closed with error crypto error: BAD_DECRYPT

[xmh0511]

grpc initialization error
closed with error crypto error: BAD_DECRYPT
 error: invalid peer certificate: Other(UnsupportedCertVersion)

[ibigbug]

UnsupportedCertVersion

Likely to be https://github.com/rustls/webpki/issues/29#issuecomment-1453783741

[xmh0511]

clash-rs should support this certification, the core clash written by Golang supports this configuration and can work well.

[xmh0511]

https://github.com/keiko233/clash-nyanpasu/issues/54

[ibigbug]

I don't know how to reproduce this, if the issue is the cert, if you don't mind sharing a server that raises the error.

[ibigbug]

Thanks. Will have a look later. I've saved the info, you can delete it if you want.

[xmh0511]

Thanks. Will have a look later. I've saved the info, you can delete it if you want.

Ok. if you want the complete configuration file, I can send it to your email for security.

[ibigbug]

No that should be enough. Will let you know if I need more details.

[xmh0511]

@ibigbug I tested the latest version, It still doesn't work. The given node can have a timeout test however cannot open any website through the node. Moreover, some other nodes cannot have a timeout test.

[ibigbug]

Could you send you config to dev@watfaw.com

There might be other issues.

[xmh0511]

Could you send you config to dev@watfaw.com

There might be other issues.

I have sent it to you, check it out.

[xmh0511]

@ibigbug The email responded me with the error:

 DNS Error: DNS type 'mx' lookup of watfaw.com responded with code NXDOMAIN Domain name not found: watfaw.com Learn more at https://support.google.com/mail/?p=BadRcptDomain 

[ibigbug]

Sorry. A dev@watfaq.com. I typed too fast.

[ibigbug]

i took one failed proxy yiyuanjichang.com and the original go clash can't use it either.

more over the grpc init is rejected by cloudflare with

grpc init stream resp: Response { status: 403, version: HTTP/2.0, headers: {"server": "cloudflare", "date": "Thu, 28 Dec 2023 08:32:54 GMT", "content-type": "text/html", "content-length": "151", "cf-ray": "83c874958f89a973-SYD"}, body: RecvStream { inner: FlowControl { inner: OpaqueStreamRef { stream_id: StreamId(1), ref_count: 2 } } } }

maybe consult your provider

[xmh0511]

@ibigbug

original go clash can't use it either.

The Clash Premium written by Go can use it.