#2765: Add support for TLS SNI in httpdownloader
-------------------+--------------------
 Reporter:  Cas    |      Owner:
     Type:  bug    |     Status:  new
 Priority:  minor  |  Milestone:  1.3.13
Component:  Core   |    Version:  1.3.11
 Keywords:         |
-------------------+--------------------
 Sites that use cloudflare require TLSv1.2 and use SNI.

 From forum: http://forum.deluge-
 torrent.org/viewtopic.php?f=7&p=218087#p218087
 {{{
 [DEBUG   ] 11:54:50 addtorrentdialog:715 Download failed: [Failure
 instance: Traceback: <class 'OpenSSL.SSL.Error'>: [('SSL routines',
 'SSL23_GET_SERVER_HELLO', 'tlsv1 alert internal error')]
 twisted/internet/selectreactor.py:149:_doReadOrWrite
 twisted/internet/tcp.py:209:doRead
 twisted/internet/tcp.py:215:_dataReceived
 twisted/protocols/tls.py:415:dataReceived
 --- <exception caught here> ---
 twisted/protocols/tls.py:554:_write
 OpenSSL/SSL.py:1271:send
 OpenSSL/SSL.py:1187:_raise_ssl_error
 OpenSSL/_util.py:48:exception_from_error_queue
 ]
 }}}

 As this is now supported in Twisted >= 14 we can add support.

 To verify if this is the issue a simply test without the server name:
 {{{
 openssl s_client -connect www.seo.com:443
 > ...
 > 139785801238176:error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
 alert internal error:s23_clnt.c:770:
 > ...
 }}}

 By adding the server name in the request it will now pass:
 {{{
 openssl s_client -connect www.seo.com:443 -servername seo.com
 }}}

-- 
Ticket URL: <http://dev.deluge-torrent.org/ticket/2765>
Deluge <http://deluge-torrent.org/>
Deluge Project

-- 
You received this message because you are subscribed to the Google Groups 
"Deluge Dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/deluge-dev.
For more options, visit https://groups.google.com/d/optout.

Reply via email to