CSecureSocket::StartClientHandshake fails with -7510

[mtaponen]

Hi

I was making a TLS connection with S60 3 FP1 - sdk and stumbled onto this:

I keep getting KErrSSLAlertUnexpectedMessage both in emulator & HW.

So the socket connects nicely over Winsock in emulator. Then the StartClienthandshake always comes up with status -7510.
There were some posting on other error codes ans older platform versions but if someone has actually asked this please point me to the answer

Just in case I missed/messed something bad - here is stripped down example code which I can be triggered by constucting the object from UI your facourite event - port & address is hardcoded:

CSecureConnector::CSecureConnector() :   CActive(CActive::EPriorityStandard)
{
}

CSecureConnector::~CSecureConnector()
{
}

CSecureConnector* CSecureConnector::CSecureConnector::NewL()
{
	CSecureConnector* self = new (ELeave) CSecureConnector();
	CleanupStack::PushL(self);
	self->ConstructL();	
	CleanupStack::Pop();
	return self;
}

void CSecureConnector::ConstructL()
{

	CActiveScheduler::Add(this);

            CAknInformationNote* note = new ( ELeave ) CAknInformationNote;

          
	        
		    TNameEntry nameEntry;
			TInt err;
	

	    iPrefs.SetDialogPreference( ECommDbDialogPrefPrompt );    

		err = iSession.Connect();        
		RDebug::Print(_L("iSession.Connect %d"), err);
	    RHostResolver resolver;
		
		if (err == KErrNone)
			{
	   
		    iConnection.Open( iSession );
		    iConnection.Start(iPrefs);       
		    //
			err = resolver.Open( iSession, KAfInet, KProtocolInetUdp, iConnection ) ;    
			iErrorText.Format(_L("resolver.Open %d"), err);
			RDebug::Print(iErrorText);
			}
		
		if (err == KErrNone)
			{
	   	    err = resolver.GetByName( _L("myhost.here"), nameEntry );
			iErrorText.Format(_L("resolver.GetByName %d"), err);	
	   		RDebug::Print(iErrorText);
			}

		if (err == KErrNone)
			{
	    	TInt32 aAddr = TInetAddr::Cast( nameEntry().iAddr ).Address();
		    iAddress.SetPort( 447 ); // Put your favourite SSL port here
		    iAddress.SetAddress( aAddr );
		    RDebug::Print(_L("CXmppConnection::ResolveHostL  aAddr = 0x%x"), aAddr);
		    resolver.Close();    
		    err = iSocket.Open( iSession, KAfInet, KSockStream, KProtocolInetTcp, iConnection );
	    	iErrorText.Format(_L("iSocket.Open %d"), err);
	    	RDebug::Print(iErrorText);
	    	}

		if (err == KErrNone)
			{
   
		    RDebug::Print(_L("iSocket.Connect"));
		    iSocket.Connect( iAddress, iStatus );
		    RDebug::Print(_L("iSocket.Connect ok"));
		    User::WaitForRequest(iStatus);	// I know this is not good practice here I liked to simplify this down. 
                                                                   //So please make active object with states as I'm doing with my real implementation
			iErrorText.Format(_L("iSocket.Connect status %d "), iStatus);
			RDebug::Print(iErrorText);
	    	
			}
			if (iStatus == KErrNone)
					{
					iSecureSocket = CSecureSocket::NewL(iSocket, _L("TLS1.0") );
			 		RDebug::Print(_L("CSecureSocket::NewL ('TLS1.0') ok"));
			      	iSecureSocket->SetOpt(KSoSSLDomainName,KSolInetSSL, _L8(""));
			    	iSecureSocket->SetDialogMode(EDialogModeAttended);
			    	RDebug::Print(_L("SecureSocket->SetOpt ok"));
			    	iSecureSocket->StartClientHandshake(iStatus);
			    	SetActive();
					}
		note->ExecuteLD( iErrorText);
			
}

void CSecureConnector::RunL()
{
    CAknInformationNote* note = new ( ELeave ) CAknInformationNote;
		
	iErrorText.Format(_L("iSecureSocket->StartClientHandshake %d"), iStatus);
	RDebug::Print(iErrorText);
		 
 
    note->ExecuteLD( iErrorText);
	
	
}

void CSecureConnector::DoCancel()
{
	
}

And here is the class definition:

class CSecureConnector : public CActive
{
	public:
		static CSecureConnector* NewL();
		void RunL();
		~CSecureConnector();
		
		
	private:
		void DoCancel();
		void ConstructL();
		CSecureConnector();	
		
	
	protected:
		// data
		
		RSocketServ iSession;
	    RSocket iSocket;
    	CSecureSocket* iSecureSocket;
	    RConnection iConnection;
	    TCommDbConnPref iPrefs;
	    TInetAddr iAddress;
	    TBuf<50> iErrorText;
};

<edit - fixed a small typo in the code>

[mtaponen]

Ok - knew this was going to happen.

2 hrs after the post I discovered (I think) the problem residing on the server side. I changed the authentication settins on the server and this problem was resolved.
So for all of you there - try with something that you know supports TLS :blushes:

I leave my question in place in case someone would stumble on the same issue later and would use search

[savvy]

Hi

I have been facing the same problem. I am trying to connect to a webserver which resides behind a Microsoft ISA server.

I am making calls to the web server via SOAP web method calls using gSOAP library. I am using Symbian secure sockets to make the secure connections.

When the soap connect happens, I open the symbian secure socket and finally when StartClientHandshake is executed, it returns an error -7510 which is KErrSSLAlertUnexpectedMessage.

I found you faced the same peorblem and fixed it by setting things right on the server side. Could u please more specific about the answer.

Thank you for any help

[bmy]

I face the the same problem too .and How do you solve this problem?
After the TLs negotiation with the function of StartClientHandshake,the method of runL() get nothing back then my application is still waiting ?
can you help me ?

[wizard_hu_]

Unfortunately this can happen. I experience the same with ejabberd (just a guess from 'TLS negotiation').
Your application is not waiting after that. TLS handshaking failed and you can close the socket.

[sanjayk84]

Hi all
i am getting this type of error, to making secure connection

KErrSSLAlertUnexpectedMessage -7510

when start StartClientHandshake

and the same port and Ip are use to other devices (i-phone ,Andorra, blackberry, windows ) are connected successfully.
i am not getting what the problem with symbain devices..