Unable to connect to https

[DiegoMartinezRdg]

I upgraded to mongoose 7 and tried to connect to https with no success.

I tried to connect to https://httpbin.org to test it and mg_tls_init says "Failed to load EC private key"

the event listener goes as this:

  static const char* s_tls_ca =
  "-----BEGIN CERTIFICATE-----\n"
  "MIIBqjCCAU+gAwIBAgIUESoOPGqMhf9uarzblVFwzrQweMcwCgYIKoZIzj0EAwIw\n"
  "RDELMAkGA1UEBhMCSUUxDzANBgNVBAcMBkR1YmxpbjEQMA4GA1UECgwHQ2VzYW50\n"
  "YTESMBAGA1UEAwwJVGVzdCBSb290MCAXDTIwMDUwOTIxNTE0NFoYDzIwNTAwNTA5\n"
  "MjE1MTQ0WjBEMQswCQYDVQQGEwJJRTEPMA0GA1UEBwwGRHVibGluMRAwDgYDVQQK\n"
  "DAdDZXNhbnRhMRIwEAYDVQQDDAlUZXN0IFJvb3QwWTATBgcqhkjOPQIBBggqhkjO\n"
  "PQMBBwNCAAQsq9ECZiSW1xI+CVBP8VDuUehVA166sR2YsnJ5J6gbMQ1dUCH/QvLa\n"
  "dBdeU7JlQcH8hN5KEbmM9BnZxMor6ussox0wGzAMBgNVHRMEBTADAQH/MAsGA1Ud\n"
  "DwQEAwIBrjAKBggqhkjOPQQDAgNJADBGAiEAnHFsAIwGQQyRL81B04dH6d86Iq0l\n"
  "fL8OKzndegxOaB0CIQCPwSIwEGFdURDqCC0CY2dnMrUGY5ZXu3hHCojZGS7zvg==\n"
  "-----END CERTIFICATE-----\n";
 
  int MONGOOSE::CLIENT::Process(struct mg_connection* c, int ev, void* ev_data)
  {
	const char* s_post_data = this->postdata.c_str();
	
	switch (ev)
	{			
	case MG_EV_RESOLVE: 
		break;
	case MG_EV_ACCEPT:
		break;	
	case MG_EV_READ:
		break;
	case MG_EV_WRITE:
		break;
	case MG_EV_CLOSE:
		break;

	case MG_EV_WS_OPEN:
	case MG_EV_WS_MSG:
	case MG_EV_WS_CTL:
	case MG_EV_MQTT_CMD:
	case MG_EV_MQTT_MSG:
	case MG_EV_MQTT_OPEN:
	case MG_EV_SNTP_TIME:
	case MG_EV_WAKEUP:
	case MG_EV_USER:
		break;

	case MG_EV_OPEN:
		*(uint64_t*)c->data = mg_millis() + this->timeout;
		break;
	case MG_EV_POLL:
		if (mg_millis() > *(uint64_t*)c->data &&
			(c->is_connecting || c->is_resolving)) {
			mg_error(c, "Connect timeout");
		}
		break;

	case MG_EV_TLS_HS:
			MG_INFO(("TLS handshake done! Sending EHLO again"));
			mg_printf(c, "EHLO myname\r\n");
	break;

	case MG_EV_CONNECT:
	{
		const char* s_url = this->uri.c_str();

		// Connected to server. Extract host name from URL
		struct mg_str host = mg_url_host(s_url);

		if (mg_url_is_ssl(s_url)) {
			struct mg_tls_opts opts = { .ca = mg_str(s_tls_ca),	.name = mg_url_host(s_url) };
			mg_tls_init(c, &opts);
		}

		// Send request
		int content_length = s_post_data ? strlen(s_post_data) : 0;

		mg_printf(c,
			"%s %s HTTP/1.0\r\n"
			"Host: %.*s\r\n"
			"Content-Length: %d\r\n"
			"%s"			
			"\r\n",
			s_post_data ? "POST" : "GET", mg_url_uri(s_url), (int)host.len,
			host.ptr, content_length,extraheaders.c_str());

		mg_send(c, s_post_data, content_length);
	}
	break;
	case MG_EV_HTTP_MSG:
	{
		// Response is received. Print it
		struct mg_http_message* hm = (struct mg_http_message*)ev_data;
		std::string s(hm->body.ptr, hm->body.len);
		msg = s;

		c->is_draining = 1;        // Tell mongoose to close this connection
	
		this->state = WEBCLIENT::STATE::FINISHED;
		break;
	}
	case MG_EV_ERROR:		 
		this->state = WEBCLIENT::STATE::FINISHED;// Error, tell event loop to stop
		break;
	}
	return 1;
}

`

[scaprile]

Please see our documentation, and follow the guidelines in our tutorials.
https://mongoose.ws/documentation/tutorials/http/http-client/
https://mongoose.ws/documentation/tutorials/tls/

You are mixing SMTP, MQTT, and HTTP(S) events.
I can't follow your code (we don't check user code for errors, BTW), from the top of my head, looks like somehow either you've setup for mutual/two-way authentication, or your server is setup for that, and you don't seem to be providing your private credentials.
I can't find the error text you say you get, at least not in HEAD. "Mongoose 7" does not exist, there are 16 releases + HEAD.
I don't see how one of the four possible mg_tls_init()s can issue an error like that. You don't say which TLS lib you are using

Please follow docs above, run tutorials as they are. and if then you have a problem, please sniff your network (using Wireshark, for example) and observe the traffic.
If, after your network inspection, you find an actual issue, feel free to open an issue, fill the issue template, and provide us with pertinent information (including useful network capture files; no snapshots, please attach capture files) in order to reproduce and fix the issue. We don't inspect your code for errors, please send the minimum piece of code that can reproduce the issue

Thank you

PS: If you are a paying customer, please contact Support as per contract, so we can speed things up.

[DiegoMartinezRdg]

Thanks for the reply.

You are mixing SMTP, MQTT, and HTTP(S) events.

Nah, I just have them listed, but as you can see, I'm ignoring SMTP and MQTT with a break.

I can't find the error text you say you get, at least not in HEAD. I don't see how one of the four possible mg_tls_init()s can issue an error like that.

mongoose.c line 9942 MG_ERROR(("Failed to load EC private key"));

"Mongoose 7" does not exist, there are 16 releases + HEAD.

mongoose.h line 23 #define MG_VERSION "7.13" i supposed this is the mongoose version, is the one you can download from https://github.com/cesanta/mongoose and the one referenced in the documentation.
Maybe i have to say that I refer to Mongoose Networking Library 7.13.

You don't say which TLS lib you are using

Im trying to use the mongoose embedded one

Please follow docs above, run tutorials as they are

The cert and use case is copied from the http client example in this repository (only wrapped in a c++ function).

Please follow docs above, run tutorials as they are. and if then you have a problem, please sniff your network (using Wireshark, for example) and observe the traffic.

The program does connect to the target server, but does not establish https protocol. I can't figure why the network can lead to this code failure, as is output from mg_tls_init function.

Please see our documentation

I did several times, and I'm still unable to understand how to fill the struct requested by mg_tls_init options. Is the same code as in https://mongoose.ws/documentation/tutorials/tls/ and

mongoose/examples/zephyr/http-client/src/main.c

Line 34 in 1a35886

mg_tls_init(c, &opts);

We don't inspect your code for errors

I don't want to. I want to understand why I can't use mongoose for https requests.

[scaprile]

We don't inspect your code for errors

I don't want to. I want to understand why I can't use mongoose for https requests.

Please understand that, as our tutorials and example code work, I have to inspect your code to be able to understand why it does not work, and then be able to explain to you why you can't use Mongoose for HTTPS requests, as you say.

Regarding the rest of what you say, please understand that the information is there, and the examples work, and they are explained in tutorials.
If those examples do not work, and/or tutorials have errors, we'll gladly fix and correct them.
If you ask specific questions, we will answer, all you need to do and know is in our docs, tutorials, and examples.
Yes, at first sight your call to TLS init looks fine to me. I don't know what happens in the rest of your code, nor what happens with your server, that is why I asked you to please use the examples as they are and let us know if you have any problems with them.

[scaprile]

"Mongoose 7" does not exist, there are 16 releases + HEAD.

mongoose.h line 23 #define MG_VERSION "7.13" i supposed this is the mongoose version, is the one you can download from https://github.com/cesanta/mongoose and the one referenced in the documentation. Maybe i have to say that I refer to Mongoose Networking Library 7.13.

7.13 is around a year old, we're at 7.16 https://github.com/cesanta/mongoose/releases/tag/7.16
Please use the latest release, or HEAD
Our docs do not reference a particular release, if you've found so, please let us know where

[DiegoMartinezRdg]

Ok, I updated to 7.16.

I took the example from https://github.com/cesanta/mongoose/tree/master/tutorials/tcp/tcp.
As i'm using windows, i changed:

struct mg_tls_opts opts = { .ca = mg_unpacked("/certs/ss_ca.pem"), .cert =mg_unpacked("/certs/ss_client.pem"), .key = mg_unpacked("/certs/ss_client.pem")

with

struct mg_tls_opts opts = { .ca = mg_str(ss_ca_pem), .cert = mg_str(ss_client_pem), .key = mg_str(ss_client_pem)

I got the certs from the data in your repository, and added them as strings. And AS EXPECTED the mg_tls_init fails when trying to connect to https. But now it says "Expected EC PRIVATE KEY or PRIVATE KEY".
Is being compiled with /D "MG_TLS=MG_TLS_BUILTIN"

The example is copied AS IS, but changing the file loading with strings (as I need them to be that way) following the tutorial https://mongoose.ws/documentation/tutorials/tls/#how-to-load-credentials.
Still unable to connect to https.
Using Mongoose 7.16. Compiling in windows using Microsoft Visual Studio Enterprise 2019.

[scaprile]

I can't help you if you don't read the docs I link nor do the things I suggest
The HTTP client example I linked, correctly builds and works in Windows, we build that example every day in several platforms.
You can't take a TCP example and expect for it to work as an HTTP client.
Please follow the guidelines above, do as the guidelines above say.

[DiegoMartinezRdg]

wich HTTPS client example should I follow?