(EthernetSSLClient)(SSL_ERROR)(available): Cannot operate on a closed SSL connection.

[simogaspa84]

Hi @khoih-prog ...

I am getting this issue...

Do you have an idea of the meaning and a possible way to fix it?

What should I check?

Thanks a lot

[khoih-prog]

HI @simogaspa84

Please follow the guideline when posting any issue, such as MRE, etc. so that anybody can duplicate it. OTW, your post will be ignored and deleted.

First do some basic research, and you'll know what it means. Be independent first then you can learn a lot from the experience. Always start from the known working examples or previous codes.

EthernetWebServer_SSL/src/SSLClient/SSLClient_Impl.h

Lines 423 to 433 in fc79ef0

	// check if the ssl engine is still open
	if (!m_is_connected || br_ssl_engine_current_state(&m_sslctx.eng) == BR_SSL_CLOSED)
	{
	m_error("Cannot operate on a closed SSL connection.", func_name);
	int error = br_ssl_engine_last_error(&m_sslctx.eng);
	if (error != BR_ERR_OK)
	m_print_br_error(error, SSL_ERROR);
	return false;
	}

Also ask the general questions on general Forums or OPEnSLab-OSU if SSL- related, unless you're sure that it's a bug of this library.

[simogaspa84]

Sorry @khoih-prog .. i have tried to search for similar issues but i found only things related to the certificate.
Sorry again for bothering you
Thanks

[khoih-prog]

Check Cannot operate on a closed SSL connection #68

[simogaspa84]

i know @khoih-prog and this is why I started bothering you for the trusted anchor arrays..
I tried to create by myself by calling the python script and it is the same in both the boards..
The two endpoints are different (the working one in the us and the wrong one in europe) ... thingname are different too but
i don't see big issues here..
Moreover the test with wifi instead ethernet is working also with the new device...
The device certificate and the private key are generated from aws and I just copy and paste..
I really don't know it seems to be sometihng related about aws..
Thank thanks a lot again for your time
Sorry again @khoih-prog

[khoih-prog]

The two endpoints are different (the working one in the us and the wrong one in europe)

Your better and remaining choice is to ask AWS people why. I'm afraid nobody else can help you.

[simogaspa84]

yes @khoih-prog I will contact aws and then I will let you know if you want ... Thanks

[khoih-prog]

Sure we'd appreciate if you inform us the real issue and solution, and learn something from the experience.

[simogaspa84]

But now we can share with the community that if they will see closed ssl connection to check if they have some filters in the topics inserted in the aws console.

[khoih-prog]

Try to increase m_iobuf from

EthernetWebServer_SSL/src/SSLClient/SSLClient.h

Lines 519 to 521 in fc79ef0

	// KH test increase
	unsigned char m_iobuf[2048];
	//unsigned char m_iobuf[4096];

to 4096, 8192 or larger to see if OK

    // KH test increase
    //unsigned char m_iobuf[2048];
    unsigned char m_iobuf[4096];

If not, you have to put more debug and know what's wrong.

[khoih-prog]

Hi @simogaspa84

Have a look at Certificate bundles for AWS Regions section in Using SSL/TLS, and try to use the Certs for the interested European Region, and see if OK

Got news from AWS yet?

[simogaspa84]

Hi @khoih-prog thanks again for your support... Yes I had the contact from aws that told me to check if there was simply some filters in the topic coming from the iot board.
I did personally the account and the setting for the device in the us region.
The device in the europe region was created and managed from a consultant that basically forgot to remove some filters in the topic,
Basically it was him rejecting the connection because he didn't like the name of the topic..
It was very trivial and the end.
But now we can share with the community that if they will see closed ssl connection to check if they have some filters in the topics inserted in the aws console.
Sorry sorry again for bothering you. I really appreciate your help and I hope to work again with you because you have a smart mind @khoih-prog