denoland / website_feedback

For reporting issues & suggestions for deno.com and deno.land
9 stars 1 forks source link

connections to deno.land over Tor fail #54

Open easrng opened 9 months ago

easrng commented 9 months ago

Attempting to connect to deno.land from Tor fails. Some circuits work, but it's very very intermittent.

$ torsocks curl -X HEAD -sv https://deno.land
*   Trying 34.120.54.55:443...
* Connected to deno.land (34.120.54.55) port 443 (#0)
* ALPN: offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to deno.land:443
* Closing connection 0

esm.sh for comparison:

$ torsocks curl -X HEAD -sv https://esm.sh
*   Trying 104.21.77.20:443...
* Connected to esm.sh (104.21.77.20) port 443 (#0)
* ALPN: offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=esm.sh
*  start date: Nov 19 03:49:49 2023 GMT
*  expire date: Feb 17 03:49:48 2024 GMT
*  subjectAltName: host "esm.sh" matched cert's "esm.sh"
*  issuer: C=US; O=Let's Encrypt; CN=E1
*  SSL certificate verify ok.
* using HTTP/2
* h2h3 [:method: HEAD]
* h2h3 [:path: /]
* h2h3 [:scheme: https]
* h2h3 [:authority: esm.sh]
* h2h3 [user-agent: curl/7.88.1]
* h2h3 [accept: */*]
* Using Stream ID: 1 (easy handle 0x559a715e57f0)
> HEAD / HTTP/2
> Host: esm.sh
> user-agent: curl/7.88.1
> accept: */*
>
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
< HTTP/2 200
< date: Tue, 21 Nov 2023 22:31:07 GMT
< content-type: text/html; charset=utf-8
< cf-ray: 829c618daf820ea9-AMS
< cf-cache-status: HIT
< age: 41483
< cache-control: public, max-age=600, s-maxage=86400
< last-modified: Tue, 21 Nov 2023 10:59:44 GMT
< report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MzHF%2BUKsX0jjJkUM0g7C9huBLAS3VuQRBd3nOEGD0Bu6IPvEcZ%2F5QTIB10mfZP9nlIkimWPLN65yIHgJdDWaaedVxzDsg66toEmUwyZ1kjGLwQTmLX6EDx0%3D"}],"group":"cf-nel","max_age":604800}
< nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
< server: cloudflare
< alt-svc: h3=":443"; ma=86400
<
* Connection #0 to host esm.sh left intact