocol_version = MQTT_VERSION_3_1_1;

    /* MQTT buffers configuration */
    client->rx_buf = rx_buffer;
    client->rx_buf_size = sizeof(rx_buffer);
    client->tx_buf = tx_buffer;
    client->tx_buf_size = sizeof(tx_buffer);
    /* MQTT transport configuration */
    client->transport.type = MQTT_TRANSPORT_SECURE;

    tls_config = &client->transport.tls.config;
    // int cipherlist[]={0xc02c,0xcca9,0xc0af,0xc0ad,0xc05d,0xc02b};
    tls_config->peer_verify = TLS_PEER_VERIFY_OPTIONAL;
    tls_config->cipher_list = NULL;
    tls_config->cipher_list = 0;
    tls_config->sec_tag_list = m_sec_tags;
    tls_config->sec_tag_count = ARRAY_SIZE(m_sec_tags);
    tls_config->hostname = TLS_SNI_HOSTNAME;
}

static int try_to_connect(struct mqtt_client *client)
{
    int rc, i = 0;

    while (i++ < APP_CONNECT_TRIES && !mqtt_connected) {

        client_init(client);

        rc = mqtt_connect(client);
        if (rc != 0) {
            LOG_INF("mqtt_connect %d", rc);
            k_sleep(K_MSEC(APP_SLEEP_MSECS));
            continue;
        }

        prepare_fds(client);

        if (wait(APP_CONNECT_TIMEOUT_MS)) {
            mqtt_input(client);
        }

        if (!mqtt_connected) {
            mqtt_abort(client);
        }
    }

    if (mqtt_connected) {
        return 0;
    }

    return -EINVAL;
}

Any support on this is appricated.

Belalshinnawey · Accepted Answer

I completely gave up on mbedtls. I ported WolfSSL to Zephyr and used it with POSIX to connect with TLS 1.3 . The difference was really just the more meaningful error messages that helped me tune my application. Anyone reading this on NCS v 2.3.0, just download wolfssl and use it, it's way easier and you get error messages that are helpful. Also the code -7780 is an mbedtls error, its not a an nrf error code, it means SSL - A fatal alert message was received from our peer. For some reason, mbedtls was selecting a cipher then returning an error after the server accepted the cipher, all while saying the server returned a fatal alert, even thought the server logs are saying connection is accepted. I couldn't get it to work so I used a library I'm familiar with.

MQTT With GSM PPP and TLS

Top Replies