-

TLS_RECEIVE_2

The TLS_RECEIVE_2 function block is a newer implementation of the TLS_RECEIVE FB combined with the TCP_RECEIVE FB which are referred to as "older implementation" in this help topic. The difference between the newer and the older implementation is that the TLS_*_2 FBs combine the handling of TCP and TLS in one FB. Furthermore, they support a TCP/TLS server which is able to communicate with several TCP/TLS clients. The TLS_RECEIVE_2 FB can only be used with the TLS_SEND_2 FB, based on a socket created with the TLS_SOCKET_2 FB.

Note
This function block requires firmware version 2021.3 or newer.

Note
To update instances of the previous FB implementation by the newer FBs in an existing project, you can simply replace them as follows: Edit the declaration of the instance variable and (only in FBD) update the instance call in the code. Formal parameters with the same name will remain connected, newly added formal parameters have to be connected (if the corresponding function is required).

Type Function block
Description The function block is used to receive data via TCP (Transmission Control Protocol) or (TLS (Transmission Layer Security) from a TCP/TLS-capable Ethernet device. This is done using a TCP/TLS socket. The socket must first be opened using the TLS_SOCKET_2 function block before data can be received.

Once the socket is opened and a connection is established, the function block receives data from the communication partner either via a pure TCP connection or a TLS-secured connection. The type of connection used depends on the value of the START_TLS input of the TLS_SOCKET_2 function block:

  • With START_TLS = FALSE, the function block uses a pure TCP connection to receive data.
  • With START_TLS = TRUE, the function block receives data via a TLS-secured connection.
The function block provides a security check for identifying whether the IEC application expects the data to be received unsecure (via a TCP connection) or secure (via TLS-secured connection). The security check is done by comparing the values of the RECEIVE_SECURE input of the function block and the START_TLS input of the TLS_SOCKET_2 FB. If an inconsistency of the input values is detected, for example, RECEIVE_SECURE = TRUE (IEC application requires secure reception of data) and START_TLS = FALSE (TLS protocol not yet initialized), the ERROR output is set to TRUE and the error code 16#C150 is indicated at the STATUS output.

If the EN_R input (EN_R - ENable_Receive) is TRUE, the function block receives data. If data has been successfully received, the NDR output (NDR = New Data Received) is set to TRUE for each cycle in which the specified amount of data has been copied to the DATA buffer. If EN_R is still set to TRUE and new data is received in the next cycle, NDR remains TRUE and the new data is copied to the variable connected to the DATA parameter. If no new data is received, NDR is set to FALSE.

The device from which data are received is indicated at the outputs SOURCE_IP (IP address of the sending device) and SOURCE_PORT (port number of the sending device).

WARNING
Unintended machine operation
Verify that the influence of the output data cannot result in an unintended or hazardous behavior of the entire system.

Notes
  • The socket opened by the TLS_SOCKET_2 function block can only be used for subsequent calls of the TLS_RECEIVE_2 function block as long as the ACTIVE output of the TLS_SOCKET_2 function block is TRUE. Calling the TLS_RECEIVE_2 function block while ACTIVE = FALSE causes an error at the TLS_RECEIVE_2 function block (ERROR = TRUE and STATUS code = 0xC210 issued).
  • The socket handle created by the TLS_SOCKET_2 function block is not compatible with the socket handle created by the TCP_SOCKET or TLS_SOCKET function block. The socket handle can only be used with the TLS_SEND_2/TLS_RECEIVE_2 function blocks.
  • For controllers with integrated firewall, make sure that the firewall does not block the ports involved in the communication. Otherwise, the connection cannot be established.
  • Function blocks have to be instantiated.
    The instance name of the function block has to be declared in the 'Variables' table of the POU where the FB is going to be used. The instance name must be unique within the POU.
Parameters Inputs

Note
The input specifically relevant for the TLS communication on top of the TCP communication is RECEIVE_SECURE. The other inputs specify TCP functionality.

EN_R

HANDLE

EXP_DATA_CNT

RECEIVE_SECURE

Input/Output

DATA

Outputs

NDR

ERROR

STATUS

SOURCE_IP

SOURCE_PORT

DATA_CNT