Go 1.17 strict TLS APLN breaks Let's Encrypt #116

Closed
opened 2026-01-19 18:29:01 +00:00 by michael · 2 comments
Owner

Originally created by @BenHarris on GitHub.

More information and a fix noted here: https://github.com/traefik/traefik/issues/8376

Logs

transfer    | 2022/03/14 15:26:18 http: TLS handshake error from 18.192.36.99:37146: tls: client requested unsupported application protocols ([acme-tls/1])
transfer    | 2022/03/14 15:26:18 http: TLS handshake error from 34.221.255.206:22562: tls: client requested unsupported application protocols ([acme-tls/1])
transfer    | 2022/03/14 15:26:18 http: TLS handshake error from 18.116.86.117:55338: tls: client requested unsupported application protocols ([acme-tls/1])
transfer    | 2022/03/14 15:26:18 http: TLS handshake error from 64.78.149.164:29096: tls: client requested unsupported application protocols ([acme-tls/1])
transfer    | 2022/03/14 15:26:19 http: TLS handshake error from xx.xx.xx.xx:39743: acme/autocert: unable to satisfy "https://acme-v02.api.letsencrypt.org/acme/authz-v3/9999999999" for domain "xxxx.xxx": no viable challenge type found
transfer    | 2022/03/14 15:26:19 http: TLS handshake error from xx.xx.xx.xx:39751: acme/autocert: missing certificate
Originally created by @BenHarris on GitHub. More information and a fix noted here: https://github.com/traefik/traefik/issues/8376 Logs ``` transfer | 2022/03/14 15:26:18 http: TLS handshake error from 18.192.36.99:37146: tls: client requested unsupported application protocols ([acme-tls/1]) transfer | 2022/03/14 15:26:18 http: TLS handshake error from 34.221.255.206:22562: tls: client requested unsupported application protocols ([acme-tls/1]) transfer | 2022/03/14 15:26:18 http: TLS handshake error from 18.116.86.117:55338: tls: client requested unsupported application protocols ([acme-tls/1]) transfer | 2022/03/14 15:26:18 http: TLS handshake error from 64.78.149.164:29096: tls: client requested unsupported application protocols ([acme-tls/1]) transfer | 2022/03/14 15:26:19 http: TLS handshake error from xx.xx.xx.xx:39743: acme/autocert: unable to satisfy "https://acme-v02.api.letsencrypt.org/acme/authz-v3/9999999999" for domain "xxxx.xxx": no viable challenge type found transfer | 2022/03/14 15:26:19 http: TLS handshake error from xx.xx.xx.xx:39751: acme/autocert: missing certificate ```
Author
Owner

@docweirdo commented on GitHub:

I do have the same issue, although I do not believe it has anything to do with TLS ALPN like @BenHarris suggested. The documentation of the tls package states that leaving conf.NextProtos empty just skips the ALPN step.

I suspect it has something to do with the HTTPHandler function provided by the autocert package. If it is not called and the handler not employed, the http-01 challenge cannot be processed.

@docweirdo commented on GitHub: I do have the same issue, although I do not believe it has anything to do with TLS ALPN like @BenHarris suggested. The documentation of the `tls` package states that leaving `conf.NextProtos` empty just skips the ALPN step. I suspect it has something to do with the `HTTPHandler` function provided by the autocert package. If it is not called and the [handler not employed](https://pkg.go.dev/golang.org/x/crypto/acme/autocert#Manager.HTTPHandler), the http-01 challenge cannot be processed.
Author
Owner

@paolafrancesca commented on GitHub:

fixed by #474

@paolafrancesca commented on GitHub: fixed by #474
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dutchcoders/transfer.sh#116