search

gab-ai-inc / gab-dissenter-extension

Dissenter.com Browser Extension source code
https://dissenter.com
Apache License 2.0
271 stars 43 forks source link

Dissenter Browser & Firefox Addon Cannot Login to Gab: Client authentication failed due to unknown client, no client authentication included, or unsupported authentication method. #89

Closed rugabunda closed 5 years ago

rugabunda commented 5 years ago

Using Firefox 67.0.4 (64-bit) Windows 10, Dissenter 0.1.10, Connecting from Canada (same issue in Europe as well)

Can login directly at the website but cannot login through the extension.... even when logged in manually at the website, the extension does not detect this.

Screenshot here

Tried modifying and disabling all of these settings, still cannot login

Disabled user agent switcher...

Firefox current settings about:config security.ssl.require_safe_negotiation;true security.ssl.enable_false_start;false security.ssl.treat_unsafe_negotiation_as_broken;true security.ssl.disable_session_identifiers;true security.ssl3.rsa_aes_128_sha;false security.ssl3.rsa_aes_256_sha;false security.ssl3.rsa_des_ede3_sha;false security.tls.enable_0rtt_data;false security.tls.hello_downgrade_check;true security.tls.version.min;3

rugabunda commented 5 years ago

Update, I am having the same problem in the Dissenter browser in Windows 10 [screenshot], freshly downloaded and used today with zero configuration... just a few extensions which I had also disabled in trying to login. No progress so far.

Can modified windows 10 SSL group policy cause this?

rugabunda commented 5 years ago

Using the latest wireshark, and Dissenter browser, I see unknown records in response from api.gab.com prior to a change cipher spec packet [screenshot] I don't know. could be a middle box interfering with the handshake, ssl session resumption upon re-loading the browser which I did do, or it could just be the new api you just updated yesterday for all I know. Am connecting from Canada.

Here are the cipher suites used in Dissenter browser, I see no problems here in the client hello packet

Dst: api.gab.com (104.16.121.96) Transmission Control Protocol, Src Port: 7598 (7598), Dst Port: https (443), Seq: 1, Ack: 1, Len: 517 Transport Layer Security TLSv1.2 Record Layer: Handshake Protocol: Client Hello Content Type: Handshake (22) Version: TLS 1.0 (0x0301) Length: 512 Handshake Protocol: Client Hello Handshake Type: Client Hello (1) Length: 508 Version: TLS 1.2 (0x0303) Random: 1c3f991c723431c2215af72126ad823034a530aa68c5f524… Session ID Length: 32 Session ID: 5313f13a38aef080bbf1fb0708c1bc629836b1cea799708c… Cipher Suites Length: 34 Cipher Suites (17 suites) Cipher Suite: Reserved (GREASE) (0x2a2a) Cipher Suite: TLS_CHACHA20_POLY1305_SHA256 (0x1303) Cipher Suite: TLS_AES_128_GCM_SHA256 (0x1301) Cipher Suite: TLS_AES_256_GCM_SHA384 (0x1302) Cipher Suite: TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca9) Cipher Suite: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xc02c) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) Cipher Suite: TLS_RSA_WITH_AES_128_GCM_SHA256 (0x009c) Cipher Suite: TLS_RSA_WITH_AES_256_GCM_SHA384 (0x009d) Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f) Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA (0x0035) Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a) Compression Methods Length: 1 Compression Methods (1 method) Extensions Length: 401 Extension: Reserved (GREASE) (len=0) Extension: server_name (len=16) Extension: extended_master_secret (len=0) Extension: renegotiation_info (len=1) Extension: supported_groups (len=10) Extension: ec_point_formats (len=2) Extension: session_ticket (len=0) Extension: application_layer_protocol_negotiation (len=14) Extension: status_request (len=5) Extension: signature_algorithms (len=20) Extension: signed_certificate_timestamp (len=0) Extension: key_share (len=43) Extension: psk_key_exchange_modes (len=2) Extension: supported_versions (len=11) Extension: compress_certificate (len=3) Extension: Reserved (GREASE) (len=1) Extension: padding (len=205)

epycurasWynter commented 5 years ago

Same issue since around the time this post was made. Using Dissenter extension with Brave. Can't log in through extension at all. I am@EpycWynn on Gab.

rugabunda commented 5 years ago

I am having the same problem as well connecting from Multiple IP's, including from Europe on a totally different machine, linux, latest firefox, with addon.

42degrees commented 5 years ago

I'm having the same problem in Chrome using Dissenter 0.1.9. "Client authentication failed due to unknown client, no client authentication included, or unsupported authentication method." I've tried clearing cookies, logging into Gab directly, etc. with no change. This has been going on for at least 48 hours. I am able to log into Gab directly with no problem.

A2-NieR commented 5 years ago

Same here with Dissenter Browser on Manjaro Linux.

42degrees commented 5 years ago

Looks like they finally fixed it. When the error came up today it had a new pair of buttons, clicking the authorize button fixed the problem. No telling what the cause of the original issue was. It had to be a change on their side.

rugabunda commented 5 years ago

Looks like they finally fixed it. When the error came up today it had a new pair of buttons, clicking the authorize button fixed the problem. No telling what the cause of the original issue was. It had to be a change on their side.

Its working now! Thanks for the update! And to the dissenter staff! Great work! I will spread the word and get this out there, God bless you brother. https://www.youtube.com/watch?v=typ2pl2L47k