I am using ss-qt5 on Linux but it seems not working properly with AEAD ciphers (such as aes-256-gcm). Connections are closed soon after they are established.
Steps to reproduce
Server : CentOS 7, shadowsocks-libev-3.2.0
Client: CentOS 7 and Fedora 28, shadowsocks-qt5-3.0.1. I am using the AppImage directly from the release page.
Both sides use aes-256-gcm.
After connected to the server, download any file using socks5 proxy
TCP_NODELAY set
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* SOCKS5 communication to ftp.tsukuba.wide.ad.jp:80
SOCKS5 request granted.
Connected to 127.0.0.1 (127.0.0.1) port 1080 (#0)
GET /software/gcc/releases/gcc-7.3.0/gcc-7.3.0.tar.gz HTTP/1.1
Host: ftp.tsukuba.wide.ad.jp
User-Agent: curl/7.58.0
Accept: /
Closing connection 0
curl: (18) transfer closed with 106224679 bytes remaining to read
Same issue occurs when using browsers (e.g. firefox) to download files through the proxy.
However, it seems that I can still access the websites using proxy, but cannot download files.
Debugging information
After checking the output of ss-qt5 I find many error messages like:
AEAD data chunk is incomplete (too small for payload)
AEAD data chunk is incomplete (too small for length)
Remote: Integrity failure: GCM tag check failed
On the server side, the ss-server throws this error:
2018-06-29 08:28:23 ERROR: server recv: Connection reset by peer
Other Notes
Same issue occurs when using aes-192-gcm, aes-128-gcm, chacha20-ietf-poly1305. But other ciphers such as aes-256-cfb and aes-256-ctr work fine using ss-qt5.
AEAD ciphers work fine using ss-local from shadowsocks-libev on my PC.
Hi,
I am using ss-qt5 on Linux but it seems not working properly with AEAD ciphers (such as aes-256-gcm). Connections are closed soon after they are established.
Steps to reproduce
However, it seems that I can still access the websites using proxy, but cannot download files.
Debugging information
After checking the output of
ss-qt5
I find many error messages like:On the server side, the
ss-server
throws this error:Other Notes
aes-192-gcm
,aes-128-gcm
,chacha20-ietf-poly1305
. But other ciphers such asaes-256-cfb
andaes-256-ctr
work fine usingss-qt5
.ss-local
fromshadowsocks-libev
on my PC.Any idea on this issue?