QUERY · ISSUE

MQTT to AWS IoT Core fails with mbedtls_ssl_handshake_error

openby Aish-Gitopened 2020-04-16updated 2023-05-15

port-esp32

mbedtls_ssl_handshake error: -2880
I (14912) wifi:Traceback (most recent call last):
File "main.py", line 99, in <module>
File "main.py", line 96, in <module>
File "main.py", line 69, in mqtt
File "umqtt/simple.py", line 61, in connect
OSError: [Errno 5] EIO

Fails on the latest firmware but works on any of the 2019 builds - tried it with esp32-idf3-20191220-v1.12.bin and it works but needed BLE and hence upgraded to 2020 versions and fails on all the March/April releases.

CANDIDATE · ISSUE

tests/extmod/ussl_basic.py fails for modussl_mbedtls

closedby pfalconopened 2018-12-17updated 2022-07-19

tests

Well, subj. ussl_basic.py is coded too much relying on modussl_axtls behavior.

--- extmod_ussl_basic.py.exp	2018-12-16 22:45:07.539600906 +0300
+++ extmod_ussl_basic.py.out	2018-12-16 22:45:07.539600906 +0300
@@ -1,9 +1,7 @@
-ssl_handshake_status: -256
+mbedtls_ssl_handshake error: -7280
 wrap_socket: OSError(5,)
-<_SSLSocket 
-setblocking: NotImplementedError
-4
-b''
-read: OSError(-261,)
-read: OSError(9,)
-write: OSError(9,)
+mbedtls_ssl_handshake error: -7280
+Traceback (most recent call last):
+  File "extmod/ussl_basic.py", line 18, in <module>
+OSError: [Errno 5] EIO
+CRASH

Assessment

Q Qwen · medium

Both issues involve mbedtls SSL handshake errors on ESP32 with OSError [Errno 5] EIO. Issue #5929 is a user-facing bug where MQTT connections to AWS IoT Core fail with mbedtls_ssl_handshake_error -2880 on recent ESP32 firmware. Issue #4364 is a test failure report showing mbedtls_ssl_handshake_error -7280 in the ussl_basic test. While both involve the same error code pattern (OSError 5/EIO) and mbedtls SSL issues, they have different root causes: #5929 appears to be a regression in SSL/TLS handshake behavior affecting production MQTT connections, while #4364 is about test expectations being hardcoded for axtls instead of mbedtls. The error codes differ (-2880 vs -7280), suggesting different underlying issues. #4364 provides context about mbedtls SSL implementation differences but doesn't resolve the AWS IoT Core connection problem in #5929.

Suggested action

Keep both issues open. #5929 needs investigation into why SSL handshakes fail with AWS IoT Core on recent ESP32 firmware. #4364 is a test maintenance issue that should be updated to handle mbedtls error codes properly. The maintainer may want to check if there's a common SSL configuration or certificate handling issue affecting both scenarios.

MQTT to AWS IoT Core fails with mbedtls_ssl_handshake_error

tests/extmod/ussl_basic.py fails for modussl_mbedtls

Keyboard