Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

vmess tcp + tls 链接后服务器报错 tls: bad record MAC #35

Open
YCarlB opened this issue Dec 29, 2021 · 6 comments
Open

vmess tcp + tls 链接后服务器报错 tls: bad record MAC #35

YCarlB opened this issue Dec 29, 2021 · 6 comments
Labels

Comments

@YCarlB
Copy link

YCarlB commented Dec 29, 2021

openssl 1.1.1m
libevent master 编译的
没有编译 ACL
移植到iOS上会有这个问题,同样的配置文件 同样的代码在macOS上不会出现

@chux0519
Copy link
Owner

chux0519 commented Jan 4, 2022

启动的 -t 参数是默认的吗,可以试试改成 1 看能不能解决问题。(这里的 threads 参数改成1 )

如果不行,配置的最外层 "ssl.verify" 是什么,如果是默认值,改成 false 跳过验证试试看

@YCarlB
Copy link
Author

YCarlB commented Jan 4, 2022

都尝试过了,我准备用mbedtls试试。

@YCarlB
Copy link
Author

YCarlB commented Jan 4, 2022

更换为mbedtls-2.28.0 版本
并且将环境变量设置为 v2ray.vmess.aead.forced=false 可以链接
https://github.com/Jrohy/multi-v2ray/issues/561

@chux0519
Copy link
Owner

chux0519 commented Jan 4, 2022

更换为mbedtls-2.28.0 版本 并且将环境变量设置为 v2ray.vmess.aead.forced=false 可以链接 https://github.com/Jrohy/multi-v2ray/issues/561

那可能和 v2ray 的这个升级有关,我之前有建一个 issue,不过还没来得及做。

如果仅仅是协议升级影响的话,有试过使用 openssl 然后同样设置 v2ray.vmess.aead.forced=false

@YCarlB
Copy link
Author

YCarlB commented Jan 4, 2022

晚点我试一下
但是不设置这个环境变量之前服务器报的
invalid user: VMessAEAD is enforced and a non VMessAEAD connection is received. You can still disable this security feature with environment variable v2ray.vmess.aead.forced = false . You will not be able to enable legacy header workaround in the future.
这个错误 就不是 bad record mac了

@YCarlB
Copy link
Author

YCarlB commented Jan 5, 2022

在设置了 v2ray.vmess.aead.forced=false并 改成openssl以后还是会出现 tls: bad record mac错误 , threads 参数改成1 也不行

@chux0519 chux0519 added the iOS label Jan 5, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants