Connection failed on Windows 7

[mlach9u]

Hello. I need your helps.

I'm developing MQTT client on Windows.

But MQTT client connection failed on Windows 7.
It worked on other Windows(8, 8.1, 10, 11).

Fleet provisioning sample is same.

1. At first, error is AWS_IO_SOKCET_CLOSED, socket is closed. like this:
   
2. Updated Windows 7 with KB3140245 and modified registry according to this.
3. Error is changed to AWS_IO_TLS_ERROR_NEGOTIATION_FAILURE, TLS(SSL) negotiation failed like this:
   

Question is.. What can I do for this situation?

Thank you very much for your teaching.

[jmklix]

Windows 7 is past end of life and not officially supported. That being said I will try to help you if I can.

Can you enable the cloudwatch logs to see if that tells us more about the errors that you are getting? Also adding more context via more detailed trace logs would be helpful (make sure to remove any sensitive info from the logs)

[mlach9u]

Thank you very much for your help.

Logs are from fleet-provisioning sample.

1. Socket is closed log

Connecting...
Connection failed with error aws-c-io: AWS_IO_SOCKET_CLOSED, socket is closed.
[ERROR] [2022-12-28T02:04:34Z] [00000388] [mqtt-client] - id=005657C0: Connection is not open, and may not be closed

2. Negotiation failed log

Connecting...
[ERROR] [2022-12-28T01:56:31Z] [00000e88] [socket] - id=005F4220 handle=00000164: connect completion triggered with error -1073741252
[ERROR] [2022-12-28T01:56:31Z] [00000e88] [socket] - id=005F4220 handle=00000164: connection error with code 1049
[ERROR] [2022-12-28T01:56:31Z] [00000e88] [tls-handler] - id=006080E0: failed to load a certificate chain engine with SECURITY_STATUS 0. Most likely, the configured CA is corrupted.
Connection failed with error aws-c-io: AWS_IO_TLS_ERROR_NEGOTIATION_FAILURE, TLS (SSL) negotiation failed
[ERROR] [2022-12-28T01:56:31Z] [00001230] [mqtt-client] - id=005E7A38: Connection is not open, and may not be closed

Sample ran like this:

fleet-provisioning.exe --endpoint <prefix>-ats.iot.<region>.amazonaws.com --ca_file <path-to-AmazonRootCA1.pem> --cert <path-to-cert-path> --key <path-to-key-path> --template_name <name> --template_parameters <parameters> --client_id <id>

I would appreciate it if you could tell me the additional log needed.

[jmklix]

Just making sure, but did you make sure to replace all of the stuff in the brackets <> when running the sample?

As mentioned above can you include the cloudwatch logs? There is something wrong with the negotiation between the server and using cloudwatch logs is the only way to debug this.

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.