esp-va-sdk icon indicating copy to clipboard operation
esp-va-sdk copied to clipboard

Voice Assistance - Failed to verify peer certificate!

Open yusufk opened this issue 3 years ago • 11 comments

Getting the following error on console:

E (202374) esp-tls: Failed to open new connection
E (202384) [sh2lib]: [sh2-connect] esp-tls connection failed
E (202384) [grpc_http_transport]: Failed to connect
I (204384) [grpc_http_transport]: Connecting to server: https://embeddedassistant.googleapis.com
E (204724) esp-tls-mbedtls: mbedtls_ssl_handshake returned -0x2700
I (204724) esp-tls-mbedtls: Failed to verify peer certificate!
I (204724) esp-tls-mbedtls: verification info:   ! The certificate is not correctly signed by the trusted CA

yusufk avatar Oct 19 '21 18:10 yusufk

I have the same problem. Did you find the solution?

s95i avatar Dec 14 '21 13:12 s95i

Unfortunately not.

On Tue, Dec 14, 2021 at 3:07 PM s95i @.***> wrote:

I have the same problem. Did you find the solution?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/espressif/esp-va-sdk/issues/161#issuecomment-993521461, or unsubscribe https://github.com/notifications/unsubscribe-auth/AADCVK4NZGU5C2J7BTXZXRLUQ46SRANCNFSM5GJ2GKHQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

yusufk avatar Dec 14 '21 13:12 yusufk

Hi @yusufk could you please tell which app are you trying and provide complete logs for the same? It appears that we might need to update some certificate in our library.

avsheth avatar Dec 15 '21 06:12 avsheth

Hi,

I believe it was the alexa app I was trying at the time.

Regards Yusuf

On Wed, Dec 15, 2021 at 8:48 AM Amit Sheth @.***> wrote:

Hi @yusufk https://github.com/yusufk could you please tell which app are you trying and provide complete logs for the same? It appears that we might need to update some certificate in our library.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/espressif/esp-va-sdk/issues/161#issuecomment-994380118, or unsubscribe https://github.com/notifications/unsubscribe-auth/AADCVKYEB5EA5JZ467KJWR3URA25FANCNFSM5GJ2GKHQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

yusufk avatar Dec 15 '21 14:12 yusufk

Hi @avsheth, I had the same issue with the GVA app.

s95i avatar Dec 15 '21 18:12 s95i

I believe this is GVA app and not the Alexa app. We will check and get back.

avsheth avatar Dec 16 '21 07:12 avsheth

You're right, apologies.

On Thu, Dec 16, 2021 at 9:11 AM Amit Sheth @.***> wrote:

I believe this is GVA app and not the Alexa app. We will check and get back.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/espressif/esp-va-sdk/issues/161#issuecomment-995501391, or unsubscribe https://github.com/notifications/unsubscribe-auth/AADCVK5NXLZ4XJ4PAEQCIVTURGGJ5ANCNFSM5GJ2GKHQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

yusufk avatar Dec 16 '21 14:12 yusufk

Hi, @avsheth, Is there any way to add a new certificate to solve this issue?

s95i avatar Jan 11 '22 11:01 s95i

I'm still having this issue does anyone have a solution? I believe that the problem is that the CA certifications are hardcoded into the lib files (found at esp-va-sdk/voice_assistant/*.a), I found an older google CA certification in them, however i believe that they're expired. Could you please recompile these libraries with the new CA certificates? @avsheth Thanks

andrewwinter avatar Jan 18 '22 14:01 andrewwinter

Hi @andrewwinter Sorry for the delay. We will provide updated library by next week.

avsheth avatar Feb 10 '22 06:02 avsheth

Hi @avsheth , When can we expect the updated library? Thanks

s95i avatar Mar 01 '22 12:03 s95i