search

klzgrad / naiveproxy

Make a fortune quietly
BSD 3-Clause "New" or "Revised" License
6.31k stars 868 forks source link

TLS handshake error 请作者帮忙 #602

Closed jiangnanan closed 5 months ago

jiangnanan commented 5 months ago

服务端提示 {"level":"debug","ts":1702099533.5925567,"logger":"http.stdlib","msg":"http: TLS handshake error from 212.33.236.251:43736: read tcp 122.222.112.111:443->212.33.236.251::43736: read: connection reset by peer"} 偶尔可以偶尔不可以，客户端 [Naive] [1209/132504.736793:ERROR:ssl_client_socket_impl.cc(992)] handshake failed; returned -1, SSL error code 1, net_error -101

我确定我的443端口正常 ping.pe我验证过 也是偶尔可以偶尔不可以 刚申请的域名 namesilo里申请的，然后我用DNSPOD做解析，我试过用公用名 (CN) R3 组织 (O) Let's Encrypt 来申请证书，也会这样，然后我换成腾讯云的TrustAsia TLS RSA CA（1年）证书，也是这样，我试过用小火箭 用IP的话是可以的，但是用域名的话就是不行，访问google 提示ERR_CONNECTION_CLOSED ，服务器是centos7 的 所以我也搞不懂是哪里的问题，电脑端的话 时而行时而不行，电脑端用的是V2ray 大家有遇到这样情况的，都是怎么解决的谢谢

klzgrad commented 5 months ago

net_error -101是TCP RST 用wireshark看一下，reset是什么样子

jiangnanan commented 5 months ago

wireshark 截图如下

lp123sun commented 5 months ago

移动的网络吧？我在移动网络也是这样，换联通网络就正常了。

5l2 commented 5 months ago

@jiangnanan You may try changing the domain name please.

5l2 commented 5 months ago

@jiangnanan If, after changing several domain names, NaiveProxy still doesn't work, it suggests that your ISP has implemented an exceptionally stringent SNI blocking policy. Any domain not included in the whitelist will face restrictions.

This is not an issue with NaiveProxy.

It is recommended that you file a complaint with both your ISP and the 网信办.

Another potentially beneficial recommendation is to explore alternative tools, such as XRAY and Shadowsocks.

klzgrad commented 5 months ago

65534是个什么端口，跟你特定的环境有关吧