SadeghHayeri / GreenTunnel

GreenTunnel is an anti-censorship utility designed to bypass the DPI system that is put in place by various ISPs to block access to certain websites.
MIT License
3.88k stars 260 forks source link

`SSL_ERROR_SYSCALL` on some sites #169

Open musjj opened 1 year ago

musjj commented 1 year ago

Describe the bug SSL_ERROR_SYSCALL error occurs when connecting to certain websites. The error doesn't occur without Green Tunnel's proxy.

To Reproduce

❯ curl --proxy 0.0.0.0:8000 -v 'https://utcc.utoronto.ca'
*   Trying 0.0.0.0:8000...
* Connected to 0.0.0.0 (127.0.0.1) port 8000 (#0)
* allocate connect buffer
* Establish HTTP proxy tunnel to utcc.utoronto.ca:443
> CONNECT utcc.utoronto.ca:443 HTTP/1.1
> Host: utcc.utoronto.ca:443
> User-Agent: curl/8.0.1
> Proxy-Connection: Keep-Alive
> 
< HTTP/1.1 200 Connection Established
< 
* CONNECT phase completed
* CONNECT tunnel established, response 200
* ALPN: offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: none
* OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to utcc.utoronto.ca:443 
* Closing connection 0
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to utcc.utoronto.ca:443 

Expected behavior No error

Desktop (please complete the following information):

Fyne5 commented 6 months ago

Let's me pump up this thread. I think relate ssl library too old and unfortunately author may be drop this project, so will not be upgraded anything in the future