M66/M95 SSL not veryfing CA

Hi everyone,

I am having two different problems with the M66/M95 modems. Currently, I am using M66/M95/BG95 modems over a GSM connection.

M66 version is M66FAR01A04, M95 version is M95FAR02A08

  1. TLS connection is not working.

To test the SSL/TLS support in these modems, I am trying to connect them to httpbin.org:443. The connection is correctly established while using BG95 modem, but not with M66/M95.

If I use seclevel to 0, it works because it does not check the CA, but when I set it to 1 it does not work.

I have tried to set different ssl versions and ciphers without success. CA cert seems to be correct because BG95 and MbedTLS are working.

Here is the log:

[INFO][CELL]: AT TX (11): AT+QSECDEL=
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (12): cacert_0.pem
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (13): AT+QSECWRITE=
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (12): cacert_0.pem
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (4): 1545
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (2): <cr><ln>
[INFO][CELL]: AT RX (9): CONNECT<cr><ln>
[INFO][CELL]: AT TX (60): -----BEGIN CERTIFICATE-----<ln>MIIESTCCAzGgAwIBAgITBn+UV4WH6Kx3
...
[INFO][CELL]: AT RX (1): <cr>
[INFO][CELL]: AT RX (30): <ln>+QSECWRITE: 1545,5f05<cr><ln><cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (11): AT+QSSLCFG=
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (6): cacert
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (12): cacert_0.pem
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (11): AT+CGPADDR=
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (31): <cr><ln>+CGPADDR: 1,"10.134.108.216"<cr>
[INFO][CELL]: AT RX (7): <ln><cr><ln>OK<cr><ln>

[INFO][CELL]: AT TX (22): AT+QSSLCFG="seclevel",
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (24): AT+QSSLCFG="sslversion",
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 4
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (25): AT+QSSLCFG="ciphersuite",
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (8): "0XFFFF"
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (22): AT+QSSLCFG="ctxindex",
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): <cr>
[WARN][CELL]: AT RX (32): +QSSLCFG: 0,4,1,"0X0005,0X0004,0
[INFO][CELL]: AT RX (32): X0035,0X002F,0X003D,0X000A","cac
[INFO][CELL]: AT RX (24): ert_0.pem","",""<cr><ln><cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (12): AT+QSSLOPEN=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (14): 54.147.165.197
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 443
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (2): 90
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT RX (19): <cr><ln>+QSSLOPEN: 0,-1<cr><ln>
[INFO][CELL]: AT TX (13): AT+QSSLCLOSE=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (9): <cr><ln>ERROR<cr><ln>
[INFO][CELL]: AT TX (12): AT+QSSLOPEN=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (14): 54.147.165.197
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 443
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (2): 90
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT RX (19): <cr><ln>+QSSLOPEN: 0,-1<cr><ln>

Protocol used: QUECTEL_GSM_SSL_Application_Note_V3.3.pdf.

  1. sslversion is not being negotiated with seclevel as 0.

With seclevel as 0 I have established a connection to an internal TLS socket. The problem is that, even if I force a specific TLS version with sslversion, it is always negotiating SSLv3. As in the other bug, with BG95 this is not happening.


If you need more information, please let me know.
Thanks in advance.

Hi,
1.For the first question,I think you may need to add a certificate by the following way:
AT+QSECWRITE=: “RAM:cacert_0.pem”,1545
“RAM:” is missing from your command:
image
2.For the second question,Could you tell me how you judge it is always negotiating the SSLv3 protocol?

Hi,

  1. I tested it also with RAM: prefix (if I don’t remember bad) but I can retry again and send you the log.
  2. The log of our TLS end is saying that SSLv3 is being used:

With mbedTLS:

listening on AF=2 x.x.x.x:y",
accepting connection from AF=2 x.x.x.x:y on AF=2 x.x.x.x:y",
no peer certificate and no check",
SSL proto version used: TLSv1.2",
SSL connection using ECDHE-RSA-AES256-GCM-SHA384

With QUECTEL TLS:

listening on AF=2 x.x.x.x:y",
accepting connection from AF=2 x.x.x.x:y on AF=2 x.x.x.x:y",
no peer certificate and no check",
SSL proto version used: SSLv3",
SSL connection using AES256-SHA",

The log using RAM: prefix. I sent you the complete log, including custom DNS resolution, maybe it can give you information about the error.

[INFO][CELL]: AT TX (11): AT+QSECDEL=
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (16): RAM:cacert_0.pem
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (9): <cr><ln>ERROR<cr><ln>
[DBG ][CELL]: AT error -3012
[INFO][CELL]: AT TX (13): AT+QSECWRITE=
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (16): RAM:cacert_0.pem
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (4): 1545
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (11): <cr><ln>CONNECT<cr><ln>
[INFO][CELL]: AT TX (60): -----BEGIN CERTIFICATE-----<ln>MIIESTCCAzGgAwIBAgITBn+UV4WH6Kx3
...
[INFO][CELL]: AT RX (1): <cr>
[INFO][CELL]: AT RX (30): <ln>+QSECWRITE: 1545,5f05<cr><ln><cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (11): AT+QSSLCFG=
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (6): cacert
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (16): RAM:cacert_0.pem
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (11): AT+CGPADDR=
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (11): <cr><ln>+CGPADDR:
[INFO][CELL]: AT RX (26):  1,"10.49.216.233"<cr><ln><cr><ln>OK<cr><ln>

# UDP DNS resolution using custom stack
[INFO][CELL]: AT TX (10): AT+QIOPEN=
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (3): UDP
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (7): 8.8.8.8
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (2): 53
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT RX (11): <cr><ln>1, CONNEC
[INFO][CELL]: AT RX (6): T OK<cr><ln>
[INFO][CELL]: AT TX (10): AT+QISEND=
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (2): 29
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (4): <cr><ln>> 
[INFO][CELL]: AT TX (29): <0>
[INFO][CELL]: AT RX (2): <cr><ln>
[INFO][CELL]: AT RX (9): SEND OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT RX (17): <cr><ln>+QIRDI: 0,1,1<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (17): <cr><ln>+QIRD: 8.8.8.8:
[INFO][CELL]: AT RX (32): 53,UDP,157<cr><ln><0>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (5): <cr><ln>OK<cr>
[INFO][CELL]: AT RX (1): <ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIRD=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 256
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
# Socket 1 recv 157 bytes from 8.8.8.8 port 53
[INFO][CELL]: AT TX (11): AT+QICLOSE=
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (12): <cr><ln>1, CLOSE O
[INFO][CELL]: AT RX (3): K<cr><ln>


# Resolution OK, starting TLS
[INFO][CELL]: AT TX (22): AT+QSSLCFG="seclevel",
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (24): AT+QSSLCFG="sslversion",
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 4
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (25): AT+QSSLCFG="ciphersuite",
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (8): "0XFFFF"
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (12): AT+QSSLOPEN=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (12): 54.91.118.50
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 443
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (2): 90
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (13): AT+QSSLCLOSE=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (9): <cr><ln>ERROR<cr><ln>
[INFO][CELL]: AT TX (12): AT+QSSLOPEN=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (12): 54.91.118.50
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 443
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (2): 90
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (13): AT+QSSLCLOSE=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (9): <cr><ln>ERROR<cr><ln>

Hi David:
You can try again by referring to the examples in the documentation:


If it still doesn’t work, you may require using the Catcher tool to grab the log for our R&D to analyze.You can contact your local technical support directly to make a ticket about this issue to our R&D.

Hi,
I am not registering the TCP/IP as the guide says, but it is working in TCP/IP mode as well (not in TLS), what actually does QIREGAPP command?

Also, I am not using QIACT to ACTIVATE GPRS context, I am using CGACT, is there any difference?

About the tools, do you have any Linux-based tool?

Hi David:
There is no Linux-based tool.This tool is only available on windows system.
The GPRS network is usually activated automatically when doing data services,so it’s okay not to execute this AT command(AT+QIACT).

Attaching you the complete output with your requirements:

[INFO][CELL]: AT TX (11): AT+QIFGCNT=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (9): AT+QIMUX?
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (19): <cr><ln>+QIMUX: 0<cr><ln><cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (10): AT+QIMUX=1
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (11): AT+QIREGAPP
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (8): AT+QIACT
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (3): <cr><ln>O
[INFO][CELL]: AT RX (3): K<cr><ln>
[INFO][CELL]: AT TX (10): AT+QINDI=1
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (9): AT+CGACT?
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (31): <cr><ln>+CGACT: 1,0<cr><ln><cr><ln>+CGACT: 2,0<cr><ln><cr>
[INFO][CELL]: AT RX (20): <ln>+CGACT: 3,0<cr><ln><cr><ln>OK<cr><ln>
[INFO][CELL]: Activate PDP context 1
[INFO][CELL]: AT TX (11): AT+CGACT=1,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (12): <cr><ln>+CGEV: ME 
[INFO][CELL]: AT RX (22): PDN ACT 1 "",""<cr><ln><cr><ln>OK<cr>
[INFO][CELL]: AT RX (1): <ln>
[INFO][CELL]: AT TX (13): AT+CGCONTRDP=
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (9): <cr><ln>ERROR<cr><ln>
[DBG ][CELL]: AT error -3012
[INFO][CELL]: AT TX (10): AT+QICSGP=
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (2): em
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (11): AT+CGPADDR=
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (21): <cr><ln>+CGPADDR: 1,"10.199
[INFO][CELL]: AT RX (15): .0.132"<cr><ln><cr><ln>OK<cr><ln>
[INFO][CELL]: Cellular local IP: 10.199.0.132


Connection Established.
[INFO][CELL]: Socket 0 open
[ERR ][CELL]: Socket not found 0
[INFO][CELL]: AT TX (11): AT+QSECDEL=
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (16): RAM:cacert_0.pem
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (9): <cr><ln>ERROR<cr><ln>
[DBG ][CELL]: AT error -3012
[INFO][CELL]: AT TX (13): AT+QSECWRITE=
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (16): RAM:cacert_0.pem
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (4): 1545
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (9): <cr><ln>CONNECT
[INFO][CELL]: AT RX (2): <cr><ln>
[INFO][CELL]: AT TX (60): -----BEGIN CERTIFICATE-----<ln>MIIESTCCAzGgAwIBAgITBn+UV4WH6Kx3
...
[INFO][CELL]: AT RX (10): <cr><ln>+QSECWRI
[INFO][CELL]: AT RX (21): TE: 1545,5f05<cr><ln><cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (11): AT+QSSLCFG=
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (6): cacert
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (16): RAM:cacert_0.pem
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (27): AT+QSSLCFG="ignorertctime",
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (22): AT+QSSLCFG="seclevel",
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 1
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (24): AT+QSSLCFG="sslversion",
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 4
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT TX (25): AT+QSSLCFG="ciphersuite",
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (8): "0XFFFF"
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[DBG ][CELL]: QUECTEL_M66_CellularStack:create_socket_impl:370:[0,1]
[INFO][CELL]: AT TX (12): AT+QSSLOPEN=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (10): 52.2.51.61
[INFO][CELL]: AT TX (1): "
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (3): 443
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): ,
[INFO][CELL]: AT TX (2): 90
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (6): <cr><ln>OK<cr><ln>
[INFO][CELL]: AT RX (9): <cr><ln>+QSSLOP
[INFO][CELL]: AT RX (10): EN: 0,-1<cr><ln>
[INFO][CELL]: AT TX (13): AT+QSSLCLOSE=
[INFO][CELL]: AT TX (1): 0
[INFO][CELL]: AT TX (1): <cr>
[INFO][CELL]: AT RX (9): <cr><ln>ERROR<cr><ln>

Hi David,
It seems that your AT execution steps is OK.
For more analysis , we need to collect log by Catcher tool in windows system, if need to more assistance , pls reach to support@quectel.com

I will contact support, thanks for all.

You’re welcome.Wish you all the best! :slightly_smiling_face:

I have a problem similar to yours.
Please guide me if you can.

I contacted support but they only recommended me to update the modules. I haven’t done it yet, so I can’t give you a more detailed feedback. To avoid this error, I decided to change my TLS stack.

1 Like