[9front] https with tcp80 in 2023?

[9front] https with tcp80 in 2023?

[sirjofri]

Hey all,

I had this script working for quite some time now, but somehow my modern browsers started refusing to connect to it (something about unsupported protocols). Any ideas?

tcp443:
#!/bin/rc
exec /bin/tlssrv -c/sys/lib/tls/acmed/sirjofri.de.crt /bin/tcp80

sirjofri

Re: [9front] https with tcp80 in 2023?

[Yury Chumak]

Not only modern browsers are refusing. Curl says "Cannot communicate
securely with peer: no common encryption algorithm(s)."
Some recommendations:
https://www.ssllabs.com/ssltest/analyze.html?d=sirjofri.de
May be need to update certificate.

ср, 10 мая 2023 г. в 23:39, sirjofri <sirjofri+ml-9front@sirjofri.de>:
>
> Hey all,
>
> I had this script working for quite some time now, but somehow my modern browsers started refusing to connect to it (something about unsupported protocols). Any ideas?
>
> tcp443:
> #!/bin/rc
> exec /bin/tlssrv -c/sys/lib/tls/acmed/sirjofri.de.crt /bin/tcp80
>
> sirjofri



-- 
Sphynkx

Re: [9front] https with tcp80 in 2023?

[unobe]

Quoth sirjofri <sirjofri+ml-9front@sirjofri.de>:
> Hey all,
> 
> I had this script working for quite some time now, but somehow my modern browsers started refusing to connect to it (something about unsupported protocols). Any ideas?
> 
> tcp443:
> #!/bin/rc
> exec /bin/tlssrv -c/sys/lib/tls/acmed/sirjofri.de.crt /bin/tcp80
> 
> sirjofri

This might be a tangent, but isn't shithub also on 9front?  Its https
works.  From using both modern Firefox and Chrome to connect to
sirjofri.de, it was a cipher issue.  I don't know exactly how much
further to debug.

Re: [9front] https with tcp80 in 2023?

[B. Atticus Grobe]

I'm willing to bet your hostowner factotum has lost the private key at 
some point. That's usually what precipitates this problem for me.

Re: [9front] https with tcp80 in 2023?

[Julien Blanchard]

Must be something with your cert, I have somewhat the same script and it 
still works as it used to.

On 5/10/23 22:35, sirjofri wrote:
> Hey all,
>
> I had this script working for quite some time now, but somehow my modern browsers started refusing to connect to it (something about unsupported protocols). Any ideas?
>
> tcp443:
> #!/bin/rc
> exec /bin/tlssrv -c/sys/lib/tls/acmed/sirjofri.de.crt /bin/tcp80
>
> sirjofri

Re: [9front] https with tcp80 in 2023?

[sirjofri]

11.05.2023 18:38:59 Julien Blanchard <julien@typed-hole.org>:
> Must be something with your cert, I have somewhat the same script and it still works as it used to.

I re-generated the cert (using the same account keys) and checked everything, it seems to work now. Whatever went wrong in the first place.

Thank you everyone. Best community 🙂

sirjofri