Telit devicewise SSL error

4 thoughts on “Telit devicewise SSL error

  1. Dear Sir,

    I have tested below command sequence with UL865-EUD (12.00.616) module, everything is working fine. But when we are using same command sequence with HE910-EUD (12.00.226)  module, getting operation not supported error of #DWCONN command. 

    Do I need any CA or any other certificate?

    ATE0 OK 

     OK 

     +CPIN: READY

     OK 

    AT#SGACT=1,0 

    OK 

    AT+CGDCONT=1,”IP”,airtelgprs.com

     OK 

    AT+CREG? 

    +CREG: 0,1 

     OK

     AT#SGACT=1,0 

    OK 

    AT#SGACT=1,1 

     #SGACT: 100.81.197.94

     OK 

    AT+CSQ 

    +CSQ: 12,5

     OK

     AT#SSLEN=1,1 

    +CME ERROR: SSL already activated

     AT#SSLSECCFG=1,0,1,0

    OK 

    AT#DWCFG=open-api.devicewise.com,0,vH41CjWn8zH3fyYC,1 

    OK 

    AT#DWEN=0,0

     OK 

    AT#DWEN=0,1 

    OK 

    AT#DWCONN?

     #DWCONN: 1,3

     OK 

    AT#DWCONN=0 

     OK 

    AT#DWCONN=1 

     +CME ERROR: operation not supported 

    AT#DWSTATUS 

    #DWSTATUS: 3,-207,-1,0,0,0,0 

     OK

    Please help us to resolve the issue. 

    Thanks,

    Diwakar 

    1. Dear,

      As far as I can see, you set the SSL configuration in order to use a RootCA certificate with

      AT#SSLSECCFG=1,0,1,0

      (the third parameter to 1 means “manage server authentication”, the fourth means DER format – Binary- )

      However, I cannot see from your log any command to store the RootCA certificate.It surprises me that it works on the UL865-EUD module, maybe the certificate is already stored?

      To resolve this issue, you can either

      – set SSL in order not to verify server authentication with

      AT#SSLSECCFG=1,0,0

      – store the certificate using AT#SSLSECDATA command

      Also, remember that you should send AT#SSLEN=1,0 before the AT#DWCONN=1 command, since the devicewise command will enable the SSL encryption internally and expect it to be disabled.

      I suggest the first approach to verify if everything works, since the firmware version is quite old

      Best Regards

      Fabio Pintus

      1. Dear Sir,

        Thanks for your reply. I have not flashed any certificate in UL865-EUD module. 

        I will check you’re the suggestion and let you know the testing result on HE910-EUD module.

        Meanwhile, can you share DW certificates and HE910-EUD module latest firmware?

        Thanks,

        Diwakar 

        1. The firmware is in the Download Zone and for the SSL there is a procedure described in Telit SSL TLS User Guide, “How to Get the CA Certificate” chapter.