mirror of
https://github.com/qbittorrent/qBittorrent.git
synced 2026-03-02 22:57:32 -05:00
HTTPS tracker doesn't work when it requires Server Name Indication #3567
Labels
No labels
Accessibility
AppImage
Bounty
Build system
CI
Can't reproduce
Code cleanup
Confirmed bug
Confirmed bug
Core
Crash
Data loss
Discussion
Docker
Documentation
Duplicate
Feature
Feature request
Feature request
Feature request
Filters
Flatpak
GUI
Has workaround
I2P
Invalid
Libtorrent
Look and feel
Meta
NSIS
Network
Not an issue
OS: *BSD
OS: Linux
OS: Windows
OS: macOS
PPA
Performance
Project management
Proxy/VPN
Qt bugs
Qt6 compat
RSS
Search engine
Security
Temp folder
Themes
Translations
Triggers
Waiting diagnosis
Waiting info
Waiting upstream
Waiting web implementation
Watched folders
WebAPI
WebUI
autoCloseOldIssue
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/qBittorrent#3567
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Sorvigolova on GitHub (Dec 14, 2015).
Handshake failed with all trackers that used CloudFlare servers with certificates like this one: sniXXXXX.cloudflaressl.com
Please enable Server Name Indication extension to fix this issue.
https://en.wikipedia.org/wiki/Server_Name_Indication
@dysangelist-1 commented on GitHub (Jan 17, 2016):
Cloudflare seems to be making changes lately which are making this a more common problem with HTTPS trackers that use them; TLSv1.2 requests sent in the Client Hello without the SNI extension specifying server name are suddenly being met with instant Alert/'Internal error' responses.
There's a QT bug for not sending SNI with TLSv1.1+ - https://bugreports.qt.io/browse/QTBUG-47528 - which was apparently fixed and merged in release 5.5.1 - but qBittorrent v3.3.1 is built with 5.5.1 (or so my client says) and still isn't sending SNI server name on a TLSv1.2 hello. Maybe I've misunderstood the scope or applicability of the QT bug?
Deluge had the same basic issue and sorted it by doing the incantations that make Twisted send SNI server name: http://dev.deluge-torrent.org/ticket/2765
@ghost commented on GitHub (Jan 19, 2016):
Also having the same issue. Thanks for taking the time to look at it.
@Sorvigolova commented on GitHub (Jan 21, 2016):
May be problem with openssl. qBittorrent do not show info about openssl version.
@Chocobo1 commented on GitHub (Jan 22, 2016):
@Sorvigolova
Tracker related functions is handled by libtorrent, you might want to forward this issue to them: https://github.com/arvidn/libtorrent/issues
Unless you're talking about qBittorrent embedded tracker...
@Sorvigolova commented on GitHub (Jan 22, 2016):
Thanks @Chocobo1. Issue added: https://github.com/arvidn/libtorrent/issues/429
@Chocobo1 commented on GitHub (Jan 25, 2016):
@sledgehammer999 @Sorvigolova
This issue can be closed, it's already fixed upstream.
@Sorvigolova commented on GitHub (Jan 25, 2016):
Thanks to You all, who was envolved.
@Sorvigolova commented on GitHub (Feb 29, 2016):
libtorrent-1.0.9 Released with SNI support for https trackers and webseeds. :)
It remains to wait the next qBittorrent release. Cool!
@chrishirst commented on GitHub (Feb 29, 2016):
https://qbforums.shiki.hu/index.php/topic,4113.0.html
@Sorvigolova commented on GitHub (Mar 1, 2016):
Thanks @chrishirst , apparently libtorrent 1.1 dev-build is not so stable as 1.0.9 release.