MBED TLS handshake error using HTTPS client

Question

Good morning,

I am trying to download files from Blob storage to enable Firmware Over The Air updates on an IoT device. I am using a Nordic device with zephyr. When I try to connect to "zephyriot.blob.core.windows.net" I get a handshake error -7200. I am using the MBED TLS library along with a "Baltimore CyberTrust Root" certificate. It has worked perfectly for my MQTT client. When I use my IoT hub host address "WCM.azure-devices.net", my HTTPS client does connect without any errors.

Are there differences in the handshake used for blob storage? Am I using the wrong certificate for SSL authentication?

Any assistance would be highly appreciated.

Answer 1

@Petrus Van Der Walt Transnet Group Capital JHB Firstly, apologies for the delay in responding here and any inconvenience this issue may have caused.

For complete detailed information on Azure Blob Storage handshake you can refer to this article,: https://azure.microsoft.com/en-in/blog/cloud-success-comes-in-completing-the-cloud-handshake/

Please see if this solves the problem when you use Fiddler.

Are you using ADLS gen 2 or Azure Storage to download the files, For testing purpose can you use Azcopy or Storage explorer tools to download and let us know the status

Additional information: As a workaround, use the staged copy to skip the Transport Layer Security (TLS) validation for Azure Data Lake Storage Gen1. You need to reproduce this issue and gather the network monitor (netmon) trace, and then engage your network team to check the local network configuration.

If the issue still persist, I would recommended to check with the Mbed Support since based on the error it's not related to Azure Blob Storage

Hope this helps!

Kindly let us know if the above helps or you need further assistance on this issue. Looking forward for your reply

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.