CSecureSocket::StartClientHandShake returns -46

[ejuanillo]

Hi everybody,

I'm having some troubles to make a secure connection.
This is how i prepare secure connection:

iTlsSocket = CSecureSocket::NewL(iSocket,_L("TLS1.0"));
iTlsSocket->FlushSessionCache();
iTlsSocket->SetDialogMode(EDialogModeAttended);
iTlsSocket->SetOpt(KSoSSLDomainName,KSolInetSSL,host);
iTlsSocket->StartClientHandshake(iStatus);
SetActive();

I'm using ActiveObject.

On emulator it works, but when a i try to connect to a server in a real device, RunL method return error -46 (KErrPermissionDenied).
When i'm trying to connect to the same server manually via Symbian Web Explorer it ask me about starting the secure connection, and then it connects.

i was be able to connect to my own local web server via WIFI installing self-signed server certificate on device. It says that cerficate isn't secure but it lets me go ahead.
However when i try to connect to a real secure server this code fails with error -46.

am i missing something?
I'm testing with Nokia C7-00.
i tested this code a year ago on S60 3rd Edition device and i don't remembee have this problem.
do i have to make changes to get this work on Symbian^3 devices?

Any idea?

Thanks!!

[wizard_hu_]

Check the logfile of the emulator (http://www.developer.nokia.com/Commu...i/Epocwind.out) for platform security warnings.
There is a chance that the SetOpt failed already, generally it is a good idea to always check return codes of methods having one.

[ejuanillo]

Hi wizard_hu,
Thanks for your answer.

SetOpt returns KErrNone (i'm checking it now).
And about Epocwind.out ... i don't see any secutity warnings.
However it's true that i don't know exactly what to look for in this file.
I've search for "security", "warning", "error", "sec", "err", "war", etc. and i didn't see any that could explain connection problem in device.

What is getting me crazy is why works with an untrusted server (with security warnings that user must accept) in my LAN, and with a trusted server like "versign.es" StartClientHandshake returns KErrPermissionDenied.
And why when i start a secure connection (https) with the bult-in phone web explorer it always ask me "Start secure connection?"
Maybe i'm skipping this step programatically and that's the origin of KErrPermissionDenied.
However i don´t see where i can enable user interaction but CSecureSocket::SetDialogMode()

Thanks for your help

[ejuanillo]

Ok, i read the link you provided.
Now i know what to look for :P
i'll tell you if i found any warning in Epocwind.out
Thanks

[ejuanillo]

No luck
No Platform Security warnings

[ejuanillo]

Solved!

Searching if this was a C7-00 or Symbian^3 known issue i found this:
http://www.developer.nokia.com/Commu...-(N8)-devices.
(Sorry if it's forbidden to place external links on this forum)

This says you must add "ReadUserData" capability.
However i never read this was a requisite to use CSecureSocket.
Maybe it's written somewhere so i wont say its undocumented.

By the way, adding ReadUserData capability solves the problem

[wizard_hu_]

platsec is a good keyword when searching for messages in the file.
Do you have WriteDeviceData and NetworkServices capabilites? WriteDeviceData is required for this SetOpt magic as I remember, and NetworkServices is certainly required for networking.

EDIT: external links are not forbidden, just boardreader simply steals content and presents it in a less-readable form in addition (at least these are my personal opinions), the discussion actually happened on this site.
EDIT2: nice finding by the way.