search

lassik / scheme-gemini

Scheme library for the Gemini network protocol
ISC License
3 stars 2 forks source link

Connect with TLSv1.2 or higher #2

Open wasamasa opened 2 years ago

wasamasa commented 2 years ago

See #1

snan commented 2 years ago

With this pull req applied, I'm getting

Error: (ssl-read!) ssl-eof: library=<unknown>, function=<unknown>, reason=<unknown>

when calling gemini-response-read-string-all on the response object.

This was the URI that triggered it: gemini://jsreed5.org/log/2022/202204/20220426-twitter-a-few-unsorted-thoughts.gmi

wasamasa commented 2 years ago

Seems unrelated. If I had to guess, it's some other funny OpenSSL option to set. Please open a new issue for this and provide all information there (like, clients this host works/doesn't work with)

snan commented 2 years ago

It also happens with the same ucant URI from yesterday. They work with gmni and Elaho.
I have a harder time finding URIs that do work with the pull req applied than not.
Antenna itself works, but then as I go to follow links from it, the first one was this jsreed url.

My hunch is that it's still the 1.3 thing.

wasamasa commented 2 years ago

That doesn't make much sense though. jsreed5.org supports TLSv1.2 only. If I connect using TLSv1.3 only, I get the EOF error. If I connect with either TLSv1.2 or TLSv1.3, it should use TLSv1.2, not TLSv1.3.

Testing with openssl s_client, it works, but testing with socat, I get the EOF error. Both use OpenSSL. Requires more debugging to find out why.