awslabs / amazon-kinesis-video-streams-webrtc-sdk-c

Amazon Kinesis Video Streams Webrtc SDK is for developers to install and customize realtime communication between devices and enable secure streaming of video, audio to Kinesis Video Streams.
https://awslabs.github.io/amazon-kinesis-video-streams-webrtc-sdk-c/group__PublicMemberFunctions.html
Apache License 2.0
997 stars 299 forks source link

[QUESTION] Client connection failed. Connection error string: tls: certificate signature failure #1748

Closed RTL8710 closed 11 months ago

RTL8710 commented 1 year ago

What is the reason for an error in running the test program kvsWebrtcClientMaster on the device? ` 2023-07-10 08:54:08 VERBOSE signalingClientStateChanged(): Signaling client state changed to 3 - 'Describe Channel' 2023-07-10 08:54:08 VERBOSE lwsCompleteSync(): Perform secure synchronous call for URL: https://kinesisvideo.cn-north-1.amazonaws.com.cn/describeSignalingChannel 2023-07-10 08:54:08 VERBOSE lwsHttpCallbackRoutine(): HTTPS callback with reason 85 [2023/07/10 16:54:08:2000] N: ++ [wsicli|3|POST/h1/kinesisvideo.cn-north-1.amazonaws.com.cn] (1) 2023-07-10 08:54:08 VERBOSE lwsHttpCallbackRoutine(): HTTPS callback with reason 105 2023-07-10 08:54:08 VERBOSE lwsHttpCallbackRoutine(): HTTPS callback with reason 19 2023-07-10 08:54:08 VERBOSE lwsHttpCallbackRoutine(): HTTPS callback with reason 29 2023-07-10 08:54:08 VERBOSE lwsHttpCallbackRoutine(): HTTPS callback with reason 58 2023-07-10 08:54:08 VERBOSE lwsHttpCallbackRoutine(): HTTPS callback with reason 58 [2023/07/10 16:54:08:5644] E: SSL error: certificate signature failure (preverify_ok=0;err=7;depth=2) 2023-07-10 08:54:08 VERBOSE lwsHttpCallbackRoutine(): HTTPS callback with reason 1 2023-07-10 08:54:08 WARN lwsHttpCallbackRoutine(): Client connection failed. Connection error string: tls: certificate signature failure 2023-07-10 08:54:08 VERBOSE lwsHttpCallbackRoutine(): HTTPS callback with reason 30 [2023/07/10 16:54:08:5666] N: -- [wsicli|3|POST/h1/kinesisvideo.cn-north-1.amazonaws.com.cn] (0) 366.552ms 2023-07-10 08:54:08 ERROR describeChannelLws(): Call Failed with Status: 0x5d000034 2023-07-10 08:54:08 VERBOSE stepStateMachine(): State Machine - Current state: 0x0000000000000004, Next state: 0x0000000000000004, Current local state retry count [2] Max local state retry count [1], State transition wait time [0] ms

`

RTL8710 commented 1 year ago

image wireshad snap package : device.zip

hassanctech commented 1 year ago

Can you please provide the following details:

  1. What version of the SDK you're using?
  2. What is the architecture/OS of the Device you're running the sample
  3. The toolchain you used to build for your device
  4. Have you verified that the runtime environment on the device matches what you have at build/link time in your toolchain?
  5. What version of openssl do you have on the device?

It looks like you're hitting an SSL Error

[2023/07/10 16:54:08:5644] E: SSL error: certificate signature failure (preverify_ok=0;err=7;depth=2)

I would investigate the openssl version on the device and make sure there are not issues for that version on your specific platform. You have you have provided details 1-5 we can further investigate the issue.

RTL8710 commented 1 year ago

1,sdk version:55d3a6be6ba3af9781631e74833ea1dcbd4008e6 2,arm gcc arm-openwrt-linux-muslgnueabi-gcc -v Reading specs from /mnt/source/sdk/tina-v853-yizhi-v1.0/prebuilt/gcc/linux-x86/arm/toolchain-sunxi-musl/toolchain/bin/../lib/gcc/arm-openwrt-linux-muslgnueabi/6.4.1/specs COLLECT_GCC=arm-openwrt-linux-muslgnueabi-gcc.bin COLLECT_LTO_WRAPPER=/mnt/source/sdk/tina-v853-yizhi-v1.0/prebuilt/gcc/linux-x86/arm/toolchain-sunxi-musl/toolchain/bin/../libexec/gcc/arm-openwrt-linux-muslgnueabi/6.4.1/lto-wrapper Target: arm-openwrt-linux-muslgnueabi Configured with: /home/xuqiang/workspace/tina-old/out/v853-perf1/compile_dir/toolchain/gcc-linaro-6.4-2017.11/configure --with-bugurl=https://dev.openwrt.org/ --with-pkgversion='OpenWrt/Linaro GCC 6.4-2017.11 2017-11' --prefix=/home/xuqiang/workspace/tina-old/out/v853-perf1/staging_dir/toolchain --build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=arm-openwrt-linux-muslgnueabi --with-gnu-ld --enable-target-optspace --enable-libgomp --disable-libmudflap --disable-multilib --disable-nls --without-isl --without-cloog --with-host-libstdcxx=-lstdc++ --with-gmp=/home/xuqiang/workspace/tina-old/out/host --with-mpfr=/home/xuqiang/workspace/tina-old/out/host --with-mpc=/home/xuqiang/workspace/tina-old/out/host --disable-decimal-float --with-diagnostics-color=auto-if-env --disable-libssp --enable-__cxa_atexit --with-cpu=cortex-a7 --with-fpu=neon --with-float=hard --with-headers=/home/xuqiang/workspace/tina-old/out/v853-perf1/staging_dir/toolchain/include --disable-libsanitizer --enable-languages=c,c++ --enable-shared --enable-threads --with-slibdir=/home/xuqiang/workspace/tina-old/out/v853-perf1/staging_dir/toolchain/lib --enable-lto --with-libelf=/home/xuqiang/workspace/tina-old/out/host Thread model: posix gcc version 6.4.1 (OpenWrt/Linaro GCC 6.4-2017.11 2017-11) 3,Confirm that the cross compilation used in the running environment and compilation environment is the same。 4,openssl or mbedtls use kvs 。

RTL8710 commented 1 year ago

sdk version:b820e2ea3d28c670da2fbc789face742cb949ef1

niyatim23 commented 11 months ago

Hi @RTL8710, are you building with or without dependencies? What is the version of openssl that you are using?

github-actions[bot] commented 11 months ago

It looks like this issue has not been active for 10 days. If the issue is not resolved, please add an update to the ticket, else it will be automatically resolved in a few days.