[QUESTION] KVS Streamer: Unable to create IoT Credential Provider #1003

yousafbinfarrukh · 2023-04-18T15:11:59Z

yousafbinfarrukh
Apr 18, 2023

Hi.
I am following the tutorial given here

I have done the same steps for two different accounts using two different devices. However, one of these devices is working perfectly fine but the other device is unable to get credentials from Credential Provider.

Here are the logs

Setting pipeline to PAUSED ...
log4cplus:ERROR could not open file ../kvs_log_configuration
DEBUG - Creating IoT auth callbacks.
2023-04-18 20:04:54 [548355113024] 2023-04-18 15:05:09 ERROR   blockingCurlCall(): Curl perform failed for url https://cecpdlaohn49k.credentials.iot.eu-west-1.amazonaws.com/role-aliases/KvsCameraIoTRoleAlias/credentials with result Timeout was reached : Resolving timed out after 3000 milliseconds 
ERROR - Unable to create Iot Credential provider. Error status: 0x15000025
ERROR: from element /GstPipeline:pipeline0/GstKvsSink:kvssink0: Could not initialize supporting library.
Additional debug info:
/home/pi/amazon-kinesis-video-streams-producer-sdk-cpp/src/gstreamer/gstkvssink.cpp(1402): gst_kvs_sink_change_state (): /GstPipeline:pipeline0/GstKvsSink:kvssink0:
Failed to init kvs producer. Error: Unable to create Iot Credential provider. Error status: 0x15000025
ERROR: pipeline doesn't want to preroll.
Failed to set pipeline to PAUSED.
2023-04-18 20:05:09 [548355113024] Setting pipeline to NULL 
Freeing pipeline

Any help would be appreciated. :)

Answered by disa6302

Apr 20, 2023

Can you try this?

gst-launch-1.0 v4l2src do-timestamp=TRUE device=/dev/video60 ! videoconvert ! video/x-raw,format=I420,width=640,height=480,framerate=30/1 ! x264enc bframes=0 key-int-max=45 bitrate=500 ! video/x-h264,stream-format=avc,alignment=au,profile=baseline ! kvssink stream-name="camera_01" storage-size=512 iot-certificate="iot-certificate,connection-timeout=(string)15,completion-timeout=(string)20,endpoint=AAA.credentials.iot.eu-west-1.amazonaws.com,cert-path=./certificate.pem,key-path=./private.pem.key,ca-path=./cacert.pem,role-aliases=KvsCameraIoTRoleAlias" aws-region="eu-west-1"

View full answer

niyatim23 · 2023-04-18T15:40:16Z

niyatim23
Apr 18, 2023
Maintainer

Hi @yousafbinfarrukh, which release are you using?

1 reply

yousafbinfarrukh Apr 18, 2023
Author

I have cloned the repository and built it. It's latest I believe. Didn't switch to any release.

sirknightj · 2023-04-18T16:32:31Z

sirknightj
Apr 18, 2023
Maintainer

Hey @yousafbinfarrukh,
Looking at the logs, it mentions that curl timed out after 3s. Could you try making the curl call manually and verifying that curl works on the device?

curl -H "x-amzn-iot-thingname:your-thing-name" \
  --cert your-certificate-name.pem \
  --key your-private-key-name.private.pem.key \
  --cacert cacert.pem \
  https://your-credentials-endpoint/role-aliases/your-role-alias/credentials

source

3 replies

yousafbinfarrukh Apr 18, 2023
Author

Curl works perfectly. I have got the results for the following curl command. It saves my credentials into the token.json file

curl -H "x-amzn-iot-thingname:AAA" --cert certificate.pem --key private.pem.key https://AAA.credentials.iot.eu-west-1.amazonaws.com/role-aliases/KvsCameraIoTRoleAlias/credentials --cacert ./cacert.pem > token.json

niyatim23 Apr 18, 2023
Maintainer

Is the curl call from producer failing all the time, or is this a single instance? If it is a single instance, can you please try again as it could have been something with your network

yousafbinfarrukh Apr 18, 2023
Author

Curl call from producer fails all the time while the manual curl command is always successful.

yousafbinfarrukh · 2023-04-19T16:52:13Z

yousafbinfarrukh
Apr 19, 2023
Author

@niyatim23 @sirknightj
Can you tell me please how can I increase the timeout to avoid timeout?

4 replies

sirknightj Apr 19, 2023
Maintainer

Check out this recently-added feature in this PR #992 (develop branch). We haven't made an official release with this change yet.

You can either modify the constants

amazon-kinesis-video-streams-producer-sdk-cpp/src/gstreamer/gstkvssink.cpp

Lines 113 to 116 in 49cc209

    
           #define DEFAULT_SERVICE_CONNECTION_TIMEOUT_SEC 5 
        
           #define DEFAULT_SERVICE_COMPLETION_TIMEOUT_SEC 10 
        
           #define DEFAULT_IOT_CONNECTION_TIMEOUT_SEC 3 
        
           #define DEFAULT_IOT_COMPLETION_TIMEOUT_SEC 5

or pass the new iot-certificate options into your gstreamer pipeline:

amazon-kinesis-video-streams-producer-sdk-cpp/src/gstreamer/Util/KvsSinkUtil.h

Lines 17 to 18 in 49cc209

    
           #define IOT_CONNECTION_TIMEOUT "connection-timeout" 
        
           #define IOT_COMPLETION_TIMEOUT "completion-timeout"

yousafbinfarrukh Apr 19, 2023
Author

Thank you for your response. Can you please guide me the use case to pass iot-certificate option in the following pipeline? I want to keep the connection timeout to 15 seconds

gst-launch-1.0 v4l2src do-timestamp=TRUE device=/dev/video60 ! videoconvert ! video/x-raw,format=I420,width=640,height=480,framerate=30/1 ! x264enc bframes=0 key-int-max=45 bitrate=500 ! video/x-h264,stream-format=avc,alignment=au,profile=baseline ! kvssink stream-name="camera_01" storage-size=512 iot-certificate="iot-certificate,endpoint=XXX.credentials.iot.eu-west-1.amazonaws.com,cert-path=./certificate.pem,key-path=./private.pem.key,ca-path=./cacert.pem,role-aliases=KvsCameraIoTRoleAlias" aws-region="eu-west-1"

sirknightj Apr 20, 2023
Maintainer

Add the new options to your existing iot-certificate parameter.

... ! kvssink iot-certificate="connection-timeout=15,completion-timeout=20,endpoint=...,..."

yousafbinfarrukh Apr 20, 2023
Author

Thanks for the response @sirknightj. I have changed the constants DEFAULT_IOT_CONNECTION_TIMEOUT_SEC to 0.3 seconds and DEFAULT_IOT_COMPLETION_TIMEOUT_SEC to 1 second here:

amazon-kinesis-video-streams-producer-sdk-cpp/src/gstreamer/gstkvssink.cpp

Lines 115 to 116 in 63537aa

    
           #define DEFAULT_IOT_CONNECTION_TIMEOUT_SEC 3 
        
           #define DEFAULT_IOT_COMPLETION_TIMEOUT_SEC 5

I use the following pipeline:

gst-launch-1.0 v4l2src do-timestamp=TRUE device=/dev/video60 ! videoconvert ! video/x-raw,format=I420,width=640,height=480,framerate=30/1 ! x264enc bframes=0 key-int-max=45 bitrate=500 ! video/x-h264,stream-format=avc,alignment=au,profile=baseline ! kvssink stream-name="camera_01" storage-size=512 iot-certificate="iot-certificate,endpoint=cecpdlaohn49k.credentials.iot.eu-west-1.amazonaws.com,cert-path=./certificate.pem,key-path=./private.pem.key,ca-path=./cacert.pem,role-aliases=KvsCameraIoTRoleAlias" aws-region="eu-west-1"

In response to the above pipeline, I get the following output which makes sense as the timeout is set to a very low value. The error looks a bit different, but it makes sense.

Setting pipeline to PAUSED ...
log4cplus:ERROR could not open file ../kvs_log_configuration
INFO - Logger config being used: ../kvs_log_configuration
2023-04-20 22:25:41 [548387647552] INFO - Using iot credential provider within KVS sink for camera_01
2023-04-20 22:25:41 [548387647552] DEBUG - Creating IoT auth callbacks.
2023-04-20 22:25:41 [548387647552] 2023-04-20 17:25:41 ERROR   blockingCurlCall(): Curl perform failed for url https://cecpdlaohn49k.credentials.iot.eu-west-1.amazonaws.com/role-aliases/KvsCameraIoTRoleAlias/credentials with result Timeout was reached : Failed to connect to cecpdlaohn49k.credentials.iot.eu-west-1.amazonaws.com port 443: Connection timed out 
ERROR - Unable to create Iot Credential provider. Error status: 0x16000001
ERROR: from element /GstPipeline:pipeline0/GstKvsSink:kvssink0: Could not initialize supporting library.
Additional debug info:
/home/pi/Desktop/streamer/amazon-kinesis-video-streams-producer-sdk-cpp/src/gstreamer/gstkvssink.cpp(1615): gst_kvs_sink_change_state (): /GstPipeline:pipeline0/GstKvsSink:kvssink0:
Failed to init kvs producer. Error: Unable to create Iot Credential provider. Error status: 0x16000001
ERROR: pipeline doesn't want to preroll.
Failed to set pipeline to PAUSED.
2023-04-20 22:25:41 [548387647552] Setting pipeline to NULL ...
Freeing pipeline ...

Now I want to set the timeout in my pipeline to increase the timeout to 15 seconds. And for that I use the following pipeline to set connection-timeout and completion-timeout parameters as mentioned by you:

gst-launch-1.0 v4l2src do-timestamp=TRUE device=/dev/video60 ! videoconvert ! video/x-raw,format=I420,width=640,height=480,framerate=30/1 ! x264enc bframes=0 key-int-max=45 bitrate=500 ! video/x-h264,stream-format=avc,alignment=au,profile=baseline ! kvssink stream-name="camera_01" storage-size=512 iot-certificate="iot-certificate,connection-timeout=15,completion-timeout=20,endpoint=AAA.credentials.iot.eu-west-1.amazonaws.com,cert-path=./certificate.pem,key-path=./private.pem.key,ca-path=./cacert.pem,role-aliases=KvsCameraIoTRoleAlias" aws-region="eu-west-1"

But I get the following output:

Setting pipeline to PAUSED ...
log4cplus:ERROR could not open file ../kvs_log_configuration
INFO - Logger config being used: ../kvs_log_configuration
2023-04-20 22:50:52 [548437069888] INFO - Using iot credential provider within KVS sink for camera_01
2023-04-20 22:50:52 [548437069888] ERROR - Value should be of "String" type for connection-timeout
2023-04-20 22:50:52 [548437069888] ERROR - Failed to parse Iot credentials for camera_01
ERROR: from element /GstPipeline:pipeline0/GstKvsSink:kvssink0: Could not initialize supporting library.
Additional debug info:
/home/pi/Desktop/streamer/amazon-kinesis-video-streams-producer-sdk-cpp/src/gstreamer/gstkvssink.cpp(1615): gst_kvs_sink_change_state (): /GstPipeline:pipeline0/GstKvsSink:kvssink0:
Failed to init kvs producer. Error: Failed to parse Iot credentials for camera_01
ERROR: pipeline doesn't want to preroll.
Failed to set pipeline to PAUSED.
2023-04-20 22:50:52 [548437069888] Setting pipeline to NULL ...
Freeing pipeline ...

I have also tried quotes around the values, but the output is the same.

disa6302 · 2023-04-20T19:16:29Z

disa6302
Apr 20, 2023

Can you try this?

gst-launch-1.0 v4l2src do-timestamp=TRUE device=/dev/video60 ! videoconvert ! video/x-raw,format=I420,width=640,height=480,framerate=30/1 ! x264enc bframes=0 key-int-max=45 bitrate=500 ! video/x-h264,stream-format=avc,alignment=au,profile=baseline ! kvssink stream-name="camera_01" storage-size=512 iot-certificate="iot-certificate,connection-timeout=(string)15,completion-timeout=(string)20,endpoint=AAA.credentials.iot.eu-west-1.amazonaws.com,cert-path=./certificate.pem,key-path=./private.pem.key,ca-path=./cacert.pem,role-aliases=KvsCameraIoTRoleAlias" aws-region="eu-west-1"

1 reply

yousafbinfarrukh Apr 20, 2023
Author

Thank you @disa6302 for a quick response. This works perfectly.
Thanks for the help @sirknightj @niyatim23 @disa6302

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[QUESTION] KVS Streamer: Unable to create IoT Credential Provider #1003

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Replies: 4 comments 9 replies

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

Select a reply

[QUESTION] KVS Streamer: Unable to create IoT Credential Provider #1003

yousafbinfarrukh Apr 18, 2023

Replies: 4 comments · 9 replies

niyatim23 Apr 18, 2023 Maintainer

yousafbinfarrukh Apr 18, 2023 Author

sirknightj Apr 18, 2023 Maintainer

yousafbinfarrukh Apr 18, 2023 Author

niyatim23 Apr 18, 2023 Maintainer

yousafbinfarrukh Apr 18, 2023 Author

yousafbinfarrukh Apr 19, 2023 Author

sirknightj Apr 19, 2023 Maintainer

yousafbinfarrukh Apr 19, 2023 Author

sirknightj Apr 20, 2023 Maintainer

yousafbinfarrukh Apr 20, 2023 Author

disa6302 Apr 20, 2023

yousafbinfarrukh Apr 20, 2023 Author

yousafbinfarrukh
Apr 18, 2023

Replies: 4 comments 9 replies

niyatim23
Apr 18, 2023
Maintainer

yousafbinfarrukh Apr 18, 2023
Author

sirknightj
Apr 18, 2023
Maintainer

yousafbinfarrukh Apr 18, 2023
Author

niyatim23 Apr 18, 2023
Maintainer

yousafbinfarrukh Apr 18, 2023
Author

yousafbinfarrukh
Apr 19, 2023
Author

sirknightj Apr 19, 2023
Maintainer

yousafbinfarrukh Apr 19, 2023
Author

sirknightj Apr 20, 2023
Maintainer

yousafbinfarrukh Apr 20, 2023
Author

disa6302
Apr 20, 2023

yousafbinfarrukh Apr 20, 2023
Author