Simulator, HTTPS, error -1001 and certificate ?

RodolpheDumesnil over 4 years ago

Hi all,

With the simulator, I try to access with makeWebRequest to an HTTPS url and I get an ERROR -1001.

I tried to check and uncheck "Use Device HTTPS requirements" => same.

I tried with different devices => same.

I tried from my physical watch, from the same network => OK, no problem

I tried from the browser of the PC wich execute the simulator => OK, without any warning.

A Wireshark says the error appears during TLS exchange :

I generate my certificate with let'sEncrypt, and have an apache2 as web-server :

Perhaps I have an idea : is the simulator include root certificates or use system certificates ? If it include, I know Let'sEncrypt have revoked recently old root certificates, could it be the "root" cause ?

Top Replies

RodolpheDumesnil over 4 years ago in reply to FlowState +1

Doh !

You are totally right !! I only activated TLSv1.3 on my server !

I added TLSv1.2, all is right now !

Thanks for your eyes ;o)

All Replies

FlowState over 4 years ago

Did you try clicking on the TLS v1.2 packets? Packet #864 shows a fatal "Protocol Version" error. What does Packet #862 ("Client Hello") say?

Have you ensured TLS v1.2 is enabled in apache? (I know the screenshot literally says "TLS v1.2" for all the TLS packets, just trying to cover all the bases....)

https://tools.ietf.org/html/rfc5246

  protocol_version
      The protocol version the client has attempted to negotiate is
      recognized but not supported.  (For example, old protocol versions
      might be avoided for security reasons.)  This message is always
      fatal.

RodolpheDumesnil over 4 years ago in reply to FlowState

Doh !

You are totally right !! I only activated TLSv1.3 on my server !

I added TLSv1.2, all is right now !

Thanks for your eyes ;o)

Travis.ConnectIQ over 4 years ago

IMO, we should probably consider this to be a bug report. If devices are able to do TLSv1.3 then we should probably add support in the simulator. It is likely that most devices will not support TLSv1.3 over WiFi, but things will work fine over BLE if the mobile device has TLSv1.3 support enabled. This will be an annoying thing to simulate, but we should at least enable support.

RodolpheDumesnil over 4 years ago in reply to Travis.ConnectIQ

OK Travis, I will create a bug report.