DTLS Handshake failure

[Chris Johnson]

Hi! I'm trying to get OT running on my platform. So far it's working well from the command line, I can form networks and transfer data. All the services (avahi, otbr-agent, wpantund, and otbr-web) are running.

But when I try to use the thread app (v1.01.11.7a3daa7, reported working here: https://github.com/openthread/borderrouter/issues/62) on Android and select my border router the otbr-agent fails the DTLS handshake with -0x4c80 (MBEDTLS_ERR_ECP_INVALID_KEY https://github.com/ARMmbed/mbedtls/blob/master/include/mbedtls/ecp.h)

Am I missing some configuration? Here are the otbr-agent logs:

otbr-agent[10949]: Trying to accept connection...

otbr-agent[10949]: repo/library/ssl_tls.c:0082: set_timer to 0 ms

otbr-agent[10949]: repo/library/ssl_tls.c:0082: set_timer to 0 ms

otbr-agent[10949]: repo/library/ssl_tls.c:0082: set_timer to 0 ms

otbr-agent[10949]: DTLS handshaking...

otbr-agent[10949]: repo/library/ssl_tls.c:6557: => handshake

otbr-agent[10949]: repo/library/ssl_srv.c:4016: server state: 0

otbr-agent[10949]: repo/library/ssl_tls.c:2416: => flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2428: <= flush output

otbr-agent[10949]: repo/library/ssl_srv.c:4016: server state: 1

otbr-agent[10949]: repo/library/ssl_tls.c:2416: => flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2428: <= flush output

otbr-agent[10949]: repo/library/ssl_srv.c:1190: => parse client hello

otbr-agent[10949]: repo/library/ssl_tls.c:2208: => fetch input

otbr-agent[10949]: repo/library/ssl_tls.c:2269: in_left: 0, nb_want: 5

otbr-agent[10949]: repo/library/ssl_tls.c:2307: f_recv_timeout: 0 ms

otbr-agent[10949]: repo/library/ssl_tls.c:2315: ssl->f_recv(_timeout)() returned 421 (-0xfffffe5b)

otbr-agent[10949]: repo/library/ssl_tls.c:2403: <= fetch input

otbr-agent[10949]: repo/library/ssl_srv.c:1222: dumping 'record header' (13 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1222: 0000:  16 fe fd 00 00 00 00 00 00 00 00 01 98           .............

otbr-agent[10949]: repo/library/ssl_srv.c:1234: client hello v3, message type: 22

otbr-agent[10949]: repo/library/ssl_srv.c:1243: client hello v3, message len.: 408

otbr-agent[10949]: repo/library/ssl_srv.c:1246: client hello v3, protocol version: [254:253]

otbr-agent[10949]: repo/library/ssl_tls.c:2208: => fetch input

otbr-agent[10949]: repo/library/ssl_tls.c:2269: in_left: 421, nb_want: 421

otbr-agent[10949]: repo/library/ssl_tls.c:2276: <= fetch input

otbr-agent[10949]: repo/library/ssl_srv.c:1328: dumping 'record contents' (408 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0000:  01 00 01 8c 00 00 00 00 00 00 01 8c fe fd 00 00  ................

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0010:  06 01 6c 93 82 71 7a a0 47 c8 63 e5 a1 08 ef 54  ..l..qz.G.c....T

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0020:  8c 76 df e4 a4 54 e6 09 b4 a4 48 46 dc 0a 00 00  .v...T....HF....

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0030:  00 06 c0 ff c0 a8 c0 37 01 00 01 5c 00 0a 00 04  .......7...\....

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0040:  00 02 00 17 00 0b 00 02 01 00 01 00 01 4a 41 04  .............JA.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0050:  03 d0 15 f7 3a 4f 7d b6 98 13 4a 6b 15 a7 f4 b2  ....:O}...Jk....

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0060:  08 9b 8a 38 6e 94 18 d9 fd f2 95 73 85 7f 08 6b  ...8n......s...k

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0070:  b7 af f7 c1 8b 5c 3c 70 97 fe 4b 7d 16 db 34 a2  .....\<p..K}..4.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0080:  b2 bd b1 80 42 c3 12 64 a4 2d 1a 78 c9 98 85 95  ....B..d.-.x....

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0090:  41 04 cf c7 46 58 9e 4a 14 07 85 b3 bf 94 c7 26  A...FX.J.......&

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 00a0:  9a d1 b1 7a d2 59 fb e7 17 c2 76 ae 0b 0e 74 98  ...z.Y....v...t.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 00b0:  33 af 9e e2 5d 02 0b 5b e9 79 be 4f 93 67 e2 71  3...]..[.y.O.g.q

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 00c0:  32 2c e8 a1 00 6a ef 0e 41 f6 11 e7 bb 19 30 97  2,...j..A.....0.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 00d0:  8e f8 20 06 02 ff 07 d1 d0 32 d8 21 c5 d4 3c f2  .. ......2.!..<.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 00e0:  15 56 14 a4 c8 0c c9 90 40 99 1f 62 67 c3 81 32  .V......@..bg..2

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 00f0:  4e 8c ab 41 04 94 5c 4e 65 ce 1e be 7b f8 4e 64  N..A..\Ne...{.Nd

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0100:  01 ca 14 80 4a 90 27 82 d7 08 a3 23 14 a7 ed b1  ....J.'....#....

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0110:  24 fd 75 0a 58 10 47 b2 77 b3 51 c3 bc ba b4 88  $.u.X.G.w.Q.....

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0120:  94 ce 15 e7 9b f7 35 fa 69 8e 1c df 58 40 3d 18  ......5.i...X@=.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0130:  66 4d ce 82 41 41 04 cf c7 46 58 9e 4a 14 07 85  fM..AA...FX.J...

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0140:  b3 bf 94 c7 26 9a d1 b1 7a d2 59 fb e7 17 c2 76  ....&...z.Y....v

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0150:  ae 0b 0e 74 98 33 af 9e e2 5d 02 0b 5b e9 79 be  ...t.3...]..[.y.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0160:  4f 93 67 e2 71 32 2c e8 a1 00 6a ef 0e 41 f6 11  O.g.q2,...j..A..

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0170:  e7 bb 19 30 97 8e f8 20 a3 8c 22 c4 ef 73 8d 12  ...0... .."..s..

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0180:  59 a3 f4 90 30 81 16 76 3e 5e e2 d7 22 d9 55 fd  Y...0..v>^..".U.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0190:  c3 c3 1e 01 58 32 f6 c1                          ....X2..

otbr-agent[10949]: repo/library/ssl_srv.c:1346: client hello v3, handshake type: 1

otbr-agent[10949]: repo/library/ssl_srv.c:1355: client hello v3, handshake len.: 396

otbr-agent[10949]: repo/library/ssl_srv.c:1444: dumping 'client hello, version' (2 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1444: 0000:  fe fd                                            ..

otbr-agent[10949]: repo/library/ssl_srv.c:1475: dumping 'client hello, random bytes' (32 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1475: 0000:  00 00 06 01 6c 93 82 71 7a a0 47 c8 63 e5 a1 08  ....l..qz.G.c...

otbr-agent[10949]: repo/library/ssl_srv.c:1475: 0010:  ef 54 8c 76 df e4 a4 54 e6 09 b4 a4 48 46 dc 0a  .T.v...T....HF..

otbr-agent[10949]: repo/library/ssl_srv.c:1493: dumping 'client hello, session id' (0 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1519: dumping 'client hello, cookie' (0 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1532: cookie verification failed

otbr-agent[10949]: repo/library/ssl_srv.c:1578: dumping 'client hello, ciphersuitelist' (6 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1578: 0000:  c0 ff c0 a8 c0 37                                .....7

otbr-agent[10949]: repo/library/ssl_srv.c:1598: dumping 'client hello, compression' (1 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1598: 0000:  00                                               .

otbr-agent[10949]: repo/library/ssl_srv.c:1653: dumping 'client hello extensions' (348 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0000:  00 0a 00 04 00 02 00 17 00 0b 00 02 01 00 01 00  ................

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0010:  01 4a 41 04 03 d0 15 f7 3a 4f 7d b6 98 13 4a 6b  .JA.....:O}...Jk

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0020:  15 a7 f4 b2 08 9b 8a 38 6e 94 18 d9 fd f2 95 73  .......8n......s

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0030:  85 7f 08 6b b7 af f7 c1 8b 5c 3c 70 97 fe 4b 7d  ...k.....\<p..K}

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0040:  16 db 34 a2 b2 bd b1 80 42 c3 12 64 a4 2d 1a 78  ..4.....B..d.-.x

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0050:  c9 98 85 95 41 04 cf c7 46 58 9e 4a 14 07 85 b3  ....A...FX.J....

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0060:  bf 94 c7 26 9a d1 b1 7a d2 59 fb e7 17 c2 76 ae  ...&...z.Y....v.

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0070:  0b 0e 74 98 33 af 9e e2 5d 02 0b 5b e9 79 be 4f  ..t.3...]..[.y.O

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0080:  93 67 e2 71 32 2c e8 a1 00 6a ef 0e 41 f6 11 e7  .g.q2,...j..A...

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0090:  bb 19 30 97 8e f8 20 06 02 ff 07 d1 d0 32 d8 21  ..0... ......2.!

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 00a0:  c5 d4 3c f2 15 56 14 a4 c8 0c c9 90 40 99 1f 62  ..<..V......@..b

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 00b0:  67 c3 81 32 4e 8c ab 41 04 94 5c 4e 65 ce 1e be  g..2N..A..\Ne...

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 00c0:  7b f8 4e 64 01 ca 14 80 4a 90 27 82 d7 08 a3 23  {.Nd....J.'....#

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 00d0:  14 a7 ed b1 24 fd 75 0a 58 10 47 b2 77 b3 51 c3  ....$.u.X.G.w.Q.

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 00e0:  bc ba b4 88 94 ce 15 e7 9b f7 35 fa 69 8e 1c df  ..........5.i...

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 00f0:  58 40 3d 18 66 4d ce 82 41 41 04 cf c7 46 58 9e  X@=.fM..AA...FX.

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0100:  4a 14 07 85 b3 bf 94 c7 26 9a d1 b1 7a d2 59 fb  J.......&...z.Y.

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0110:  e7 17 c2 76 ae 0b 0e 74 98 33 af 9e e2 5d 02 0b  ...v...t.3...]..

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0120:  5b e9 79 be 4f 93 67 e2 71 32 2c e8 a1 00 6a ef  [.y.O.g.q2,...j.

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0130:  0e 41 f6 11 e7 bb 19 30 97 8e f8 20 a3 8c 22 c4  .A.....0... ..".

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0140:  ef 73 8d 12 59 a3 f4 90 30 81 16 76 3e 5e e2 d7  .s..Y...0..v>^..

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0150:  22 d9 55 fd c3 c3 1e 01 58 32 f6 c1              ".U.....X2..

otbr-agent[10949]: repo/library/ssl_srv.c:1714: found supported elliptic curves extension

otbr-agent[10949]: repo/library/ssl_srv.c:1722: found supported point formats extension

otbr-agent[10949]: repo/library/ssl_srv.c:0362: point format selected: 0

otbr-agent[10949]: repo/library/ssl_srv.c:1734: found ecjpake kkpp extension

otbr-agent[10949]: repo/library/ssl_srv.c:0799: trying ciphersuite: TLS-ECJPAKE-WITH-AES-128-CCM-8

otbr-agent[10949]: repo/library/ssl_srv.c:1975: selected ciphersuite: TLS-ECJPAKE-WITH-AES-128-CCM-8

otbr-agent[10949]: repo/library/ssl_tls.c:0082: set_timer to 0 ms

otbr-agent[10949]: repo/library/ssl_srv.c:2009: <= parse client hello

otbr-agent[10949]: repo/library/ssl_srv.c:4016: server state: 2

otbr-agent[10949]: repo/library/ssl_tls.c:2416: => flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2428: <= flush output

otbr-agent[10949]: repo/library/ssl_srv.c:2384: => write server hello

otbr-agent[10949]: repo/library/ssl_srv.c:2390: client hello was not authenticated

otbr-agent[10949]: repo/library/ssl_srv.c:2391: <= write server hello

otbr-agent[10949]: repo/library/ssl_srv.c:2319: => write hello verify request

otbr-agent[10949]: repo/library/ssl_srv.c:2332: dumping 'server version' (2 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:2332: 0000:  fe fd                                            ..

otbr-agent[10949]: repo/library/ssl_srv.c:2355: dumping 'cookie sent' (32 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:2355: 0000:  00 00 00 0f 0f a8 d4 2f 60 0e 64 bd db a3 7e a6  ......./`.d...~.

otbr-agent[10949]: repo/library/ssl_srv.c:2355: 0010:  df b2 fd 32 e2 7c 08 b0 8a 3e b5 da 9c ee 08 36  ...2.|...>.....6

otbr-agent[10949]: repo/library/ssl_tls.c:2701: => write record

otbr-agent[10949]: repo/library/ssl_tls.c:2838: output record: msgtype = 22, version = [254:253], msglen = 47

otbr-agent[10949]: repo/library/ssl_tls.c:2841: dumping 'output record sent to network' (60 bytes)

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0000:  16 fe fd 00 00 00 00 00 00 00 00 00 2f 03 00 00  ............/...

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0010:  23 00 00 00 00 00 00 00 23 fe fd 20 00 00 00 0f  #.......#.. ....

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0020:  0f a8 d4 2f 60 0e 64 bd db a3 7e a6 df b2 fd 32  .../`.d...~....2

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0030:  e2 7c 08 b0 8a 3e b5 da 9c ee 08 36              .|...>.....6

otbr-agent[10949]: repo/library/ssl_tls.c:2416: => flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2435: message length: 60, out_left: 60

otbr-agent[10949]: repo/library/ssl_tls.c:2441: ssl->f_send() returned 60 (-0xffffffc4)

otbr-agent[10949]: repo/library/ssl_tls.c:2460: <= flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2850: <= write record

otbr-agent[10949]: repo/library/ssl_srv.c:2369: <= write hello verify request

otbr-agent[10949]: repo/library/ssl_srv.c:4016: server state: 18

otbr-agent[10949]: repo/library/ssl_tls.c:2416: => flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2428: <= flush output

otbr-agent[10949]: repo/library/ssl_tls.c:6567: <= handshake

otbr-agent[10949]: DTLS handshake failed: -0x6a80!

otbr-agent[10949]: repo/library/ssl_tls.c:7344: => free

otbr-agent[10949]: repo/library/ssl_tls.c:7409: <= free

otbr-agent[10949]: DTLS session destroyed: 4.

otbr-agent[10949]: Trying to accept connection...

otbr-agent[10949]: repo/library/ssl_tls.c:0082: set_timer to 0 ms

otbr-agent[10949]: repo/library/ssl_tls.c:0082: set_timer to 0 ms

otbr-agent[10949]: repo/library/ssl_tls.c:0082: set_timer to 0 ms

otbr-agent[10949]: DTLS handshaking...

otbr-agent[10949]: repo/library/ssl_tls.c:6557: => handshake

otbr-agent[10949]: repo/library/ssl_srv.c:4016: server state: 0

otbr-agent[10949]: repo/library/ssl_tls.c:2416: => flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2428: <= flush output

otbr-agent[10949]: repo/library/ssl_srv.c:4016: server state: 1

otbr-agent[10949]: repo/library/ssl_tls.c:2416: => flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2428: <= flush output

otbr-agent[10949]: repo/library/ssl_srv.c:1190: => parse client hello

otbr-agent[10949]: repo/library/ssl_tls.c:2208: => fetch input

otbr-agent[10949]: repo/library/ssl_tls.c:2269: in_left: 0, nb_want: 5

otbr-agent[10949]: repo/library/ssl_tls.c:2307: f_recv_timeout: 0 ms

otbr-agent[10949]: repo/library/ssl_tls.c:2315: ssl->f_recv(_timeout)() returned 453 (-0xfffffe3b)

otbr-agent[10949]: repo/library/ssl_tls.c:2403: <= fetch input

otbr-agent[10949]: repo/library/ssl_srv.c:1222: dumping 'record header' (13 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1222: 0000:  16 fe fd 00 00 00 00 00 00 00 01 01 b8           .............

otbr-agent[10949]: repo/library/ssl_srv.c:1234: client hello v3, message type: 22

otbr-agent[10949]: repo/library/ssl_srv.c:1243: client hello v3, message len.: 440

otbr-agent[10949]: repo/library/ssl_srv.c:1246: client hello v3, protocol version: [254:253]

otbr-agent[10949]: repo/library/ssl_tls.c:2208: => fetch input

otbr-agent[10949]: repo/library/ssl_tls.c:2269: in_left: 453, nb_want: 453

otbr-agent[10949]: repo/library/ssl_tls.c:2276: <= fetch input

otbr-agent[10949]: repo/library/ssl_srv.c:1328: dumping 'record contents' (440 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0000:  01 00 01 ac 00 01 00 00 00 00 01 ac fe fd 00 00  ................

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0010:  06 01 6c 93 82 71 7a a0 47 c8 63 e5 a1 08 ef 54  ..l..qz.G.c....T

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0020:  8c 76 df e4 a4 54 e6 09 b4 a4 48 46 dc 0a 00 20  .v...T....HF... 

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0030:  00 00 00 0f 0f a8 d4 2f 60 0e 64 bd db a3 7e a6  ......./`.d...~.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0040:  df b2 fd 32 e2 7c 08 b0 8a 3e b5 da 9c ee 08 36  ...2.|...>.....6

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0050:  00 06 c0 ff c0 a8 c0 37 01 00 01 5c 00 0a 00 04  .......7...\....

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0060:  00 02 00 17 00 0b 00 02 01 00 01 00 01 4a 41 04  .............JA.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0070:  03 d0 15 f7 3a 4f 7d b6 98 13 4a 6b 15 a7 f4 b2  ....:O}...Jk....

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0080:  08 9b 8a 38 6e 94 18 d9 fd f2 95 73 85 7f 08 6b  ...8n......s...k

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0090:  b7 af f7 c1 8b 5c 3c 70 97 fe 4b 7d 16 db 34 a2  .....\<p..K}..4.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 00a0:  b2 bd b1 80 42 c3 12 64 a4 2d 1a 78 c9 98 85 95  ....B..d.-.x....

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 00b0:  41 04 cf c7 46 58 9e 4a 14 07 85 b3 bf 94 c7 26  A...FX.J.......&

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 00c0:  9a d1 b1 7a d2 59 fb e7 17 c2 76 ae 0b 0e 74 98  ...z.Y....v...t.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 00d0:  33 af 9e e2 5d 02 0b 5b e9 79 be 4f 93 67 e2 71  3...]..[.y.O.g.q

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 00e0:  32 2c e8 a1 00 6a ef 0e 41 f6 11 e7 bb 19 30 97  2,...j..A.....0.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 00f0:  8e f8 20 06 02 ff 07 d1 d0 32 d8 21 c5 d4 3c f2  .. ......2.!..<.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0100:  15 56 14 a4 c8 0c c9 90 40 99 1f 62 67 c3 81 32  .V......@..bg..2

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0110:  4e 8c ab 41 04 94 5c 4e 65 ce 1e be 7b f8 4e 64  N..A..\Ne...{.Nd

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0120:  01 ca 14 80 4a 90 27 82 d7 08 a3 23 14 a7 ed b1  ....J.'....#....

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0130:  24 fd 75 0a 58 10 47 b2 77 b3 51 c3 bc ba b4 88  $.u.X.G.w.Q.....

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0140:  94 ce 15 e7 9b f7 35 fa 69 8e 1c df 58 40 3d 18  ......5.i...X@=.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0150:  66 4d ce 82 41 41 04 cf c7 46 58 9e 4a 14 07 85  fM..AA...FX.J...

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0160:  b3 bf 94 c7 26 9a d1 b1 7a d2 59 fb e7 17 c2 76  ....&...z.Y....v

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0170:  ae 0b 0e 74 98 33 af 9e e2 5d 02 0b 5b e9 79 be  ...t.3...]..[.y.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0180:  4f 93 67 e2 71 32 2c e8 a1 00 6a ef 0e 41 f6 11  O.g.q2,...j..A..

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 0190:  e7 bb 19 30 97 8e f8 20 a3 8c 22 c4 ef 73 8d 12  ...0... .."..s..

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 01a0:  59 a3 f4 90 30 81 16 76 3e 5e e2 d7 22 d9 55 fd  Y...0..v>^..".U.

otbr-agent[10949]: repo/library/ssl_srv.c:1328: 01b0:  c3 c3 1e 01 58 32 f6 c1                          ....X2..

otbr-agent[10949]: repo/library/ssl_srv.c:1346: client hello v3, handshake type: 1

otbr-agent[10949]: repo/library/ssl_srv.c:1355: client hello v3, handshake len.: 428

otbr-agent[10949]: repo/library/ssl_srv.c:1444: dumping 'client hello, version' (2 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1444: 0000:  fe fd                                            ..

otbr-agent[10949]: repo/library/ssl_srv.c:1475: dumping 'client hello, random bytes' (32 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1475: 0000:  00 00 06 01 6c 93 82 71 7a a0 47 c8 63 e5 a1 08  ....l..qz.G.c...

otbr-agent[10949]: repo/library/ssl_srv.c:1475: 0010:  ef 54 8c 76 df e4 a4 54 e6 09 b4 a4 48 46 dc 0a  .T.v...T....HF..

otbr-agent[10949]: repo/library/ssl_srv.c:1493: dumping 'client hello, session id' (0 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1519: dumping 'client hello, cookie' (32 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1519: 0000:  00 00 00 0f 0f a8 d4 2f 60 0e 64 bd db a3 7e a6  ......./`.d...~.

otbr-agent[10949]: repo/library/ssl_srv.c:1519: 0010:  df b2 fd 32 e2 7c 08 b0 8a 3e b5 da 9c ee 08 36  ...2.|...>.....6

otbr-agent[10949]: repo/library/ssl_srv.c:1537: cookie verification passed

otbr-agent[10949]: repo/library/ssl_srv.c:1578: dumping 'client hello, ciphersuitelist' (6 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1578: 0000:  c0 ff c0 a8 c0 37                                .....7

otbr-agent[10949]: repo/library/ssl_srv.c:1598: dumping 'client hello, compression' (1 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1598: 0000:  00                                               .

otbr-agent[10949]: repo/library/ssl_srv.c:1653: dumping 'client hello extensions' (348 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0000:  00 0a 00 04 00 02 00 17 00 0b 00 02 01 00 01 00  ................

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0010:  01 4a 41 04 03 d0 15 f7 3a 4f 7d b6 98 13 4a 6b  .JA.....:O}...Jk

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0020:  15 a7 f4 b2 08 9b 8a 38 6e 94 18 d9 fd f2 95 73  .......8n......s

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0030:  85 7f 08 6b b7 af f7 c1 8b 5c 3c 70 97 fe 4b 7d  ...k.....\<p..K}

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0040:  16 db 34 a2 b2 bd b1 80 42 c3 12 64 a4 2d 1a 78  ..4.....B..d.-.x

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0050:  c9 98 85 95 41 04 cf c7 46 58 9e 4a 14 07 85 b3  ....A...FX.J....

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0060:  bf 94 c7 26 9a d1 b1 7a d2 59 fb e7 17 c2 76 ae  ...&...z.Y....v.

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0070:  0b 0e 74 98 33 af 9e e2 5d 02 0b 5b e9 79 be 4f  ..t.3...]..[.y.O

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0080:  93 67 e2 71 32 2c e8 a1 00 6a ef 0e 41 f6 11 e7  .g.q2,...j..A...

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0090:  bb 19 30 97 8e f8 20 06 02 ff 07 d1 d0 32 d8 21  ..0... ......2.!

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 00a0:  c5 d4 3c f2 15 56 14 a4 c8 0c c9 90 40 99 1f 62  ..<..V......@..b

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 00b0:  67 c3 81 32 4e 8c ab 41 04 94 5c 4e 65 ce 1e be  g..2N..A..\Ne...

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 00c0:  7b f8 4e 64 01 ca 14 80 4a 90 27 82 d7 08 a3 23  {.Nd....J.'....#

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 00d0:  14 a7 ed b1 24 fd 75 0a 58 10 47 b2 77 b3 51 c3  ....$.u.X.G.w.Q.

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 00e0:  bc ba b4 88 94 ce 15 e7 9b f7 35 fa 69 8e 1c df  ..........5.i...

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 00f0:  58 40 3d 18 66 4d ce 82 41 41 04 cf c7 46 58 9e  X@=.fM..AA...FX.

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0100:  4a 14 07 85 b3 bf 94 c7 26 9a d1 b1 7a d2 59 fb  J.......&...z.Y.

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0110:  e7 17 c2 76 ae 0b 0e 74 98 33 af 9e e2 5d 02 0b  ...v...t.3...]..

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0120:  5b e9 79 be 4f 93 67 e2 71 32 2c e8 a1 00 6a ef  [.y.O.g.q2,...j.

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0130:  0e 41 f6 11 e7 bb 19 30 97 8e f8 20 a3 8c 22 c4  .A.....0... ..".

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0140:  ef 73 8d 12 59 a3 f4 90 30 81 16 76 3e 5e e2 d7  .s..Y...0..v>^..

otbr-agent[10949]: repo/library/ssl_srv.c:1653: 0150:  22 d9 55 fd c3 c3 1e 01 58 32 f6 c1              ".U.....X2..

otbr-agent[10949]: repo/library/ssl_srv.c:1714: found supported elliptic curves extension

otbr-agent[10949]: repo/library/ssl_srv.c:1722: found supported point formats extension

otbr-agent[10949]: repo/library/ssl_srv.c:0362: point format selected: 0

otbr-agent[10949]: repo/library/ssl_srv.c:1734: found ecjpake kkpp extension

otbr-agent[10949]: repo/library/ssl_srv.c:0799: trying ciphersuite: TLS-ECJPAKE-WITH-AES-128-CCM-8

otbr-agent[10949]: repo/library/ssl_srv.c:1975: selected ciphersuite: TLS-ECJPAKE-WITH-AES-128-CCM-8

otbr-agent[10949]: repo/library/ssl_tls.c:0082: set_timer to 0 ms

otbr-agent[10949]: repo/library/ssl_srv.c:2009: <= parse client hello

otbr-agent[10949]: repo/library/ssl_srv.c:4016: server state: 2

otbr-agent[10949]: repo/library/ssl_tls.c:2416: => flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2428: <= flush output

otbr-agent[10949]: repo/library/ssl_srv.c:2384: => write server hello

otbr-agent[10949]: repo/library/ssl_srv.c:2418: server hello, chosen version: [254:253]

otbr-agent[10949]: repo/library/ssl_srv.c:2442: dumping 'server hello, random bytes' (32 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:2442: 0000:  bc 63 cc b0 5c fc ad 17 f0 93 91 f5 18 ba 4d 5b  .c..\.........M[

otbr-agent[10949]: repo/library/ssl_srv.c:2442: 0010:  5d 8b 3b 55 99 6b 0a 24 c8 9a ce 5a 33 0e 35 d9  ].;U.k.$...Z3.5.

otbr-agent[10949]: repo/library/ssl_srv.c:2515: server hello, session id len.: 32

otbr-agent[10949]: repo/library/ssl_srv.c:2516: dumping 'server hello, session id' (32 bytes)

otbr-agent[10949]: repo/library/ssl_srv.c:2516: 0000:  81 fa 2c b2 b5 84 c8 bf 67 55 15 0f 9d f2 63 28  ..,.....gU....c(

otbr-agent[10949]: repo/library/ssl_srv.c:2516: 0010:  90 7a bb ff 52 9e 71 4c f5 9d 66 a6 56 14 67 1e  .z..R.qL..f.V.g.

otbr-agent[10949]: repo/library/ssl_srv.c:2518: no session has been resumed

otbr-agent[10949]: repo/library/ssl_srv.c:2525: server hello, chosen ciphersuite: TLS-ECJPAKE-WITH-AES-128-CCM-8

otbr-agent[10949]: repo/library/ssl_srv.c:2527: server hello, compress alg.: 0x00

otbr-agent[10949]: repo/library/ssl_srv.c:2217: server hello, supported_point_formats extension

otbr-agent[10949]: repo/library/ssl_srv.c:2249: server hello, ecjpake kkpp extension

otbr-agent[10949]: repo/library/ssl_srv.c:2582: server hello, total extension length: 340

otbr-agent[10949]: repo/library/ssl_tls.c:2701: => write record

otbr-agent[10949]: repo/library/ssl_tls.c:2838: output record: msgtype = 22, version = [254:253], msglen = 424

otbr-agent[10949]: repo/library/ssl_tls.c:2841: dumping 'output record sent to network' (437 bytes)

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0000:  16 fe fd 00 00 00 00 00 00 00 01 01 a8 02 00 01  ................

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0010:  9c 00 01 00 00 00 00 01 9c fe fd bc 63 cc b0 5c  ............c..\

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0020:  fc ad 17 f0 93 91 f5 18 ba 4d 5b 5d 8b 3b 55 99  .........M[].;U.

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0030:  6b 0a 24 c8 9a ce 5a 33 0e 35 d9 20 81 fa 2c b2  k.$...Z3.5. ..,.

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0040:  b5 84 c8 bf 67 55 15 0f 9d f2 63 28 90 7a bb ff  ....gU....c(.z..

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0050:  52 9e 71 4c f5 9d 66 a6 56 14 67 1e c0 ff 00 01  R.qL..f.V.g.....

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0060:  54 00 0b 00 02 01 00 01 00 01 4a 41 04 a5 88 07  T.........JA....

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0070:  d2 a6 4c d9 14 75 93 2b 71 aa a1 b8 06 da 26 ed  ..L..u.+q.....&.

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0080:  81 2e a8 b9 82 53 86 c1 a5 0d 11 50 0c 9e 50 38  .....S.....P..P8

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0090:  12 c9 e8 d0 08 e4 d6 45 00 62 46 83 98 b4 6c 74  .......E.bF...lt

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 00a0:  9f ce 72 e2 e0 11 27 49 00 d6 1b 9d df 41 04 c6  ..r...'I.....A..

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 00b0:  32 c7 d4 15 19 56 a0 48 bf f7 ac 1e 43 06 17 4f  2....V.H....C..O

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 00c0:  3b d7 9e f4 25 9c 86 a5 c4 7a 60 8d 3b 12 f6 e9  ;...%....z`.;...

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 00d0:  c5 b6 31 c1 06 74 2b e0 9f e2 f7 5e 7a 0c 4d 91  ..1..t+....^z.M.

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 00e0:  46 9c ad 77 b4 d7 38 23 ff dc 22 38 5f b9 0b 20  F..w..8#.."8_.. 

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 00f0:  5b a1 94 bf 2f 90 4c 71 e4 96 13 4d 9e bf 66 af  [.../.Lq...M..f.

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0100:  ff d4 8b 21 9e f6 8e 6e a6 f1 69 eb e7 1d 64 ed  ...!...n..i...d.

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0110:  41 04 f6 cd ee f7 0e 46 70 e5 ef 64 fa d8 e4 82  A......Fp..d....

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0120:  8c 27 d5 20 9c 68 1e 21 02 6e 21 62 7e 2b 90 95  .'. .h.!.n!b~+..

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0130:  c3 6d fa ef c2 82 c2 7b c9 63 22 70 85 2a a1 96  .m.....{.c"p.*..

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0140:  09 f9 e6 fc c1 74 a3 89 76 c7 c4 f8 b4 45 65 7d  .....t..v....Ee}

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0150:  19 e1 41 04 b0 94 23 ec 01 e3 00 01 d5 31 a9 6c  ..A...#......1.l

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0160:  66 60 22 8e a5 47 a4 08 f2 98 10 50 b2 f3 87 e9  f`"..G.....P....

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0170:  4d 1f 04 f9 c2 4e 8c 3a d7 fc 27 aa e0 aa 30 c9  M....N.:..'...0.

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0180:  7d 9a 49 f4 8b 51 4b e4 a9 7b 24 73 48 84 f0 c9  }.I..QK..{$sH...

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0190:  16 ac 83 44 20 19 5b 89 ef 30 e8 f1 7c b7 6b bd  ...D .[..0..|.k.

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 01a0:  81 70 51 14 34 a0 c4 66 66 bc bc 55 8a 0b 3b a2  .pQ.4..ff..U..;.

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 01b0:  89 e9 e6 b6 85                                   .....

otbr-agent[10949]: repo/library/ssl_tls.c:2416: => flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2435: message length: 437, out_left: 437

otbr-agent[10949]: repo/library/ssl_tls.c:2441: ssl->f_send() returned 437 (-0xfffffe4b)

otbr-agent[10949]: repo/library/ssl_tls.c:2460: <= flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2850: <= write record

otbr-agent[10949]: repo/library/ssl_srv.c:2601: <= write server hello

otbr-agent[10949]: repo/library/ssl_srv.c:4016: server state: 3

otbr-agent[10949]: repo/library/ssl_tls.c:2416: => flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2428: <= flush output

otbr-agent[10949]: repo/library/ssl_tls.c:4157: => write certificate

otbr-agent[10949]: repo/library/ssl_tls.c:4164: <= skip write certificate

otbr-agent[10949]: repo/library/ssl_srv.c:4016: server state: 4

otbr-agent[10949]: repo/library/ssl_tls.c:2416: => flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2428: <= flush output

otbr-agent[10949]: repo/library/ssl_srv.c:2848: => write server key exchange

otbr-agent[10949]: repo/library/ssl_srv.c:2895: mbedtls_ecjpake_write_round_two() returned -19584 (-0x4c80)

otbr-agent[10949]: repo/library/ssl_tls.c:6567: <= handshake

otbr-agent[10949]: DTLS handshake failed: -0x4c80!

otbr-agent[10949]: repo/library/ssl_tls.c:4124: => send alert message

otbr-agent[10949]: repo/library/ssl_tls.c:4125: send alert level=2 message=40

otbr-agent[10949]: repo/library/ssl_tls.c:2701: => write record

otbr-agent[10949]: repo/library/ssl_tls.c:2838: output record: msgtype = 21, version = [254:253], msglen = 2

otbr-agent[10949]: repo/library/ssl_tls.c:2841: dumping 'output record sent to network' (15 bytes)

otbr-agent[10949]: repo/library/ssl_tls.c:2841: 0000:  15 fe fd 00 00 00 00 00 00 00 02 00 02 02 28     ..............(

otbr-agent[10949]: repo/library/ssl_tls.c:2416: => flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2435: message length: 15, out_left: 15

otbr-agent[10949]: repo/library/ssl_tls.c:2441: ssl->f_send() returned 15 (-0xfffffff1)

otbr-agent[10949]: repo/library/ssl_tls.c:2460: <= flush output

otbr-agent[10949]: repo/library/ssl_tls.c:2850: <= write record

otbr-agent[10949]: repo/library/ssl_tls.c:4137: <= send alert message

otbr-agent[10949]: repo/library/ssl_tls.c:7344: => free

otbr-agent[10949]: repo/library/ssl_tls.c:7409: <= free

otbr-agent[10949]: DTLS session destroyed: 4.

[Yakun Xu]

Could you please share your network topology?

From what you posted, it seems the PSKc is not right. Did you form the network through the Web GUI?

[Chris Johnson]

At the moment it's two ot-ncp-ftd devices and one ot-cli-ftd device, and the thread group commissioning app is connected to one of the NCP devices.

The PSKc doesn't look correct, how is it meant to be set? I can't find much in the documentation: 

Network:PSKc = [00000000000000000000000000000000]

I formed the network by setting some properties then forming (on the wpanctl command line):

setprop Network:Key ...

setprop Network:PANID 0x...

setprop Network:XPANID ...

form --channel 25 --type router "mythreadnet"

[Yakun Xu]

Yes, as you posted, the PSKc is not set. You may either set PSKc through wpanctl before forming network or form network through the Web GUI. To calculate the PSKc, you may use the tool compile from border router. Example:

tools/pskc 654321 1122334455667788 OpenThread

It should output the right PSKc:

07708bf664c00858c19269cf10261e5b

And set it through wpanctl like other property:

setprop Network:PSKc --data 07708bf664c00858c19269cf10261e5b

[jbumg...@google.com]

Yakun - 

Does the solution you provided resolve this issue?  https://github.com/openthread/borderrouter/issues/108

It sounds like it does.

[Chris Johnson]

fwiw this didn't resolve the issue and I'm curl'ing the network parameters to the otbr-web server instead for a command line solution.

[Yakun Xu]

Did you set PSKc before forming network? I have been using command line to set PSKc.