I use the setup RTOS and ssl_client example provided by ST, and the older library versin seems to work and the newest on fails.
Here prints from the worling one:
C:\Users\MY_PC>openssl s_server -key server.key -cert server.crt -accept 8883
Using default temp DH parameters
ACCEPT
-----BEGIN SSL SESSION PARAMETERS-----
MHoCAQECAgMDBALALwQgVa/AeM/IWe4+PlR6D3v7gpN+iEPz/Qowt46ay9QNGFQE
MEvJwVQUY7/GguhRMog09Vx2ciSOAb1iZAiz5PBXkB2A5guJHJV8LiqQLRbSaL89
oaEGAgRi6UBvogQCAhwgpAYEBAEAAACzAwIBGA==
-----END SSL SESSION PARAMETERS-----
Shared ciphers:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256
Signature Algorithms: ECDSA+SHA512:RSA+SHA512:ECDSA+SHA384:RSA+SHA384:ECDSA+SHA256:RSA+SHA256:ECDSA+SHA224:RSA+SHA224
Shared Signature Algorithms: ECDSA+SHA512:RSA+SHA512:ECDSA+SHA384:RSA+SHA384:ECDSA+SHA256:RSA+SHA256:ECDSA+SHA224:RSA+SHA224
Supported Elliptic Curve Point Formats: uncompressed
Supported groups: secp384r1:secp256r1
Shared groups: secp384r1:secp256r1
CIPHER is ECDHE-RSA-AES128-GCM-SHA256
Secure Renegotiation IS supported
Hello from Nucleo-STM32f439ZI board Lacon Testsstm
and corrresponding terminal prints:
Still got no IP
Still got no IP
Still got no IP
DHCP/Static IP O.K.
. Seeding the random number generator... ok
TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256
. Loading the CA root certificate ... ok (0 skipped)
. Connecting to tcp/192.168.52.242/8883... ok
. Setting up the SSL/TLS structure... ok
. Performing the SSL/TLS handshake... ok
. Verifying peer X.509 certificate... failed
! The certificate Common Name (CN) does not match with the expected CN
> Write to server: 47 bytes written
and from the not working one
C:\Users\Manfred Otto\mqtt-spy\MY_PC>openssl s_server -key server.key -cert server.crt -accept 8883
Using default temp DH parameters
ACCEPT
ERROR
F83F0000:error:0A0000C1:SSL routines:tls_post_process_client_hello:no shared cipher:ssl\statem\statem_srvr.c:2221:
shutting down SSL
CONNECTION CLOSED
ERROR
F83F0000:error:0A0000C1:SSL routines:tls_post_process_client_hello:no shared cipher:ssl\statem\statem_srvr.c:2221:
shutting down SSL
CONNECTION CLOSED
ERROR
F83F0000:error:0A0000C1:SSL routines:tls_post_process_client_hello:no shared cipher:ssl\statem\statem_srvr.c:2221:
shutting down SSL
CONNECTION CLOSED
and corrresponding terminal prints:
. Seeding the random number generator... ok
TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
. Loading the CA root certificate ... ok (0 skipped)
. Connecting to tcp/192.168.52.242/8883... ok
. Setting up the SSL/TLS structure... ok
. Performing the SSL/TLS handshake... failed
! mbedtls_ssl_handshake returned -0x7780
Why is this missing TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256. I definitly checked in both projects should be there.
Is there a way to switch back to an older library in an running project?
