Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

openwrt 无妨访问,怀疑是开启了tls1.3协议引起的 #151

Open
jiuhonglaugh opened this issue Nov 18, 2024 · 1 comment
Open

Comments

@jiuhonglaugh
Copy link

[root@Kwrt:07:30 PM /bin] # sh -x is-opkg update

  • action=update
  • shift
  • '[' update '=' 'AUTOCONF=' ]
  • IS_ROOT=/tmp/is-root
  • DL_DIR=/tmp/is-root/tmp/dl
  • LISTS_DIR_O=/tmp/opkg-lists
  • LISTS_DIR=/tmp/is-root/tmp/opkg-lists
  • OPKG_CONF_DIR=/tmp/is-root/etc/opkg
  • OPKG_CONF_DIR_M=/tmp/is-root/etc/opkg_m
  • FEEDS_SERVER=https://istore.istoreos.com/repo
  • FEEDS_SERVER_MIRRORS=https://repo.istoreos.com/repo
  • DISABLE_MIRROR=false
  • sed -n -e 's/^Architecture: *([^ ]+) *$/\1/p' /rom/usr/lib/opkg/info/libc.control /usr/lib/opkg/info/libc.control
  • head -1
  • ARCH=x86_64
  • ISTORE_PKG=luci-app-store
  • ISTORE_DEP_PKGS='luci-lib-taskd luci-lib-xterm taskd'
  • ISTORE_INDEX=https://istore.istoreos.com/repo/all/store/Packages.gz
  • alias 'fcurl=curl -L --fail --show-error'
  • is_init
  • update
  • '[' -z x86_64 ]
  • echo 'Fetch feed list for x86_64'
    Fetch feed list for x86_64
  • curl -L --fail --show-error --no-progress-meter -o /tmp/is-root/etc/opkg/meta.conf https://istore.istoreos.com/repo/all/meta.conf
    curl: (35) ssl_handshake returned - mbedTLS: (-0x7280) SSL - The connection indicated an EOF
  • return 1

我遇到的问题跟其他人遇到的问题类似,浏览器用ie是访问不了的应为ie默认不支持tls1.3,如果受用谷歌浏览器访问是没有问题的,
但还是有问题,我做过很多测试。我猜在你们服务端使用了tls1.3并且不想下兼容。而且部分openwrt不支持你们指定的tls1.3的套件,导致无法访问。

@jjm2473
Copy link
Collaborator

jjm2473 commented Nov 19, 2024

需要升级curl和mbedtls,这应该不是tls版本问题,而是mbedtls的bug,以前我们也遇到过。或者切换成openssl版本的curl

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants