Unable to download from hosted mender (free account S3 certificate issue)

[mastergbc]

Hello.

When attempting to download the artifact registered with hosted Mender, the operation fails due to a TLS handshake error (-0x2700).

The non-paid version of hosted Mender uses cloudflarestorage.com to store artifacts, and it appears that an access issue is occurring with this service.

[00:00:02.356,000] <inf> mender_stm32l4a6_zephyr_example: Mender client initialized
[00:00:02.366,000] <inf> mender_stm32l4a6_zephyr_example: Mender client registered hello-world module
[00:00:02.379,000] <inf> mender: WEST_TOPDIR/Library/mender-sample2/components/mender-mcu-client/platform/storage/zephyr/nvs/src/mender-storage.c (234): Device configuration not available
[00:00:02.399,000] <inf> mender_stm32l4a6_zephyr_example: Mender configure add-on registered
[00:00:02.410,000] <inf> mender_stm32l4a6_zephyr_example: Mender inventory add-on registered
[00:00:02.422,000] <inf> mender_stm32l4a6_zephyr_example: Device configuration retrieved
[00:00:02.433,000] <inf> mender: WEST_TOPDIR/Library/mender-sample2/components/mender-mcu-client/platform/storage/zephyr/nvs/src/mender-storage.c (174): Deployment data not available
[00:00:02.453,000] <inf> mender_stm32l4a6_zephyr_example: Mender client connect network
[00:00:07.385,000] <inf> mender_stm32l4a6_zephyr_example: Mender client authenticated
[00:00:07.395,000] <inf> mender: WEST_TOPDIR/Library/mender-sample2/components/mender-mcu-client/platform/flash/zephyr/src/mender-flash.c (138): Application has been mark valid and rollback canceled
[00:00:07.416,000] <inf> mender: WEST_TOPDIR/Library/mender-sample2/components/mender-mcu-client/core/src/mender-client.c (902): Checking for deployment...
[00:00:10.492,000] <inf> mender: WEST_TOPDIR/Library/mender-sample2/components/mender-mcu-client/core/src/mender-client.c (929): Downloading deployment artifact with id '80b26e36-2aed-4baa-9bb1-627e5b89a646', artifact name 'zephyr.signed-0.2.0.bin' and uri 'https://c271964d41749feb10da762816c952ee.r2.cloudflarestorage.com/mender-artifacts-us/66cd7c9ec27449730518877f/46030199-6c3e-4
[00:00:13.323,000] <inf> mender_stm32l4a6_zephyr_example: Deployment status is 'downloading'
[00:00:14.414,000] <err> mender: WEST_TOPDIR/Library/mender-sample2/components/mender-mcu-client/platform/net/zephyr/src/mender-net.c (175): Unable to connect to the host 'c271964d41749feb10da762816c952ee.r2.cloudflarestorage.com:443', result = -1, errno = 113
[00:00:14.442,000] <err> mender: WEST_TOPDIR/Library/mender-sample2/components/mender-mcu-client/platform/net/zephyr/src/mender-http.c (172): Unable to open HTTP client connection
[00:00:14.464,000] <err> mender: WEST_TOPDIR/Library/mender-sample2/components/mender-mcu-client/core/src/mender-api.c (376): Unable to perform HTTP request
[00:00:14.486,000] <err> mender: WEST_TOPDIR/Library/mender-sample2/components/mender-mcu-client/core/src/mender-client.c (932): Unable to download artifact
[00:00:17.465,000] <inf> mender_stm32l4a6_zephyr_example: Deployment status is 'failure'

[joelguittet]

Hello @mastergbc
Probably due to the certificate of the server, currently Amazon Root CA1 is integrated. I will try to have a look quickly to this issue. If you have a pull request in the mean time, do not hesitate I will be happy to review it.
Thanks and sorry for inconvenience on this topic
Joel

[joelguittet]

Hello @mastergbc
I'm not able to test quickly but I just pushed something that should answer your issue.
Can you test with the branch https://github.com/joelguittet/mender-stm32l4a6-zephyr-example/tree/enhancement/secondary-root-ca ?
Thanks,
Joel

[joelguittet]

Hello @mastergbc
I'm actually testing but I face issues with the root ca to use here.
I also check at the mender reference integration, but didn't helped me. Do you ?
Joel

[mastergbc]

Hello @joelguittet

Sorry for the late reply.
When I tested, Root CA still had problems.
So I gave up testing on hosted mender and finished testing with mender on-prm server. It works fine on-prm. Thanks.