bwindels / wwwee

wwwee, the wee webserver: a small, robust, low-resource and fast web application server for low workloads (home server, personal cloud)
GNU General Public License v3.0
26 stars 1 forks source link

Connection gets reset by TLS #7

Closed bwindels closed 6 years ago

bwindels commented 6 years ago

with firefox 61, wwwee currently resets the connection when using TLS:

127.0.0.1:54672/ConnectionId(1) connected
as_io_error from UnsupportedVersion
closing tls socket due to io error: Custom { kind: Other, error: StringError("engine error after recvrec ack") }
closing connection 1
bwindels commented 6 years ago

Crash is fixed, can't repro UnsupportedVersion anymore though ... try install FF 61 with a flatpak?

bwindels commented 6 years ago

E.g. With Firefox 62, after the fix, I get

127.0.0.1:42564/ConnectionId(1) connected
as_io_error from RecvFatalAlert(BadCertificate)
closing tls socket due to io error: Custom { kind: Other, error: StringError("engine error after recvrec ack") }
closing connection 1

Once the self-signed certificate is accepted in Firefox, stuff works though.

bwindels commented 6 years ago

Hmm, UnsupportedVersion is what you get when you connect with http instead of https. As I doubt that this could be anything to do with TLS 1.3 (which BearSSL doesn't support yet), as that would mean that firefox only supports TLS 1.3 in the ClientHello? Not even sure BearSSL would return UnsupportedVersion then. It's much more likely that I forgot to type an 's' while typing, so closing this for now, can always reopen if it comes back.

bwindels commented 6 years ago

Ftr, Chrome also works as expected...