{"action":"created","issue":{"url":"https://api.github.com/repos/vincenthz/hs-tls/issues/152","repository_url":"https://api.github.com/repos/vincenthz/hs-tls","labels_url":"https://api.github.com/repos/vincenthz/hs-tls/issues/152/labels{/name}","comments_url":"https://api.github.com/repos/vincenthz/hs-tls/issues/152/comments","events_url":"https://api.github.com/repos/vincenthz/hs-tls/issues/152/events","html_url":"https://github.com/vincenthz/hs-tls/issues/152","id":169317292,"number":152,"title":"Error_EOF connecting to google domains","user":{"login":"hesselink","id":75477,"avatar_url":"https://avatars.githubusercontent.com/u/75477?v=3","gravatar_id":"","url":"https://api.github.com/users/hesselink","html_url":"https://github.com/hesselink","followers_url":"https://api.github.com/users/hesselink/followers","following_url":"https://api.github.com/users/hesselink/following{/other_user}","gists_url":"https://api.github.com/users/hesselink/gists{/gist_id}","starred_url":"https://api.github.com/users/hesselink/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hesselink/subscriptions","organizations_url":"https://api.github.com/users/hesselink/orgs","repos_url":"https://api.github.com/users/hesselink/repos","events_url":"https://api.github.com/users/hesselink/events{/privacy}","received_events_url":"https://api.github.com/users/hesselink/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2016-08-04T08:19:36Z","updated_at":"2016-09-07T15:31:41Z","closed_at":null,"body":"I'm getting `HandshakeFailed Error_EOF` when connecting to google domains. For example:\r\n\r\n```\r\n$ stack exec -- tls-simpleclient spreadsheets.google.com -d -v\r\nsending query:\r\nGET / HTTP/1.0\r\n\r\n\r\n\r\ndebug: >> Handshake [ClientHello TLS12 (ClientRandom {unClientRandom = \"7 \\169\\DLEE\\245\\179\\249\\167\\DC1\\\\\\142\\145\\195\\153s\\212\\b\\RS\\ETB\\n#\\202\\&4\\255\\&5P\\235\\250+K\\128\"}) (Session Nothing) [107,103,57,51,56,50,47,53,4,5,10,158,49172,49199,49195] [0] [ExtensionRaw 0 \"001a0000177370726561647368656574732e676f6f676c652e636f6d\",ExtensionRaw 65281 \"00\",ExtensionRaw 10 \"000400170019\",ExtensionRaw 11 \"0100\",ExtensionRaw 13 \"000c060105010401030102010202\"] Nothing]\r\ndebug: >> Alert [(AlertLevel_Fatal,InternalError)]\r\ntls-simpleclient: HandshakeFailed Error_EOF\r\n```\r\n\r\nAnd:\r\n\r\n```\r\n$ stack exec -- tls-simpleclient google.com -d -v\r\nsending query:\r\nGET / HTTP/1.0\r\n\r\n\r\n\r\ndebug: >> Handshake [ClientHello TLS12 (ClientRandom {unClientRandom = \"\\170T.\\199\\a\\154\\GS\\USiP\\143b\\203$\\US*\\140;\\f_\\ETB\\ai\\NUL\\136i\\178\\245\\242\\211\\233\\ESC\"}) (Session Nothing) [107,103,57,51,56,50,47,53,4,5,10,158,49172,49199,49195] [0] [ExtensionRaw 0 \"000d00000a676f6f676c652e636f6d\",ExtensionRaw 65281 \"00\",ExtensionRaw 10 \"000400170019\",ExtensionRaw 11 \"0100\",ExtensionRaw 13 \"000c060105010401030102010202\"] Nothing]\r\ndebug: >> Alert [(AlertLevel_Fatal,InternalError)]\r\ntls-simpleclient: HandshakeFailed Error_EOF\r\n```\r\n\r\nThis is using tls 1.3.8. Forcing TLS 1.1 makes it work. Any idea what's going on here? And perhaps a workaround? I guess I could patch the used libraries to use TLS 1.1..."},"comment":{"url":"https://api.github.com/repos/vincenthz/hs-tls/issues/comments/245319300","html_url":"https://github.com/vincenthz/hs-tls/issues/152#issuecomment-245319300","issue_url":"https://api.github.com/repos/vincenthz/hs-tls/issues/152","id":245319300,"user":{"login":"ocheron","id":2415051,"avatar_url":"https://avatars.githubusercontent.com/u/2415051?v=3","gravatar_id":"","url":"https://api.github.com/users/ocheron","html_url":"https://github.com/ocheron","followers_url":"https://api.github.com/users/ocheron/followers","following_url":"https://api.github.com/users/ocheron/following{/other_user}","gists_url":"https://api.github.com/users/ocheron/gists{/gist_id}","starred_url":"https://api.github.com/users/ocheron/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ocheron/subscriptions","organizations_url":"https://api.github.com/users/ocheron/orgs","repos_url":"https://api.github.com/users/ocheron/repos","events_url":"https://api.github.com/users/ocheron/events{/privacy}","received_events_url":"https://api.github.com/users/ocheron/received_events","type":"User","site_admin":false},"created_at":"2016-09-07T15:31:41Z","updated_at":"2016-09-07T15:31:41Z","body":"There is still an issue about inconsistent extensions being sent: in `ciphersuite_all` one cipher is ECDSA-based, but ECDSA is not listed as a supported signature algorithm in the default configuration. Possible solutions would be to remove one or add the other (depending on whether ECC implementation is considered ready or not)."}}
{"actor":{"display_login":"ocheron"}}