Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v69 blockcheck.sh can't detect own curl #822

Open
TyroSpy opened this issue Nov 21, 2024 · 2 comments
Open

v69 blockcheck.sh can't detect own curl #822

TyroSpy opened this issue Nov 21, 2024 · 2 comments

Comments

@TyroSpy
Copy link

TyroSpy commented Nov 21, 2024

installed curl version does not support TLS 1.3 . tests disabled.

make sure target domain(s) support QUIC or result will be negative in any case
check http3 QUIC (default : Y) (Y/N) ? N^C
root@OpenWrt:~# curl -V
curl 8.11.0 (aarch64-pc-linux-gnu) libcurl/8.11.0 OpenSSL/3.3.2 zlib/1.3.1 brotli/1.1.0 zstd/1.5.6 c-ares/1.34.3 libidn2/2.3.7 libpsl/0.21.5 libssh2/1.11.1 nghttp2/1.64.0 nghttp3/1.6.0
Release-Date: 2024-11-06
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS brotli HSTS HTTP2 HTTP3 HTTPS-proxy IDN IPv6 Largefile libz NTLM PSL SSL threadsafe TLS-SRP TrackMemory UnixSockets zstd

Приходиться явно задавать путь через переменную. В предыдущей версии v68 определял правильно

CURL=/opt/bin/curl /opt/zapret/blockcheck.sh
@TyroSpy
Copy link
Author

TyroSpy commented Nov 21, 2024

Был какой-то глюк только при первом запуске, далее нормально видит curl

@bol-van
Copy link
Owner

bol-van commented Nov 21, 2024

Такое может быть, потому что тест проверки поддержки 1.3 дергает внешний сайт.
Других способов не нашел.
Сайт может глюкануть.

curl_supports_tls13()
{
	local r
	$CURL --tlsv1.3 -Is -o /dev/null --max-time 1 http://127.0.0.1:65535 2>/dev/null
	# return code 2 = init failed. likely bad command line options
	[ $? = 2 ] && return 1
	# curl can have tlsv1.3 key present but ssl library without TLS 1.3 support
	# this is online test because there's no other way to trigger library incompatibility case
	$CURL --tlsv1.3 --max-time $CURL_MAX_TIME -Is -o /dev/null https://iana.org 2>/dev/null
	r=$?
	[ $r != 4 -a $r != 35 ]
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants