Arduino: ESP8266 WiFiClientSecure client.connect(ip, 443) not working !

Created on 19 Jun 2018 · 24Comments · Source: esp8266/Arduino

Hardware:

Board: ESP8266 NodeMCU V2
Core Installation/update date: 2018/03/21
IDE name: Arduino IDE
Flash Frequency: 80Mhz
Upload Speed: 115200

Description:

I installed ubuntu 16.04 apache web server with self-signed certificate in LAN environment and use browser to access https://192.168.1.210/ web page always successfully.

I even use dos command line to telnet 192.168.1.210 443 to check port listening. It's working perfectly.
C:> telnet 192.168.1.210 443

But when I use WiFiClientSecure client.connect(ip, 443). It always get fail return. Is this a bug for ipv4 connect in connect function ?

Here is the exact step I followed to build this virtual machine (192.168.1.210) w/self-signed certificate.
https://www.digitalocean.com/community/tutorials/how-to-create-a-self-signed-ssl-certificate-for-apache-in-ubuntu-16-04

Sketch:

//Change the code below by your sketch
#include <Arduino.h>
#include <ESP8266WiFi.h>
#include <WiFiClientSecure.h>

const char * host = "192.168.1.210";
const int port = 443;

static WiFiClientSecure g_client;
String wifi = "ssid";
String pass = "pass";

unsigned char root_ca[] = {
  0x30, 0x82, 0x04, 0x02, 0x30, 0x82, 0x02, 0xea, 0xa0, 0x03, 0x02, 0x01,
  0x02, 0x02, 0x09, 0x00, 0xc5, 0xb6, 0xe0, 0xe5, 0x41, 0x5f, 0x08, 0xa6,
  0x30, 0x0d, 0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01,
  0x0b, 0x05, 0x00, 0x30, 0x81, 0x94, 0x31, 0x0b, 0x30, 0x09, 0x06, 0x03,
  0x55, 0x04, 0x06, 0x13, 0x02, 0x54, 0x57, 0x31, 0x0f, 0x30, 0x0d, 0x06,
  0x03, 0x55, 0x04, 0x08, 0x0c, 0x06, 0x54, 0x61, 0x69, 0x77, 0x61, 0x6e,
  0x31, 0x0f, 0x30, 0x0d, 0x06, 0x03, 0x55, 0x04, 0x07, 0x0c, 0x06, 0x54,
  0x61, 0x69, 0x70, 0x65, 0x69, 0x31, 0x15, 0x30, 0x13, 0x06, 0x03, 0x55,
  0x04, 0x0a, 0x0c, 0x0c, 0x42, 0x61, 0x79, 0x65, 0x73, 0x74, 0x65, 0x6b,
  0x20, 0x43, 0x4f, 0x2e, 0x31, 0x0c, 0x30, 0x0a, 0x06, 0x03, 0x55, 0x04,
  0x0b, 0x0c, 0x03, 0x4d, 0x49, 0x53, 0x31, 0x16, 0x30, 0x14, 0x06, 0x03,
  0x55, 0x04, 0x03, 0x0c, 0x0d, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36, 0x38,
  0x2e, 0x31, 0x2e, 0x32, 0x31, 0x30, 0x31, 0x26, 0x30, 0x24, 0x06, 0x09,
  0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x09, 0x01, 0x16, 0x17, 0x74,
  0x6f, 0x6d, 0x6d, 0x79, 0x2e, 0x79, 0x61, 0x6e, 0x67, 0x40, 0x62, 0x61,
  0x79, 0x65, 0x73, 0x74, 0x65, 0x6b, 0x2e, 0x63, 0x6f, 0x6d, 0x30, 0x20,
  0x17, 0x0d, 0x31, 0x38, 0x30, 0x36, 0x31, 0x31, 0x31, 0x30, 0x33, 0x30,
  0x33, 0x37, 0x5a, 0x18, 0x0f, 0x32, 0x31, 0x31, 0x38, 0x30, 0x35, 0x31,
  0x38, 0x31, 0x30, 0x33, 0x30, 0x33, 0x37, 0x5a, 0x30, 0x81, 0x94, 0x31,
  0x0b, 0x30, 0x09, 0x06, 0x03, 0x55, 0x04, 0x06, 0x13, 0x02, 0x54, 0x57,
  0x31, 0x0f, 0x30, 0x0d, 0x06, 0x03, 0x55, 0x04, 0x08, 0x0c, 0x06, 0x54,
  0x61, 0x69, 0x77, 0x61, 0x6e, 0x31, 0x0f, 0x30, 0x0d, 0x06, 0x03, 0x55,
  0x04, 0x07, 0x0c, 0x06, 0x54, 0x61, 0x69, 0x70, 0x65, 0x69, 0x31, 0x15,
  0x30, 0x13, 0x06, 0x03, 0x55, 0x04, 0x0a, 0x0c, 0x0c, 0x42, 0x61, 0x79,
  0x65, 0x73, 0x74, 0x65, 0x6b, 0x20, 0x43, 0x4f, 0x2e, 0x31, 0x0c, 0x30,
  0x0a, 0x06, 0x03, 0x55, 0x04, 0x0b, 0x0c, 0x03, 0x4d, 0x49, 0x53, 0x31,
  0x16, 0x30, 0x14, 0x06, 0x03, 0x55, 0x04, 0x03, 0x0c, 0x0d, 0x31, 0x39,
  0x32, 0x2e, 0x31, 0x36, 0x38, 0x2e, 0x31, 0x2e, 0x32, 0x31, 0x30, 0x31,
  0x26, 0x30, 0x24, 0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01,
  0x09, 0x01, 0x16, 0x17, 0x74, 0x6f, 0x6d, 0x6d, 0x79, 0x2e, 0x79, 0x61,
  0x6e, 0x67, 0x40, 0x62, 0x61, 0x79, 0x65, 0x73, 0x74, 0x65, 0x6b, 0x2e,
  0x63, 0x6f, 0x6d, 0x30, 0x82, 0x01, 0x22, 0x30, 0x0d, 0x06, 0x09, 0x2a,
  0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x01, 0x05, 0x00, 0x03, 0x82,
  0x01, 0x0f, 0x00, 0x30, 0x82, 0x01, 0x0a, 0x02, 0x82, 0x01, 0x01, 0x00,
  0xbb, 0xff, 0x54, 0xfa, 0xd9, 0x2b, 0xab, 0x39, 0xf8, 0xb9, 0x5c, 0x22,
  0xe0, 0x07, 0xea, 0x06, 0x52, 0xe4, 0x09, 0x1a, 0x06, 0xd3, 0x31, 0xca,
  0x3c, 0xa3, 0x91, 0x3f, 0x2c, 0x8a, 0xea, 0x9d, 0x60, 0x49, 0x50, 0x09,
  0xf4, 0x93, 0xe3, 0x84, 0x54, 0x03, 0xe0, 0x26, 0x84, 0xc6, 0xa9, 0xbf,
  0x19, 0x32, 0x44, 0xd1, 0xfe, 0x83, 0x50, 0xa5, 0x85, 0x6c, 0x94, 0xc2,
  0xc0, 0xe4, 0xf8, 0xbe, 0x1e, 0xa5, 0x48, 0xfa, 0xae, 0x00, 0xe2, 0x43,
  0x7f, 0x8d, 0x83, 0x4b, 0xf7, 0x40, 0x03, 0xb1, 0xe6, 0x36, 0x16, 0xb8,
  0x32, 0xbe, 0x81, 0x17, 0x22, 0x99, 0x8d, 0xd4, 0xfa, 0xf8, 0x72, 0x9c,
  0x1b, 0xd4, 0x71, 0x30, 0xcf, 0xc5, 0x61, 0xf0, 0x8c, 0x94, 0x49, 0x32,
  0xaa, 0x28, 0x4b, 0x55, 0x42, 0x80, 0x2b, 0x25, 0x87, 0xa6, 0xab, 0x82,
  0x08, 0x3f, 0xfc, 0x27, 0xff, 0xae, 0xbd, 0x4e, 0xf6, 0x07, 0x65, 0x5d,
  0x90, 0xb5, 0xb4, 0x1f, 0x05, 0x9d, 0x83, 0xd0, 0x63, 0x1f, 0x42, 0x67,
  0x35, 0xbc, 0xf2, 0x52, 0x0a, 0x3d, 0x6a, 0x9f, 0x3f, 0xe3, 0x2a, 0x92,
  0xfa, 0xa6, 0x43, 0xeb, 0x15, 0x73, 0xb0, 0x06, 0xc4, 0xe9, 0x06, 0x40,
  0x6c, 0x8d, 0xc4, 0xb1, 0x54, 0xb6, 0x73, 0x08, 0xf0, 0x33, 0xfc, 0xd4,
  0x2e, 0x74, 0xc3, 0x0b, 0x5c, 0x7f, 0x90, 0x83, 0xf2, 0x12, 0x19, 0xf5,
  0xe3, 0x83, 0xee, 0x3e, 0x16, 0xea, 0x18, 0xb2, 0xfe, 0xb0, 0x89, 0xfe,
  0xd3, 0x3a, 0x1f, 0xc6, 0x08, 0x71, 0x6f, 0x8a, 0x23, 0x44, 0x1c, 0xfe,
  0x45, 0x47, 0x3a, 0x4b, 0xe7, 0x68, 0x4d, 0x04, 0x85, 0xe2, 0x26, 0xea,
  0x49, 0x8b, 0x52, 0xfa, 0x0d, 0x20, 0x94, 0x23, 0x5e, 0x19, 0x5d, 0x66,
  0xa8, 0x24, 0x72, 0x35, 0x91, 0x76, 0x0e, 0xea, 0xe7, 0x6a, 0x7f, 0x5a,
  0x07, 0x76, 0x3b, 0x31, 0x02, 0x03, 0x01, 0x00, 0x01, 0xa3, 0x53, 0x30,
  0x51, 0x30, 0x1d, 0x06, 0x03, 0x55, 0x1d, 0x0e, 0x04, 0x16, 0x04, 0x14,
  0x0e, 0x24, 0x5e, 0xd3, 0xf8, 0xda, 0x44, 0x9a, 0xdc, 0x0a, 0xf2, 0x09,
  0x53, 0xa1, 0xdf, 0xae, 0x0b, 0x92, 0x17, 0xff, 0x30, 0x1f, 0x06, 0x03,
  0x55, 0x1d, 0x23, 0x04, 0x18, 0x30, 0x16, 0x80, 0x14, 0x0e, 0x24, 0x5e,
  0xd3, 0xf8, 0xda, 0x44, 0x9a, 0xdc, 0x0a, 0xf2, 0x09, 0x53, 0xa1, 0xdf,
  0xae, 0x0b, 0x92, 0x17, 0xff, 0x30, 0x0f, 0x06, 0x03, 0x55, 0x1d, 0x13,
  0x01, 0x01, 0xff, 0x04, 0x05, 0x30, 0x03, 0x01, 0x01, 0xff, 0x30, 0x0d,
  0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0b, 0x05,
  0x00, 0x03, 0x82, 0x01, 0x01, 0x00, 0x54, 0x0d, 0xbf, 0xf1, 0x81, 0x9b,
  0x36, 0x68, 0x95, 0x2d, 0xf9, 0x7f, 0xb8, 0x01, 0xd1, 0xd4, 0x96, 0xb7,
  0x4d, 0x09, 0x4f, 0xcd, 0xfe, 0x8a, 0x3f, 0x62, 0xa1, 0xe1, 0x9e, 0x2f,
  0x28, 0x83, 0xee, 0xfb, 0x72, 0x90, 0x7b, 0xb7, 0xa2, 0xc6, 0x99, 0xd5,
  0x4d, 0x40, 0xa7, 0xa1, 0xc1, 0x1c, 0x17, 0x92, 0xe2, 0x98, 0xc5, 0x72,
  0x28, 0x7d, 0x7a, 0x7b, 0x05, 0x43, 0x27, 0x2e, 0x19, 0x74, 0x64, 0x3b,
  0x67, 0xe2, 0x74, 0xeb, 0xac, 0xcd, 0xc4, 0x0c, 0xa2, 0x9a, 0xb6, 0xb0,
  0x00, 0x69, 0xd9, 0xca, 0xc2, 0x1f, 0xe0, 0xe3, 0x88, 0x2b, 0x13, 0xa8,
  0x15, 0xba, 0xd5, 0xe2, 0x05, 0x6c, 0x9c, 0x20, 0xb5, 0xec, 0xdb, 0xca,
  0xe2, 0x57, 0x40, 0xed, 0xbe, 0x3c, 0x27, 0xe1, 0x53, 0x8c, 0x91, 0x2d,
  0x3f, 0xe8, 0x9b, 0x4c, 0x41, 0x84, 0x3e, 0x25, 0xae, 0x10, 0xe2, 0x1d,
  0xf4, 0x42, 0x74, 0xa7, 0x71, 0x3c, 0xa1, 0x54, 0x9a, 0x18, 0xb0, 0xae,
  0xf1, 0xcc, 0x96, 0x1d, 0x38, 0x5a, 0xce, 0x74, 0x55, 0xa2, 0x41, 0x51,
  0xcf, 0x72, 0x38, 0x72, 0xac, 0x49, 0x38, 0x5c, 0xb1, 0xdc, 0x48, 0x16,
  0xd4, 0x69, 0x41, 0xb0, 0xa9, 0x40, 0x6b, 0x27, 0x0d, 0xbf, 0x74, 0xbb,
  0x64, 0xb0, 0xf6, 0xd1, 0x9c, 0xd5, 0x7f, 0x46, 0x47, 0x78, 0x91, 0xd8,
  0xf1, 0xad, 0x7b, 0x1a, 0xf7, 0xfb, 0x03, 0xcf, 0x2e, 0xdc, 0xc3, 0x83,
  0xac, 0x76, 0x58, 0x00, 0x7f, 0xa4, 0xd8, 0x55, 0x43, 0x1c, 0xce, 0x20,
  0x0f, 0x0b, 0xb0, 0x39, 0x81, 0x35, 0xdf, 0x63, 0x58, 0x84, 0xd5, 0x73,
  0xbf, 0x44, 0x5c, 0xdf, 0x5e, 0xd5, 0x3c, 0x8c, 0x43, 0x5f, 0x53, 0x45,
  0x4d, 0x9d, 0xc2, 0x10, 0xf7, 0xae, 0xbb, 0xde, 0x03, 0x9f, 0x99, 0x36,
  0xd1, 0x1d, 0x3d, 0x78, 0xe9, 0xf9, 0x53, 0xe1, 0xaa, 0x53
};


void setup()
{
  Serial.begin(115200);

  WiFi.begin(wifi.c_str(), pass.c_str());

  while (WiFi.status() != WL_CONNECTED)
  {
    delay(1000);
    Serial.print(".");
  }

  Serial.println("Set CA Cert");
  if (!g_client.setCACert(root_ca, sizeof(root_ca)))
  {
    Serial.println("Failed to load CA certificate");
    while(true) yield();
  }
  Serial.println("CA Cert set");

  Serial.print("Connecting to ");
  Serial.println(host);
  if(!g_client.connect(host, port))  **//<== always failed on this line and return. not even go to varify().**
  {
    Serial.println("Connection failed");
    return;
  }
//============================
  if(g_client.verifyCertChain(host))
  {
    Serial.println("Server certificate verified");
  }
  else
  {
    Serial.println("ERROR: certificate verification failed!");
    return;
  }

  g_client.stop();

}

void loop() {}


### Debug Messages:

```
SDK:2.2.1(cfd48f3)/Core:2.4.1/lwIP:2.0.3(STABLE-2_0_3_RELEASE/glue:arduino-2.4.1)
scandone
scandone
state: 0 -> 2 (b0)
state: 2 -> 3 (0)
state: 3 -> 5 (10)
add 0
aid 2
cnt

connected with ssid, channel 1
dhcp client start...
......ip:192.168.1.132,mask:255.255.255.0,gw:192.168.1.1
.Set CA Cert
=== CERTIFICATE ISSUED TO ===
Common Name (CN): 192.168.1.210
Organization (O): BestMe CO.
Organizational Unit (OU):MIS
Location (L): Tokyo
Country (C): JPN
State (ST): Japan
Basic Constraints: critical, CA:TRUE, pathlen:10000
=== CERTIFICATE ISSUED BY ===
Common Name (CN): 192.168.1.210
Organization (O): BestMe CO.
Organizational Unit (OU):MIS
Location (L): Tokyo
Country (C): JPN
State (ST): Japan
Not Before: Mon Jun 11 10:30:37 2018
Not After: Sun Apr 11 04:02:21 1982
RSA bitsize: 2048
Sig Type: SHA256
CA Cert set
Connecting to 192.168.1.210
State: sending Client Hello (1)
Alert: handshake failure <== why failed, but browser always sucess ?
Error: SSL error 40
Alert: unexpected message <== why strange message here?
Error: SSL error 40
Alert: close notify
Connection failed
pm open,type:2 0

from debug message I think CA was set and loaded successfully. That's why CA was printed on the debug log. Check debug log and you will see CA was loaded w/succeed.
=== CERTIFICATE ISSUED TO === and
=== CERTIFICATE ISSUED BY ===
when it runs to next line if(!g_client.connect(host, port)), it always get fail and return. I use wireshark to listen to network packets, and it always show SSL error 40 with unexpected message sent from client. There must be some bugs inside SSL handshake sequence. I don't think SSL provider will do thing wrong. I installed it from public domain and it runs for a very long time wo/errors. Server receive some message unexpected that was send by client which I use WiFiClientSecure client.connect(). That means SSL handshake meet some unexpected error sequence.
Simple test will know this bug. Browser (Chrome, Firefox, IE) all connect https://192.168.1.210/ successfully and show apache2 index.html page entirely without any error, but use WiFiClientSecure client.connect() will get unexpected message from client on handshake sequence. Those messages show on both sides, one from Arduino IDE w/debug option opened (pasted in previous post above) and also shows on wireshark network message w/Code Error 40 SSL error.

wireshark link: https://www.wireshark.org/download.html

waiting for feedback

Source

iamneo2416

Most helpful comment

Just include in your code:
client.setInsecure();

brnyza on 13 May 2019

👍17 ❤10 😕4

All 24 comments

@iamneo2416 the fields required by the issue template are incomplete, e.g.: what core is this? What platform? Please edit your post and add the missing fields (start a new issue and look at the presented template). Alternatively, open a new issue with the all required fields, and close this one.

I know very little about the functioning of our secure comms, but I can say the following:

Error 40 means handshake failure, which is the alert you received just before that. That hints at something wrong with the cert.
The last core release uses axtls as the ssl lib. The axtls lib has a long list of issues, and is currently unmaintained by the original authors. Therefore, bearssl has been integrated as a replacement. the api is almost identical, if not fully identical, but it is still experimental.
Given that axtls is unmaintained but the authors, it till be marked deprecated, and eventually retired. That means that bugs traced to it won't be fixed.
I strongly suggest studying the bearssl examples. You need to install latest git for that. The only difference between the axtls wificlientsecure/wifiserversecure and the bearssl replacements is the residing namespace, e.g.: axtls::WiFiClientSecure vs. bearssl::WiFiClientSecure. The default is currently still axtls.
The examples should provide you with correct usage, like how to set certificate or whatever. Assuming that your usage in the above sketch is correct (be thorough in checking that), then I suggest changing to the bearssl counterpart. Just replace in your code WiFiClientSecure g_client with bearssl::WiFiClientSecure g_client.

Please report back the results of the above.

devyte on 19 Jun 2018

mee to ... i can't connect to internet..
i try connect to www.google.com and doesn't response..

adamrabbani on 25 Jun 2018

In the debug output above the "not after" date is obviously not correct:
Not After: Sun Apr 11 04:02:21 1982
I have had this same issue and posted but have not recieved a response. The error I am getting shows a certificate out of date. Has anyone noticed this? is the a bug in the date decoder. I noticed it when the date was after 2050, which requires the generalized time format instead of the UTCtime format.
I can not find the posting I did so I can not reference it from here. If someone will tell me how to find the post I will gladly add to my comment...
Thanks, Rx

Edit: found my previous post. It is at:
https://www.esp8266.com/viewtopic.php?f=32&t=18275&p=77529#p77529

UPDATE: My problem was related to the axTls library so I apologize for using a reference not related to the bearssl.

RexLBrownSr on 4 Aug 2018

Closing due to lack of feedback.

devyte on 14 Nov 2018

Hey @devyte I am facing the same problem discussed above.

My code-
// https://script.google.com/macros/s/AKfycbxN_UevaBWDKoVZqy6Z-W9_wv7jBtV8b-Sw95fvrz_CpUSc-zMb/exec?temperature=10&humidity=9
//-----------------------------------------------
// Author: Trieu Le
// Email: [email protected]
// Publish date: 29-Oct-2017
// Description: This code for demonstration send data from ESP8266 into Google Spreadsheet
// Modifyed by Moz for Youtube changel logMaker360 for this video: https://youtu.be/fS0GeaOkNRw 24-02-2018
// update ssid, password and GAS_ID
//-----------------------------------------------

include

const char* ssid = "----"; // name of your wifi network!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
const char* password = "-------"; // wifi pasword !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
const char* host = "script.google.com";
const int httpsPort = 443;
// Use WiFiClientSecure class to create TLS connection
BearSSL::WiFiClientSecure client;
// SHA1 fingerprint of the certificate, don't care with your GAS service
const char* fingerprint = "46 B2 C3 44 9C 59 09 8B 01 B6 F8 BD 4C FB 00 74 91 2F EF F6";
String GAS_ID = "AKfycbxN_UevaBWDKoVZqy6Z-W9_wv7jBtV8b-Sw95fvrz_CpUSc-zMb"; // Replace by your GAS service id !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
int it;
int ih;
void setup()
{

Serial.begin(115200); //Serial
Serial.println();

//connecting to internet
Serial.print("connecting to ");
Serial.println(ssid);
WiFi.mode(WIFI_STA);
WiFi.begin(ssid, password);
while (WiFi.status() != WL_CONNECTED) {
delay(500);
Serial.print(".");
}
Serial.println("");
Serial.println("WiFi connected");
Serial.println("IP address: ");
Serial.println(WiFi.localIP());

}

void loop()
{
float h = random(0,10);
float t = random(11,20);
Serial.print("Temp = ");
Serial.print(t);
Serial.print(" HUM= ");
Serial.println(h);
it = (int) t;
ih = (int) h;
sendData(it, ih);

delay(2000);
}

// Function for Send data into Google Spreadsheet
void sendData(int tem, int hum)
{
Serial.print("connecting to ");
Serial.println(host);

if (!client.connect(host, httpsPort)) {
Serial.println("connection failed");
return;
}

if (client.verify(fingerprint, host)) {
Serial.println("certificate matches");
} else {
Serial.println("certificate doesn't match");
}
String string_temperature = String(tem, DEC);
String string_humidity = String(hum, DEC);
String url = "/macros/s/" + GAS_ID + "/exec?temperature=" + string_temperature + "&humidity=" + string_humidity;
Serial.print("requesting URL: ");
Serial.println(url);

client.print(String("GET ") + url + " HTTP/1.1rn" +
"Host: " + host + "rn" +
"User-Agent: BuildFailureDetectorESP8266rn" +
"Connection: closernrn");

Serial.println("request sent");
while (client.connected()) {
String line = client.readStringUntil('n');
if (line == "r") {
Serial.println("headers received");
break;
}
}
String line = client.readStringUntil('n');
if (line.startsWith("{"state":"success"")) {
Serial.println("esp8266/Arduino CI successfull!");
} else {
Serial.println("esp8266/Arduino CI has failed");
}
Serial.println("reply was:");
Serial.println("==========");
Serial.println(line);
Serial.println("==========");
Serial.println("closing connection");
}

Everytime I try ; Wifi gets connected but connection to script.google.com fails
Please help me out

Output at the serial monitor -

......
WiFi connected
IP address:
192.168.1.4
Temp = 19.00 HUM= 2.00
connecting to script.google.com
connection failed
Temp = 14.00 HUM= 3.00
connecting to script.google.com
connection failed
Temp = 13.00 HUM= 6.00
connecting to script.google.com
connection failed

WoozCorp on 23 Feb 2019

I have the same Problem using Pushover or Pushbullet. It is not possible to send a notification with one of them.
Neither do the following sketches work:

Pushover:
https://alexbloggt.com/esp8266-pushover/

Pushbullet:
https://fipsok.de/sketch/pushbullettab.html

Osmodia666 on 15 Mar 2019

Just include in your code:
client.setInsecure();

brnyza on 13 May 2019

👍17 ❤10 😕4

@brnyza
you are a god amongst men. 8 hours later and I got my code working because of you. Thank you so much!!!

Skytrobb on 30 Jun 2019

@brnyza
you are a god amongst men. 8 hours later and I got my code working because of you. Thank you so much!!!

Could you give an example where to put client.setInsecure(); ?

Osmodia666 on 23 Jul 2019

@Osmodia666 anywhere after the object initialization. this would work at the top of void setup()
WifiClientSecure client;
client.setInsecure;

Skytrobb on 23 Jul 2019

Thanks, thats what I thought, but I always get a error:

exit status 1
'client' does not name a type

It doesn't matter where I insert it, I dont know what I am doing wrong?

`#include // import ESP8266 WiFi library

include //import client library

WiFiClientSecure secureClient;
client.setInsecure();

const char* ssid = "";//SSID for your local wireless
const char password = "*"; //Password

const char* host = "api.pushbullet.com";
const int httpsPort = 443; // the required port
const char* PushBulletAPIKEY = "*"; //get it from your pushbullet account

void setup() {
Serial.begin(115200);
Serial.println();
Serial.print("connecting to ");
Serial.println(ssid);
WiFi.mode(WIFI_STA);
WiFi.begin(ssid, password);
while (WiFi.status() != WL_CONNECTED) {
delay(500);
Serial.print(".");
}
Serial.println("");
Serial.println("WiFi connected");
Serial.println("IP address: ");
Serial.println(WiFi.localIP());

// Use WiFiClientSecure class to create TLS connection
WiFiClientSecure client;
Serial.print("connecting to ");
Serial.println(host);
if (!client.connect(host, httpsPort)) {
Serial.println("connection failed");
return;
}

String url = "/v2/pushes";
String messagebody_note = "{"type": "note", "title": "Hello !", "body": "My Name is Ahmed And You ?"}rn";
String messagebody_link = "{"type": "link", "title": "My Youtube", "body": "Best Channel^^!", "url": "https://www.youtube.com/channel/UCZnkC2WQf-LcH9EOmHjlExA?view_as=subscriber"}rn";
Serial.print("requesting URL: ");
Serial.println(url);
//send a simple note
client.print(String("POST ") + url + " HTTP/1.1rn" +
"Host: " + host + "rn" +
"Authorization: Bearer " + PushBulletAPIKEY + "rn" +
"Content-Type: application/jsonrn" +
"Content-Length: " +
String(messagebody_note.length()) + "rnrn");
client.print(messagebody_note);
delay(10000); // wait 10 s
//send a link
client.print(String("POST ") + url + " HTTP/1.1rn" +
"Host: " + host + "rn" +
"Authorization: Bearer " + PushBulletAPIKEY + "rn" +
"Content-Type: application/jsonrn" +
"Content-Length: " +
String(messagebody_link.length()) + "rnrn");
client.print(messagebody_link);

Serial.println("request sent");
//print the response

while (client.available() == 0);

while (client.available()) {
String line = client.readStringUntil('n');
Serial.println(line);
}

}
void loop() {
}`

Osmodia666 on 23 Jul 2019

your initializing secureClient and then calling the client object, that's
never going to work. you should call setInsecure on secureClient.
your code will look like:
wificlientsecure secureClient
secureClient.setInsecure()

On Tue, Jul 23, 2019, 12:41 PM Osmodia666 notifications@github.com wrote:

Thanks, thats what I thought, but I always get a error:

exit status 1
'client' does not name a type

It doesn't matter where I insert it, I dont know what I am doing wrong?

`#include // import ESP8266 WiFi library

include //import client library

WiFiClientSecure secureClient;
client.setInsecure();

const char* ssid = "
";//SSID for your local wireless const char password = "*"; //Password

const char* host = "api.pushbullet.com";
const int httpsPort = 443; // the required port
const char* PushBulletAPIKEY = "*"; //get it from your pushbullet account

void setup() {
Serial.begin(115200);
Serial.println();
Serial.print("connecting to ");
Serial.println(ssid);
WiFi.mode(WIFI_STA);
WiFi.begin(ssid, password);
while (WiFi.status() != WL_CONNECTED) {
delay(500);
Serial.print(".");
}
Serial.println("");
Serial.println("WiFi connected");
Serial.println("IP address: ");
Serial.println(WiFi.localIP());

// Use WiFiClientSecure class to create TLS connection
WiFiClientSecure client;
Serial.print("connecting to ");
Serial.println(host);
if (!client.connect(host, httpsPort)) {
Serial.println("connection failed");
return;
}

String url = "/v2/pushes";
String messagebody_note = "{"type": "note", "title": "Hello !", "body":
"My Name is Ahmed And You ?"}rn";
String messagebody_link = "{"type": "link", "title": "My Youtube", "body":
"Best Channel^^!", "url": "
https://www.youtube.com/channel/UCZnkC2WQf-LcH9EOmHjlExA?view_as=subscriber"}rn
";
Serial.print("requesting URL: ");
Serial.println(url);
//send a simple note
client.print(String("POST ") + url + " HTTP/1.1rn" +
"Host: " + host + "rn" +
"Authorization: Bearer " + PushBulletAPIKEY + "rn" +
"Content-Type: application/jsonrn" +
"Content-Length: " +
String(messagebody_note.length()) + "rnrn");
client.print(messagebody_note);
delay(10000); // wait 10 s
//send a link
client.print(String("POST ") + url + " HTTP/1.1rn" +
"Host: " + host + "rn" +
"Authorization: Bearer " + PushBulletAPIKEY + "rn" +
"Content-Type: application/jsonrn" +
"Content-Length: " +
String(messagebody_link.length()) + "rnrn");
client.print(messagebody_link);

Serial.println("request sent");
//print the response

while (client.available() == 0);

while (client.available()) {
String line = client.readStringUntil('n');
Serial.println(line);
}

}
void loop() {
}`

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/esp8266/Arduino/issues/4826?email_source=notifications&email_token=AEXNICVGEHNBVBQRXKSQU33QA5GGHA5CNFSM4FFUAOTKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD2UBUHQ#issuecomment-514333214,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AEXNICXXF24U2EPOMFSNQ2TQA5GGHANCNFSM4FFUAOTA
.

Skytrobb on 23 Jul 2019

Just include in your code:
client.setInsecure();

Merci beaucoup pour la solution ! Dans mon cas j'ai effectivement ajouté client.setInsecure();
et cela a fonctionné.

Cyrhades on 12 Aug 2019

👍1

Thanks, thats what I thought, but I always get a error:

exit status 1
'client' does not name a type

It doesn't matter where I insert it, I dont know what I am doing wrong?

`#include // import ESP8266 WiFi library

include //import client library

WiFiClientSecure secureClient;
client.setInsecure();

const char* ssid = "_";//SSID for your local wireless const char_ password = "*"; //Password

const char* host = "api.pushbullet.com";
const int httpsPort = 443; // the required port
const char* PushBulletAPIKEY = "*"; //get it from your pushbullet account

void setup() {
Serial.begin(115200);
Serial.println();
Serial.print("connecting to ");
Serial.println(ssid);
WiFi.mode(WIFI_STA);
WiFi.begin(ssid, password);
while (WiFi.status() != WL_CONNECTED) {
delay(500);
Serial.print(".");
}
Serial.println("");
Serial.println("WiFi connected");
Serial.println("IP address: ");
Serial.println(WiFi.localIP());

// Use WiFiClientSecure class to create TLS connection
WiFiClientSecure client;
Serial.print("connecting to ");
Serial.println(host);
if (!client.connect(host, httpsPort)) {
Serial.println("connection failed");
return;
}

String url = "/v2/pushes";
String messagebody_note = "{"type": "note", "title": "Hello !", "body": "My Name is Ahmed And You ?"}\r\n";
String messagebody_link = "{"type": "link", "title": "My Youtube", "body": "Best Channel^^!", "url": "https://www.youtube.com/channel/UCZnkC2WQf-LcH9EOmHjlExA?view_as=subscriber\"}\r\n";
Serial.print("requesting URL: ");
Serial.println(url);
//send a simple note
client.print(String("POST ") + url + " HTTP/1.1\r\n" +
"Host: " + host + "\r\n" +
"Authorization: Bearer " + PushBulletAPIKEY + "\r\n" +
"Content-Type: application/json\r\n" +
"Content-Length: " +
String(messagebody_note.length()) + "\r\n\r\n");
client.print(messagebody_note);
delay(10000); // wait 10 s
//send a link
client.print(String("POST ") + url + " HTTP/1.1\r\n" +
"Host: " + host + "\r\n" +
"Authorization: Bearer " + PushBulletAPIKEY + "\r\n" +
"Content-Type: application/json\r\n" +
"Content-Length: " +
String(messagebody_link.length()) + "\r\n\r\n");
client.print(messagebody_link);

Serial.println("request sent");
//print the response

while (client.available() == 0);

while (client.available()) {
String line = client.readStringUntil('\n');
Serial.println(line);
}

}
void loop() {
}`

Try adding this client.setInsecure(); inside function void setup().

CocDap on 13 Aug 2019

Hello, i'm having the same problem, and even adding client.setInsecure(); didn't make a difference.
I'm just trying to get a message from my Telegram bot by sending a GET message to the API, but i cannot connect to the server. I've also tried other servers (8.8.8.8), but i wasn't able to connect to any.

My code:

#include <ESP8266WiFi.h>
#include <WiFiClientSecure.h>

char ssid[] = <SSID>
char pass[] = <PASSWORD>

void setup() {
  Serial.begin(115200);
  delay(1000);

  WiFi.begin(ssid, pass);
  while (WiFi.status() != WL_CONNECTED) {
    Serial.print(".");
    delay(500);
  }
  Serial.println("");
  Serial.println("WiFi connected");

  WiFiClientSecure client;
  client.setInsecure();
//  IPAddress of Telegram api is 149.154.167.220
    while (!client.connect("149.154.167.220", 443)) {
      Serial.println("trying to connect");
    }
    Serial.println("connected");
    client.println("GET https://api.telegram.org/bot<TOKEN>/sendMessage?chat_id=<CHAT_ID>&text=Hello%20World)");
}

void loop() {}

FringsA on 30 Aug 2019

433 or 443 ?

d-a-v on 30 Aug 2019

Then enable all debug options, there is surely something to be learned from there

d-a-v on 30 Aug 2019

Just include in your code:
client.setInsecure();

Excellent suggestion thank you so much

badriramakrishnan on 7 Sep 2019

👍1

After completely reinstalling the Arduino IDE everything worked as intended. I had made some tinkering with libraries, maybe that caused the issue.
I will delete my posts in a few days as they do not contribute anything else than "reinstall and hope for the best".

Thanks for the quick respond

FringsA on 29 Sep 2019

Just include in your code:
client.setInsecure();

thx for this post, you put an end to an hour of frustration for me :)

ross-samadhi on 9 Dec 2019

Just include in your code:
client.setInsecure();

Thanks! Worked like a charm.

jmdunlap01 on 21 Mar 2020

@d-a-v I'm unable to get this working..

````C++
const char fingerprint[] = "45 A2 1B 97 4A 96 13 8F 83 AA 46 F7 71 5F A3 0E A8 7E 39 61";
const char* ip = "104.28.20.93";
const char* host = "www.currentmillis.com";
const int httpsPort = 443;

    // Use WiFiClientSecure class to create TLS connection
    BearSSL::WiFiClientSecure client;

    Serial.print("connecting to ");
    Serial.println(ip);

    Serial.printf("Using fingerprint '%s'\n", fingerprint);
    client.setFingerprint(fingerprint);

    if (!client.connect(ip, httpsPort)) {
        Serial.println("connection failed");
        return;
    }

````
It's always failing at 'client.connect'. I've tried using setfingerprint and other solutions.. Nothing worked for me.. Can anyone help?

EDIT: I enabled debuging BSSL:connect: Name loopup failure came out of that. So i replaced host with and ip and passed that to .connect() function.. Now i'm stuck with:

BSSL:_connectSSL: start connection
BSSL:_wait_for_handshake: failed
BSSL:Couldn't connect. Error = 'Unknown error code.'

ireun on 1 Apr 2020

This worked for me...

/* Fill values where ** is mentioned and fingerprint too*/

include

ifndef STASSID

define STASSID "**"

define STAPSK "**"

endif

const char* ssid = STASSID;
const char* password = STAPSK;

const char* mqtt_server = "*";
const uint16_t mqtt_port = *;
const char* mqttUser = "*";
const char mqttPassword = "**";

static const char *fingerprint PROGMEM = "00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00"; // sha1 fingerprint ca.crt
const char caCert[] PROGMEM = R"EOF(
-----BEGIN CERTIFICATE-----

=-----END CERTIFICATE-----
)EOF";

X509List caCertX509(caCert); /* X.509 parsed CA Cert */
WiFiClientSecure espClient;
PubSubClient client(espClient);
unsigned long lastMsg = 0;

define MSG_BUFFER_SIZE (50)

char msg[MSG_BUFFER_SIZE];
int value = 0;

void setup_wifi() {

delay(10);
// We start by connecting to a WiFi network
Serial.println();
Serial.print("Connecting to ");
Serial.println(ssid);

WiFi.mode(WIFI_STA);
WiFi.begin(ssid, password);

while (WiFi.status() != WL_CONNECTED) {
delay(500);
Serial.print(".");
}

randomSeed(micros());

Serial.println("");
Serial.println("WiFi connected");
Serial.print("IP address: ");
Serial.println(WiFi.localIP());
}

void callback(char* topic, byte* payload, unsigned int length) {
Serial.print("Message arrived [");
Serial.print(topic);
Serial.print("] ");
for (int i = 0; i < length; i++) {
Serial.print((char)payload[i]);
}
Serial.println();

// Switch on the LED if a 1 was received as first character
if ((char)payload[0] == '1')
{
digitalWrite(BUILTIN_LED, LOW); // Turn the LED on (Note that LOW is the voltage level
// but actually the LED is on; this is because
// it is active low on the ESP-01)
}
else
{
digitalWrite(BUILTIN_LED, HIGH); // Turn the LED off by making the voltage HIGH
}

}

void reconnect() {
// Loop until we're reconnected
while (!client.connected()) {
Serial.print("Attempting MQTT connection...");

// Create a random client ID
String clientId = "ESP8266ClientID-";
clientId += String(random(0xffff), HEX);

// Attempt to connect
if (client.connect(clientId.c_str(), mqttUser, mqttPassword))
//if (client.connect(clientId.c_str())) 
{      
  Serial.println("connected");

  // Once connected, publish an announcement...
  client.publish("outTopic", "hello world");

  // ... and resubscribe
  client.subscribe("inTopic");
} 
else 
{
  Serial.print("failed, rc=");
  Serial.print(client.state());
  Serial.println(" try again in 5 seconds");
  // Wait 5 seconds before retrying
  delay(5000);
}

}
}

void setup() {
pinMode(BUILTIN_LED, OUTPUT); // Initialize the BUILTIN_LED pin as an output
Serial.begin(115200);
setup_wifi();

/* Use fingerprint or certificate or both for connecting/
espClient.setFingerprint(fingerprint);
espClient.setTrustAnchors(&caCertX509); / Load CA cert into trust store /
espClient.allowSelfSignedCerts(); / Enable self-signed cert support if required*/
//espClient.setInsecure();

client.setServer(mqtt_server, mqtt_port);
client.setCallback(callback);
}

void loop() {

if (!client.connected()) {
reconnect();
}
client.loop();

unsigned long now = millis();
if (now - lastMsg > 2000) {
lastMsg = now;
++value;
snprintf (msg, MSG_BUFFER_SIZE, "hello world #%ld", value);
Serial.print("Publish message: ");
Serial.println(msg);
client.publish("outTopic", msg);
}
}

VeronicaGupta on 4 Nov 2020

Great it works.

You do not put client.setInsecure(); just anywhere in your code.

// Use WiFiClientSecure class to create TLS connection WiFiClientSecure client; client.setInsecure(); Serial.print("connecting to "); Serial.println(host); if (!client.connect(host, httpsPort)) { Serial.println("connection failed"); return; }
Insert it after declaring the WiFiClientSecure class

Still I'm often wondering why the smart guys are not able to think like the noobs they try to help.