This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 14.000000000000002%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESB%3C/text%3E%3C/svg%3E)
I am trying to connect to a server using Azure RTOS, but it is showing parsing error at TLS callback function.
ERROR : _nx_secure_tls_session_packet_buffer_set API failed.
Returned Error Code: 0x1A2
Following is the error message I have received. I have tried it by changing the certificates, and have increased the TLS buffer size as well. But every time the nx_secure_x509_certificate_initialize API fails. Can anybody help me with that?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 38%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EQ%3C/text%3E%3C/svg%3E)
Hello @Samia Bukhari
Welcome to Microsoft Q&A Platform and thanks for your query. Community SME's on this topic or our team will review your scenario and circle back at the possible earliest time.
Hi thanks. Waiting for your response.
Hey there, Waiting for your assistance.
Regards,
Syeda Samia Bukhari
Hi @Samia Bukhari ,
Apologies for the delay in the response. We are looking into this request. Could you please let me know which server you are trying to connect to and the root CA for the certificate you are trying to use.
Hi @LeelaRajesh thankyou for your response. I am trying to connect to a Virtual Machine on Azure Cloud and the Root CA is COMODO.
Regarding to the error returned from _nx_secure_tls_session_packet_buffer_set, could you paste the code snippet where it returns 0x1A2?
Here is the link to how to import X.509 certificate into NetX Secure. Let me know if it helps.
@Tiejun Zhou Thankyou for your response. Below mentioned is the code snippet you requested.
/* Initialize X.509 Certificate for NetX Secure TLS. */
status = nx_secure_x509_certificate_initialize(&g_trusted_certificate[count],
g_trust_certs[count].pointer_to_cert,
g_trust_certs[count].sizeof_cert,
NX_NULL,
NX_NULL,
NX_NULL,
NX_NULL,
NX_SECURE_X509_KEY_TYPE_NONE);
if (NX_SUCCESS != status)
{
PRINT_ERR_STR("_nx_secure_tls_session_packet_buffer_set API failed.");
ERROR_TRAP(status);
}
Regarding the link you provided, it only describes the method to import DER and PEM certificates. While, I am importing HEX array format certificate. Since, the NetX Http Client example project provided by Renesas (Whose MCU I am using) follows the hex format.
Link to the example project: NetX_https_client_ek_ra6m3_ep
This section shows how to convert a DER format certificate into HEX array. The error status indicates the HEX array is invalid.
@Tiejun Zhou Yes, I have followed the same procedure mentioned in the link for its conversion but still facing the same issue.
Could you attach the cert in DER format and HEX array in C file?
Yes, Please find the attached HEX and DER format.270756-comodocertificationauthority-0.txt270813-comodo-der.txt
The content in comodo-der.txt is not "DER" format but "PEM" format. I assume you have the original PEM format CA cert called comodo.pem, you need to convert to DER format by openssl CLI.
openssl x509 -inform pem -in comodo.pem -outform der -out comodo.der
Then convert the DER format to C array.
xxd -i comodo.der>comodo.c
@Tiejun Zhou Thankyou for your assistance. It's working now.