TLS enable || getting TLS handshake error

Q/A
, , ,
#1

Hi All,

I enabled TLS for SBI, for that I replaced “http” with “https” and nrfUri in all configuration files, is it right approach to test TLS? if any wiki document present for TLS then please advise.

After running /test.sh TestRegistration, I’m getting below error, please advise.

2021-04-23T15:19:46Z [INFO][UPF][Util] Set log level: info
2021-04-23T15:19:46Z [ERRO][UPF][Util] gtp5g device named upfgtp created fail
2021-04-23T15:19:46Z [ERRO][UPF][Util] Gtp5gDeviceAdd failed
2021-04-23T15:19:51Z [INFO][NRF][Init] NRF Log level is set to [info] level
2021-04-23T14:53:02Z [INFO][AMF][NGAP][127.0.0.1:9487] Send NG-Setup response
2021/04/23 14:53:03 http: TLS handshake error from 127.0.0.1:46696: tls: first record does not look like a TLS handshake
2021-04-23T14:53:03Z [INFO][SMF][Consumer] SMF register to NRF Error[Put “http://127.0.0.10:8000/nnrf-nfm/v1/nf-instances/b027e397-88a0-43d4-b64b-ce19fd3ef837”: unexpected EOF]
2021/04/23 14:53:05 http: TLS handshake error from 127.0.0.1:46706: tls: first record does not look like a TLS handshake
2021-04-23T14:53:05Z [INFO][SMF][Consumer] SMF register to NRF Error[Put “http://127.0.0.10:8000/nnrf-nfm/v1/nf-instances/b027e397-88a0-43d4-b64b-ce19fd3ef837”: unexpected EOF]
2021/04/23 14:53:07 http: TLS handshake error from 127.0.0.1:46716: tls: first record does not look like a TLS handshake
2021-04-23T14:53:07Z [INFO][SMF][Consumer] SMF register to NRF Error[Put “http://127.0.0.10:8000/nnrf-nfm/v1/nf-instances/b027e397-88a0-43d4-b64b-ce19fd3ef837”: unexpected EOF]
2021/04/23 14:53:09 http: TLS handshake error from 127.0.0.1:46726: tls: first record does not look like a TLS handshake
2021-04-23T14:53:09Z [INFO][SMF][Consumer] SMF register to NRF Error[Put “http://127.0.0.10:8000/nnrf-nfm/v1/nf-instances/b027e397-88a0-43d4-b64b-ce19fd3ef837”: unexpected
2021-04-23T15:20:07Z [INFO][SMF][Consumer] SMF register to NRF Error[Put “http://127.0.0.10:8000/nnrf-nfm/v1/nf-instances/fea96b1d-9b0a-4e19-984d-4e4301bde311”: unexpected EOF]
^C^C2021-04-23T15:20:07Z [INFO][UPF][Util] Removing DNN routes
2021-04-23T15:20:07Z [ERRO][UPF][Util] if_nametoindex
2021-04-23T15:20:07Z [ERRO][UPF][Util] Delete routing rule to device upfgtp failed: 60.60.0.0/24
2021-04-23T15:20:07Z [ERRO][UPF][Util] UPDK epoll deregister error
./test.sh: line 79: 2930 Segmentation fault ${EXEC_UPFNS} ./bin/free5gc-upfd -f config/upfcfg.test.yaml
^C^C2021/04/23 15:20:09 http: TLS handshake

#2

Hi Aniket,
Please replace all nrfUri from “http” to “https” and sbi: scheme: from “http” to “https” in every config yaml.
And go to nssfcfg.yaml, replace every “http” to “https” in nsiList and amfSetList.
If you do test before, you should delete the database.

#3