buffrr / letsdane

🔒 Let's DANE is an experimental way to enable the use of DANE/TLSA in browsers and other apps using a lightweight proxy.
Apache License 2.0
111 stars 11 forks source link

Verifying VPN Servers using LetsDANE #25

Open flikites opened 1 year ago

flikites commented 1 year ago

I've been experimenting with using the LetsDANE http proxy to connect to a VPN server, but I end up running into errors when trying to validate SSL. (Both with and without a reverse proxy)

The only noticeable error I received was this:

C0CC8B6670000000:error:0A000126:SSL routines:ssl3_read_n:unexpected eof while reading:ssl/record/rec_layer_s3.c:321:

This is the error that occurred without using reverse proxy - The VPN server has the cert set directly through the VPN software, and then I specified the IP address of the VPN server in the DNS for the Handshake domain.