I am using mbed-client-linux-example trying to connect to another OMA LWM2M leshan server which sends CA/root certificate as the last certificate in the server certificates list during the server certificate handshake (just the server certificate, then the CA/root certificate). The mbed client failed verifying that CA/root certificate or it does not handle it if server chose to send the optional CA/root certificate. Or perhaps I mis-interpreted the debug log as shown below? Or maybe there is a configuration in client codes to handle that case? Hope someone can help me understand my issue and get some ideas how to resolve it. Thanks in advance.
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure(object_name 3/0)
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure - res_name 3/0/0
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name 3/0/0)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure(object_name 3/0)
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure - res_name 3/0/17
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name 3/0/17)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure(object_name 3/0)
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure - res_name 3/0/1
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name 3/0/1)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure(object_name 3/0)
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure - res_name 3/0/2
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name 3/0/2)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name 3/0)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 2
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 2
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name 3)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 0
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 0
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_object_structure()
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_object_structure - Object Instance count 1
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_object_instance_structure()
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_object_instance_structure - ResourceBase count 2
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure(object_name Test/0)
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure - res_name Test/0/D
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name Test/0/D)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure(object_name Test/0)
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource_structure - res_name Test/0/S
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource(name Test/0/S)
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::M2MReportHandler()
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MNsdlInterface::create_nsdl_resource - Creating in NSDL-C result 0
[DBG ][mClt]: M2MBase::set_under_observation - observed: 0
[DBG ][mClt]: M2MBase::set_under_observation - base_type: 1
[DBG ][mClt]: M2MReportHandler::set_under_observation(observed 0)
[DBG ][mClt]: M2MReportHandler::stop_timers()
[DBG ][mClt]: M2MReportHandler::stop_timers() - out
[DBG ][mClt]: M2MReportHandler::set_default_values
[DBG ][mClt]: M2MInterfaceImpl::state_register - create_nsdl_list_structure - success
[DBG ][mClt]: M2MInterfaceImpl::state_register - server_address coap://10.4.10.81:5784
[DBG ][mClt]: M2MInterfaceImpl::state_register - IP address 10.4.10.81 , Port 5784
[DBG ][mClt]: M2MConnectionHandlerPimpl::resolve_server_address
[DBG ][mClt]: M2MConnectionHandlerPimpl::resolve_hostname
[DBG ][mClt]: M2MConnectionHandlerPimpl::bind_socket - port: 52574
[DBG ][mClt]: M2MConnectionHandlerPimpl::resolve_hostname - connected to 10.4.10.81
[DBG ][mClt]: M2MConnectionHandlerPimpl::resolve_server_address - secure
[DBG ][mClt]: M2MConnectionSecurityPimpl::init
[DBG ][mClt]: M2MConnectionSecurityPimpl::init - ret 0
[DBG ][mClt]: M2MConnectionSecurityPimpl::connect
[DBG ][mClt]: set_timer to 0 ms
[DBG ][mClt]: mbedtls_timing_set_delay - intermediate: 0
[DBG ][mClt]: mbedtls_timing_set_delay - final: 0
[DBG ][mClt]: mbedtls_timing_set_delay - stop
[DBG ][mClt]: M2MConnectionSecurityPimpl::start_handshake
[DBG ][mClt]: => handshake
[DBG ][mClt]: client state: 0
[DBG ][mClt]: => flush output
[DBG ][mClt]: <= flush output
[DBG ][mClt]: client state: 1
[DBG ][mClt]: => flush output
[DBG ][mClt]: <= flush output
[DBG ][mClt]: => write client hello
[DBG ][mClt]: client hello, max version: [254:253]
[DBG ][mClt]: client hello, current time: 1468508759
[DBG ][mClt]: dumping ‘client hello, random bytes’ (32 bytes)
[DBG ][mClt]: 0000: 57 87 aa 57 b9 cc 3d 5f 9d 81 2d 14 c8 c4 f0 9d W…W…=_…-…
[DBG ][mClt]: 0010: 83 d6 de e2 91 25 0c f9 67 77 7c ef 6b f3 c4 a0 …%…gw|.k…
[DBG ][mClt]: client hello, session id len.: 0
[DBG ][mClt]: dumping ‘client hello, session id’ (0 bytes)
[DBG ][mClt]: no verify cookie to send
[DBG ][mClt]: client hello, add ciphersuite: c02c
[DBG ][mClt]: client hello, add ciphersuite: c030
[DBG ][mClt]: client hello, add ciphersuite: c0ad
[DBG ][mClt]: client hello, add ciphersuite: c024
[DBG ][mClt]: client hello, add ciphersuite: c028
[DBG ][mClt]: client hello, add ciphersuite: c0af
[DBG ][mClt]: client hello, add ciphersuite: c02b
[DBG ][mClt]: client hello, add ciphersuite: c02f
[DBG ][mClt]: client hello, add ciphersuite: c0ac
[DBG ][mClt]: client hello, add ciphersuite: c023
[DBG ][mClt]: client hello, add ciphersuite: c027
[DBG ][mClt]: client hello, add ciphersuite: c0ae
[DBG ][mClt]: client hello, add ciphersuite: c038
[DBG ][mClt]: client hello, add ciphersuite: c037
[DBG ][mClt]: client hello, add ciphersuite: 00a9
[DBG ][mClt]: client hello, add ciphersuite: c0a5
[DBG ][mClt]: client hello, add ciphersuite: 00af
[DBG ][mClt]: client hello, add ciphersuite: c0a9
[DBG ][mClt]: client hello, add ciphersuite: 00a8
[DBG ][mClt]: client hello, add ciphersuite: c0a4
[DBG ][mClt]: client hello, add ciphersuite: 00ae
[DBG ][mClt]: client hello, add ciphersuite: c0a8
[DBG ][mClt]: client hello, got 23 ciphersuites
[DBG ][mClt]: client hello, compress len.: 1
[DBG ][mClt]: client hello, compress alg.: 0
[DBG ][mClt]: client hello, adding signature_algorithms extension
[DBG ][mClt]: client hello, adding supported_elliptic_curves extension
[DBG ][mClt]: client hello, adding supported_point_formats extension
[DBG ][mClt]: client hello, adding encrypt_then_mac extension
[DBG ][mClt]: client hello, adding extended_master_secret extension
[DBG ][mClt]: client hello, adding session ticket extension
[DBG ][mClt]: client hello, total extension length: 50
[DBG ][mClt]: update timeout value to 1000 millisecs
[DBG ][mClt]: set_timer to 1000 ms
[DBG ][mClt]: mbedtls_timing_set_delay - intermediate: 250
[DBG ][mClt]: mbedtls_timing_set_delay - final: 1000
[DBG ][mClt]: mbedtls_timing_set_delay - start
[DBG ][mClt]: => write record
[DBG ][mClt]: output record: msgtype = 22, version = [254:255], msglen = 150
[DBG ][mClt]: => flush output
[DBG ][mClt]: message length: 163, out_left: 163
[DBG ][mClt]: ssl->f_send() returned 163 (-0xffffff5d)
[DBG ][mClt]: <= flush output
[DBG ][mClt]: <= write record
[DBG ][mClt]: <= write client hello
[DBG ][mClt]: client state: 2
[DBG ][mClt]: => flush output
[DBG ][mClt]: <= flush output
[DBG ][mClt]: => parse server hello
[DBG ][mClt]: => read record
[DBG ][mClt]: => fetch input
[DBG ][mClt]: in_left: 0, nb_want: 13
[DBG ][mClt]: mbedtls_timing_get_delay
[DBG ][mClt]: mbedtls_timing_get_delay - ret 0
[DBG ][mClt]: f_recv_timeout: 1000 ms
[DBG ][mClt]: ssl->f_recv(_timeout)() returned 60 (-0xffffffc4)
[DBG ][mClt]: <= fetch input
[DBG ][mClt]: input record: msgtype = 22, version = [3:3], msglen = 47
[DBG ][mClt]: => fetch input
[DBG ][mClt]: in_left: 60, nb_want: 60
[DBG ][mClt]: <= fetch input
[DBG ][mClt]: handshake message: msglen = 47, type = 3, hslen = 47
[DBG ][mClt]: <= read record
[DBG ][mClt]: received hello verify request
[DBG ][mClt]: <= parse server hello
[DBG ][mClt]: => parse hello verify request
[DBG ][mClt]: dumping ‘server version’ (2 bytes)
[DBG ][mClt]: 0000: fe fd …
[DBG ][mClt]: dumping ‘cookie’ (32 bytes)
[DBG ][mClt]: 0000: a8 c3 56 12 ae eb d9 3f 34 4f 9d 76 f1 e0 84 30 …V…?4O.v…0
[DBG ][mClt]: 0010: 87 9c 9f 27 3f 7b 61 7e d7 a0 c1 94 f0 d6 7c be …'?{a~…|.
[DBG ][mClt]: set_timer to 0 ms
[DBG ][mClt]: mbedtls_timing_set_delay - intermediate: 0
[DBG ][mClt]: mbedtls_timing_set_delay - final: 0
[DBG ][mClt]: mbedtls_timing_set_delay - stop
[DBG ][mClt]: <= parse hello verify request
[DBG ][mClt]: client state: 1
[DBG ][mClt]: => flush output
[DBG ][mClt]: <= flush output
[DBG ][mClt]: => write client hello
[DBG ][mClt]: client hello, max version: [254:253]
[DBG ][mClt]: dumping ‘client hello, random bytes’ (32 bytes)
[DBG ][mClt]: 0000: 57 87 aa 57 b9 cc 3d 5f 9d 81 2d 14 c8 c4 f0 9d W…W…=_…-…
[DBG ][mClt]: 0010: 83 d6 de e2 91 25 0c f9 67 77 7c ef 6b f3 c4 a0 …%…gw|.k…
[DBG ][mClt]: client hello, session id len.: 0
[DBG ][mClt]: dumping ‘client hello, session id’ (0 bytes)
[DBG ][mClt]: dumping ‘client hello, cookie’ (32 bytes)
[DBG ][mClt]: 0000: a8 c3 56 12 ae eb d9 3f 34 4f 9d 76 f1 e0 84 30 …V…?4O.v…0
[DBG ][mClt]: 0010: 87 9c 9f 27 3f 7b 61 7e d7 a0 c1 94 f0 d6 7c be …'?{a~…|.
[DBG ][mClt]: client hello, add ciphersuite: c02c
[DBG ][mClt]: client hello, add ciphersuite: c030
[DBG ][mClt]: client hello, add ciphersuite: c0ad
[DBG ][mClt]: client hello, add ciphersuite: c024
[DBG ][mClt]: client hello, add ciphersuite: c028
[DBG ][mClt]: client hello, add ciphersuite: c0af
[DBG ][mClt]: client hello, add ciphersuite: c02b
[DBG ][mClt]: client hello, add ciphersuite: c02f
[DBG ][mClt]: client hello, add ciphersuite: c0ac
[DBG ][mClt]: client hello, add ciphersuite: c023
[DBG ][mClt]: client hello, add ciphersuite: c027
[DBG ][mClt]: client hello, add ciphersuite: c0ae
[DBG ][mClt]: client hello, add ciphersuite: c038
[DBG ][mClt]: client hello, add ciphersuite: c037
[DBG ][mClt]: client hello, add ciphersuite: 00a9
[DBG ][mClt]: client hello, add ciphersuite: c0a5
[DBG ][mClt]: client hello, add ciphersuite: 00af
[DBG ][mClt]: client hello, add ciphersuite: c0a9
[DBG ][mClt]: client hello, add ciphersuite: 00a8
[DBG ][mClt]: client hello, add ciphersuite: c0a4
[DBG ][mClt]: client hello, add ciphersuite: 00ae
[DBG ][mClt]: client hello, add ciphersuite: c0a8
[DBG ][mClt]: client hello, got 23 ciphersuites
[DBG ][mClt]: client hello, compress len.: 1
[DBG ][mClt]: client hello, compress alg.: 0
[DBG ][mClt]: client hello, adding signature_algorithms extension
[DBG ][mClt]: client hello, adding supported_elliptic_curves extension
[DBG ][mClt]: client hello, adding supported_point_formats extension
[DBG ][mClt]: client hello, adding encrypt_then_mac extension
[DBG ][mClt]: client hello, adding extended_master_secret extension
[DBG ][mClt]: client hello, adding session ticket extension
[DBG ][mClt]: client hello, total extension length: 50
[DBG ][mClt]: update timeout value to 1000 millisecs
[DBG ][mClt]: set_timer to 1000 ms
[DBG ][mClt]: mbedtls_timing_set_delay - intermediate: 250
[DBG ][mClt]: mbedtls_timing_set_delay - final: 1000
[DBG ][mClt]: mbedtls_timing_set_delay - start
[DBG ][mClt]: => write record
[DBG ][mClt]: output record: msgtype = 22, version = [254:255], msglen = 182
[DBG ][mClt]: => flush output
[DBG ][mClt]: message length: 195, out_left: 195
[DBG ][mClt]: ssl->f_send() returned 195 (-0xffffff3d)
[DBG ][mClt]: <= flush output
[DBG ][mClt]: <= write record
[DBG ][mClt]: <= write client hello
[DBG ][mClt]: client state: 2
[DBG ][mClt]: => flush output
[DBG ][mClt]: <= flush output
[DBG ][mClt]: => parse server hello
[DBG ][mClt]: => read record
[DBG ][mClt]: => fetch input
[DBG ][mClt]: in_left: 0, nb_want: 13
[DBG ][mClt]: mbedtls_timing_get_delay
[DBG ][mClt]: mbedtls_timing_get_delay - ret 0
[DBG ][mClt]: f_recv_timeout: 1000 ms
[DBG ][mClt]: ssl->f_recv(_timeout)() returned 1493 (-0xfffffa2b)
[DBG ][mClt]: <= fetch input
[DBG ][mClt]: input record: msgtype = 22, version = [3:3], msglen = 100
[DBG ][mClt]: => fetch input
[DBG ][mClt]: in_left: 1493, nb_want: 113
[DBG ][mClt]: <= fetch input
[DBG ][mClt]: handshake message: msglen = 100, type = 2, hslen = 100
[DBG ][mClt]: <= read record
[DBG ][mClt]: dumping ‘server hello, version’ (2 bytes)
[DBG ][mClt]: 0000: fe fd …
[DBG ][mClt]: server hello, current time: 1468508759
[DBG ][mClt]: dumping ‘server hello, random bytes’ (32 bytes)
[DBG ][mClt]: 0000: 57 87 aa 57 a9 05 88 45 13 a0 84 52 4b 2c c2 ac W…W…E…RK,…
[DBG ][mClt]: 0010: 7c 72 0f 4d 5a a3 7f e3 b6 bc eb c8 bd 12 6c 9b |r.MZ…l.
[DBG ][mClt]: server hello, session id len.: 32
[DBG ][mClt]: dumping ‘server hello, session id’ (32 bytes)
[DBG ][mClt]: 0000: 57 87 aa 57 ee 0c aa 17 26 49 f2 6c b8 44 19 94 W…W…&I.l.D…
[DBG ][mClt]: 0010: 60 6b 2b 69 0f 36 1f 8c 58 d7 1f 4f ba d6 ba 71 `k+i.6…X…O…q
[DBG ][mClt]: no session has been resumed
[DBG ][mClt]: server hello, chosen ciphersuite: c023
[DBG ][mClt]: server hello, compress alg.: 0
[DBG ][mClt]: server hello, chosen ciphersuite: TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256
[DBG ][mClt]: server hello, total extension length: 16
[DBG ][mClt]: unknown extension found: 20 (ignoring)
[DBG ][mClt]: unknown extension found: 19 (ignoring)
[DBG ][mClt]: found supported_point_formats extension
[DBG ][mClt]: <= parse server hello
[DBG ][mClt]: client state: 3
[DBG ][mClt]: => flush output
[DBG ][mClt]: <= flush output
[DBG ][mClt]: => parse certificate
[DBG ][mClt]: => read record
[DBG ][mClt]: => fetch input
[DBG ][mClt]: next record in same datagram, offset: 113
[DBG ][mClt]: in_left: 1380, nb_want: 13
[DBG ][mClt]: <= fetch input
[DBG ][mClt]: input record: msgtype = 22, version = [3:3], msglen = 1006
[DBG ][mClt]: => fetch input
[DBG ][mClt]: in_left: 1380, nb_want: 1019
[DBG ][mClt]: <= fetch input
[DBG ][mClt]: handshake message: msglen = 1006, type = 11, hslen = 1006
[DBG ][mClt]: <= read record
[DBG ][mClt]: peer certificate #1:
[DBG ][mClt]: cert. version : 1
[DBG ][mClt]: serial number : B2:DE:4B:32:DF:1A:63:4C
[DBG ][mClt]: issuer name : C=CH, ST=Some-State, L=Zurich, O=ETH Zurich Examples, CN=Cf root
[DBG ][mClt]: subject name : C=US, ST=CA, L=Alameda, O=S&C Electric, OU=Enterprise Software, CN=dm_a
[DBG ][mClt]: issued on : 2016-05-26 01:51:27
[DBG ][mClt]: expires on : 2017-05-26 01:51:27
[DBG ][mClt]: signed using : ECDSA with SHA256
[DBG ][mClt]: EC key size : 256 bits
[DBG ][mClt]: value of ‘crt->eckey.Q(X)’ (256 bits) is:
[DBG ][mClt]: de af 5e 8f 1b 8d 26 df 35 11 74 70 c5 1d 2c 29
[DBG ][mClt]: d3 0e 9e 73 9d 29 42 9f 6b 4d be 76 eb d4 5a 2a
[DBG ][mClt]: value of ‘crt->eckey.Q(Y)’ (255 bits) is:
[DBG ][mClt]: 59 f1 69 23 82 18 9f 26 59 0c 7d 77 24 c0 ad f2
[DBG ][mClt]: a9 69 d4 b7 5a 8c cd ea c1 98 f7 a6 b3 01 6c 53
[DBG ][mClt]: peer certificate #2:
[DBG ][mClt]: cert. version : 3
[DBG ][mClt]: serial number : D7:63:D7:76:DD:97:3A:CA
[DBG ][mClt]: issuer name : C=CH, ST=Some-State, L=Zurich, O=ETH Zurich Examples, CN=Cf root
[DBG ][mClt]: subject name : C=CH, ST=Some-State, L=Zurich, O=ETH Zurich Examples, CN=Cf root
[DBG ][mClt]: issued on : 2014-11-15 14:33:38
[DBG ][mClt]: expires on : 2015-11-15 14:33:38
[DBG ][mClt]: signed using : ECDSA with SHA256
[DBG ][mClt]: EC key size : 256 bits
[DBG ][mClt]: basic constraints : CA=true
[DBG ][mClt]: value of ‘crt->eckey.Q(X)’ (255 bits) is:
[DBG ][mClt]: 45 7f 24 e3 7b 14 98 e5 0a 60 d3 1a 9a 9b 63 ce
[DBG ][mClt]: e2 28 d6 21 b6 c7 40 51 07 2f 39 9d d7 61 88 9b
[DBG ][mClt]: value of ‘crt->eckey.Q(Y)’ (255 bits) is:
[DBG ][mClt]: 41 e5 2a 8d 48 5c 86 99 60 0a f7 fb 59 fa e3 e2
[DBG ][mClt]: d5 f2 63 ab 69 b9 d2 96 7f 8d 91 5a 85 4e de a0
[DBG ][mClt]: x509_verify_cert() returned -9984 (-0x2700)
[DBG ][mClt]: <= parse certificate
[DBG ][mClt]: <= handshake