can not connect mqtts with aws - Githubissues

botletics / SIM7000-LTE-Shield

Botletics SIM7000 LTE CAT-M1/NB-IoT Shield for Arduino

https://www.botletics.com/products/sim7000-shield

GNU General Public License v3.0

477 stars 215 forks source link

can not connect mqtts with aws #87

Open slipiduche opened 5 years ago

slipiduche commented 5 years ago

this is my result code:

Docklight Log File (ASCII) - Started 4/16/2019 22:02:19.85 

4/16/2019 22:02:45.61 [RX] - 00:22:57<CR><LF>
<CR><LF>
rst:0x1 (POWERON_RESET),boot:0x13 (SPI_FAST_FLASH_BOOT)<CR><LF>
configsip: 0, SPIWP:0xee<CR><LF>
clk_drv:0x00,q_drv:0x00,d_drv:0x00,cs0_drv:0x00,hd_drv:0x00,wp_drv:0x00<CR><LF>
mode:DIO, clock div:1<CR><LF>
load:0x3fff0018,len:4<CR><LF>
load:0x3fff001c,len:1100<CR><LF>
load:0x40078000,len:10088<CR><LF>
load:0x40080400,len:6380<CR><LF>
entry 0x400806a4<CR><LF>
Encendiendo el GPRS...<CR><LF>
--->AT<CR><LF>
<SUB>.--->AT<CR><LF>
<SUB>.--->AT<CR><LF>
<SUB>.--->AT<CR><LF>
<SUB>.--->AT<CR><LF>
<SUB>.--->AT<CR><LF>
<SUB><---AT<CR>
<CR><LF>
OK<CR><LF>
--->AT<CR><LF>
<SUB><---AT<CR>
<CR><LF>
OK<CR><LF>
SIM encendido, AT OK!<CR><LF>
--->AT+GMR<CR>
<CR><LF>
<SUB><---AT+GMR<CR>
<CR><LF>
Revision:1529B01SIM7000G<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CPIN?<CR>
<CR><LF>
<SUB><---AT+CPIN?<CR>
<CR><LF>
+CPIN: READY<CR><LF>
<CR><LF>
OK<CR><LF>
--->ATE0<CR>
<CR><LF>
<SUB><---ATE0<CR>
<CR><LF>
OK<CR><LF>
--->AT+CREG=0<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CFUN=1<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CLTS=1<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CMGF=1<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CNMI=0,0,0,0,0<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT&W<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CCLK?<CR>
<CR><LF>
<SUB><---<CR><LF>
+CCLK: "19/04/16,22:03:11-20"<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CGATT?<CR>
<CR><LF>
<SUB><---<CR><LF>
+CGATT: 1<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CSQ<CR>
<CR><LF>
<SUB><---<CR><LF>
+CSQ: 19,99<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CNMP=13<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CREG?<CR><LF>
<---<CR><LF>
+CREG: 0,1<CR><LF>
--->AT+CPSI?<CR>
<CR><LF>
<SUB><---<CR><LF>
+CPSI: GSM,Online,732-101,0x05e2,20986,568 PCS 1900,-80,0,20-30<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+COPS?<CR>
<CR><LF>
<SUB><---<CR><LF>
+COPS: 0,0,"732 101 Claro",0<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CGNAPN<CR>
<CR><LF>
<SUB><---<CR><LF>
+CGNAPN: 0,""<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CFSINIT<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
ca_lentgh:1189<CR><LF>
--->AT+CFSWfile=3,"root_ca.crt",0,1189,5000<CR>
<CR><LF>
<SUB>--->-----BEGIN CERTIFICATE-----<LF>
MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF<LF>
ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6<LF>
b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL<LF>
MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv<LF>
b3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj<LF>
ca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM<LF>
9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw<LF>
IFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6<LF>
VOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L<LF>
93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm<LF>
jgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC<LF>
AYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA<LF>
A4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDI<LF>
U5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs<LF>
N+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv<LF>
o/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU<LF>
5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy<LF>
rqXRfboQnoZsG4q5WTP468SQvvG5<LF>
-----END CERTIFICATE-----<LF><CR>
<LF>
<SUB><---<CR><LF>
DOWNLOAD<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CFSgfis=3,"root_ca.crt"<CR><LF>
<SUB><---<CR><LF>
+CFSGFIS: 1189<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CFSTERM<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CFSINIT<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
client_cert_lentgh:1225<CR><LF>
--->AT+CFSWfile=3,"my_client.crt",0,1225,5000<CR>
<CR><LF>
<SUB>--->-----BEGIN CERTIFICATE-----<LF>
MIIDWjCCAkKgAwIBAgIVAMYkmai9aANoXxepMG4dZnoCk0tQMA0GCSqGSIb3DQEB<LF>
CwUAME0xSzBJBgNVBAsMQkFtYXpvbiBXZWIgU2VydmljZXMgTz1BbWF6b24uY29t<LF>
IEluYy4gTD1TZWF0dGxlIFNUPVdhc2hpbmd0b24gQz1VUzAeFw0xOTA0MDUxNDUz<LF>
MDNaFw00OTEyMzEyMzU5NTlaMB4xHDAaBgNVBAMME0FXUyBJb1QgQ2VydGlmaWNh<LF>
dGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPAFgr0aR4AT3IXNZ<LF>
24u9J3wAn+jK7DAQm2cnGS0Q3dqLt5+eaaD8OANeo5yQ6VtM39PlSTPL2RzMfZXB<LF>
zYOc60SclopgZ5qiT+R3rKoKjWCG8BVlSVJPpdY2IL12WCEEanoFNsOwU0MjSTZj<LF>
99i7F4G30UdwMWAqx7/WMAaQ18eifk4q/o+EvmM5r+P7nMpDPJYZPwpxUDZC5gCz<LF>
RjGIY1XYqucbYQWokDbuySJmnw6u2llAnzD7TcfVlpmYEn0AcWf0Etxw9u7JAtwZ<LF>
WN9mJarggzE/PGQaPofuT7o9aYJmPTfTs6GrBjA4txttK0eiMddtO1gd5pwNMUPN<LF>
ZuedAgMBAAGjYDBeMB8GA1UdIwQYMBaAFJJDi1F8nSYpjfFUQdaM/NDuWhawMB0G<LF>
A1UdDgQWBBRq9SiuU3jvOeLsEWL5Us1D13odlTAMBgNVHRMBAf8EAjAAMA4GA1Ud<LF>
DwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAQEAjrEmRLCc/dW6aMCzKx3sVui+<LF>
mbwzGf0nozlDig0Usu4p9OLxQhd0V8sJK3TGDGvobifNjegOjnx3jWs11AV3s7du<LF>
gJn86HsHDwapba8TdyjX4OvfGaZgl0yzNSKAp03TRXLA4lQLMwT952+c8pxm7EOG<LF>
MtUiudA9c0PAjcI0vNHefw9b3bpsWBP/i54eSYom4G4+0OQiWPyeDc17S89IjyXG<LF>
9tNi7wTvaXuEmjbHdBd0OnRzaWvdEYMac6CGMWe9MSkwN9ftDj2vrYVoPgQLflrM<LF>
8TLU13DCrZHHjiM6n7wrMAAdWWBuCyM0xlDHG6w1yZHRBrHQQQ2exP4dBeVyAA==<LF>
-----END CERTIFICATE-----<LF><CR>
<LF>
<SUB><---<CR><LF>
DOWNLOAD<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CFSgfis=3,"my_client.crt"<CR><LF>
<SUB><---<CR><LF>
+CFSGFIS: 1225<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CFSTERM<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CFSINIT<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
client_key_lentgh:1676<CR><LF>
--->AT+CFSWfile=3,"my_client.key",0,1676,5000<CR>
<CR><LF>
<SUB>--->-----BEGIN RSA PRIVATE KEY-----<LF>
MIIEowIBAAKCAQEAyDwBYK9GkeAE9yFzWduLvSd8AJ/oyuwwEJtnJxktEN3ai7ef<LF>
nmmg/DgDXqOckOlbTN/T5Ukzy9kczH2Vwc2DnOtEnJaKYGeaok/kd6yqCo1ghvAV<LF>
ZUlST6XWNiC9dlghBGp6BTbDsFNDI0k2Y/fYuxeBt9FHcDFgKse/1jAGkNfHon5O<LF>
Kv6PhL5jOa/j+5zKQzyWGT8KcVA2QuYAs0YxiGNV2KrnG2EFqJA27skiZp8OrtpZ<LF>
QJ8w+03H1ZaZmBJ9AHFn9BLccPbuyQLcGVjfZiWq4IMxPzxkGj6H7k+6PWmCZj03<LF>
07OhqwYwOLcbbStHojHXbTtYHeacDTFDzWbnnQIDAQABAoIBAQCfwgiTXKVghC1S<LF>
BBVlz15J2DP+x5dUOGgNCACgWFz1hRz2ttYa7Uotkn9VxhKIKDfZOQh2exZhgWOR<LF>
4G1ZCKEG1UuT6CSV0HO3JykxNskgzDYE048ulfafZ8BmxW6E+sG1JUMf39b4WyZJ<LF>
BAPqdPguJg4wXEC0SiDhYSg1O3Ixox25ouRHkOX6RTfmTVMOsOJh2exLv5favg9v<LF>
s5zkD7Y0lqpaL0toXzajglSR99DFKo3UNvy7RQKtanItpcZuz1MbDOk8d967s3DX<LF>
/K1aQIuApOhj8VIT1NVtGUzohNOq+9NXVfJL0SaNI9WAngQsSSUV3Eud7Dpg1Rkt<LF>
JRRRtAwBAoGBAPXU4IF8LDIPQlYlb2Xj3eaxTDlNiolxMUZ0pg6Ox8KNVO3luehb<LF>
adD42+t4GT0RxfwGkFxLiMFKIW8/b5n9FI7jHNDLOeU5bL7JgXu97rJBWiH3S3O2<LF>
/rMyj7e/WExTvJLknqKvETgaS/tE7yGzk7wsymYyiI++vZk83tqGmcUBAoGBANCE<LF>
TDrbdNxzthh9I8+QlzPjWIz7gkY1kcc5mKk13cn9De5y8M+iOF/ojiQR7GFyWA1X<LF>
cwkLRGYiHYm8Vd8AQRtTeUdYZAllvIEqIFGt++rvnThAmH9OEtiWGrfVEeU+3vmB<LF>
/rq8Fz2amvfTPZ1KHc1kJ3Dxuyr4I5daadrzKxadAoGALiNB74tqkAqlHJ3yBmF5<LF>
6C4mbCrNcXY5FUwXTmwlubHk2rFe7ukZNws92zezJO8NBXwF5AyZIg3TsJlrTK9f<LF>
CGI/qkA6IXdhnX0cPCktf28ch3tuQc16iA9ZQdc7rzeYEMmvrEDHLoxg7kvFxcF6<LF>
XLrbUcryLmhSFUyDVugkPAECgYBTANb3dvSF7OnHxcjDj2MhHJbbSCMLn7dv/tVu<LF>
RisLhNhO2yJRBNo8E27BnQDjqYizhuQb7YhEv7/SXE4yfv9ryUa1x9HKi90F7ab/<LF>
3KozUz7abZxG0OVfoiDwnLiK8QQBfmXQH5+AvlKB5Gzad+51HDE3HILNEAna7frF<LF>
VZcJYQKBgEsjEQVOS/prnhhJtNI3pQ6h4llImusgLGTSJylPi8iPGw0c4GN+6zCQ<LF>
3Lz48EW3L5JCsHqrfbbrnCx2m/LSHVDIbrBiRBKbMpegFMmpfrG3wuDZwmXmZ1vU<LF>
31HNVrnScwGhhM03gTokLEere8cQPepSJYFMVH8YwzzXkhtDIjFB<LF>
-----END RSA PRIVATE KEY-----<LF><CR>
<LF>
<SUB><---<CR><LF>
DOWNLOAD<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CFSgfis=3,"my_client.key"<CR><LF>
<SUB><---<CR><LF>
+CFSGFIS: 1676<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CFSTERM<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CNACT=1,"internet.comcel.com.co","comcel","comcel"<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
<CR><LF>
+APP PDP: ACTIVE<CR><LF>
--->AT+CNACT?<CR>
<CR><LF>
<SUB><---<CR><LF>
+CNACT: 1,"10.14.225.15"<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+SMCONF="URL",a5xpqsmvbu9sq-ats.iot.us-west-2.amazonaws.com,8883<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+SMCONF="CLIENTID","iotthing"<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+SMCONF="KEEPTIME",60<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+SMCONF="CLEANSS",1<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+SMCONF="QOS",1<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CSSLCFG?<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CSSLCFG=convert,2,root_ca.crt<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CSSLCFG=convert,1,my_client.crt,my_client.key<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+SMSSL=1,root_ca.crt,my_client.crt<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+SMSSL?<CR>
<CR><LF>
<SUB><---<CR><LF>
+SMSSL: 1,"root_ca.crt","my_client.crt"<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+CSSLCFG?<CR>
<CR><LF>
<SUB><---<CR><LF>
OK<CR><LF>
--->AT+CGATT?<CR>
<CR><LF>
<SUB><---<CR><LF>
+CGATT: 1<CR><LF>
<CR><LF>
OK<CR><LF>
--->AT+SMCONN<CR>
<CR><LF>
<SUB><---<CR><LF>
ERROR<CR><LF>
<CR><LF>
--->AT+SMUNSUB="$aws/things/iotthing/shadow/update"<CR>
<CR><LF>
<SUB><---<CR><LF>
ERROR<CR><LF>
<CR><LF>
--->AT+SMDISC<CR>
<CR><LF>
<SUB><---<CR><LF>
ERROR<CR><LF>
<CR><LF>

Docklight Log File (ASCII) - Stopped 4/16/2019 22:05:06.56

all is ok until SMCONN any suggeshelp?

brunokruse commented 5 years ago

I notice you have the 1529B01SIM7000G version. I am using SHCONN similar to your setup but with the certs loaded via QPST. This also fails for me on SHCONN using the 7000G version.

The AT Command logs from @botletics are very helpful, but seems like he has the 1351B05SIM7000E.

update: This issue seems to be closed here... but why: https://github.com/botletics/SIM7000-LTE-Shield/issues/58

I notice a TODO in the README for: "Test SSL on SIM7000 (with Amazon AWS and X.509 certificate)"

reydelleon commented 5 years ago

Hey @slipiduche, did you figure this out? Could you connect to AWS over SLL?

botletics commented 3 years ago

Hey guys, please see this AWS AT command log with the 1529B0XSIM7000G firmware.

botletics commented 1 year ago

Hey guys, figured out how to connect with SSL without verifying certs! Not sure if this would work with AWS though... Please do the following:

Set "SSL_FONA" to 1 in the .h file (remember to save the file before closing)
Download the latest .cpp file from GitHub
Open the unedited LTE_Demo example sketch and change "http://dweet.io" to "https://dweet.io" on line 1035 (under the '2' option)
Upload to the Arduino
Run the 'G' command to enable data connection, then run '2' to send data to dweet.io using SSL. And voila! 😊