rustls https errors on atomicdata.dev

[joepio]

The server keeps going down since running 29.2, and it throws these errors:

[2021-12-11T23:44:04Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-11T23:44:04Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-11T23:44:04Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-11T23:44:04Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }

[joepio]

Tried removeing the https folder from config, since a few restarts did not help.

After that, the server got stuck on [2021-12-11T23:49:07Z WARN atomic_server::https] HTTPS TLS Cert init sucesful! Stopping HTTP server, starting HTTPS...

[joepio]

I think the problem was that the HTTP port was not set, so defaulted to the new 9883 value, instead of 80.

[joepio]

Hmm it went down again... Not sure if it was the HTTPS error, though, forgot to save logs

[joepio]

Yes, it's that same issue.

[2021-12-12T11:30:13Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-12T11:30:13Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-12T11:30:13Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-12T11:30:13Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-12T11:30:15Z WARN  rustls::conn] Sending fatal alert HandshakeFailure
[2021-12-12T11:30:15Z WARN  rustls::conn] Sending fatal alert NoApplicationProtocol
[2021-12-12T11:30:15Z WARN  rustls::conn] Sending fatal alert ProtocolVersion
[2021-12-12T11:30:15Z WARN  rustls::conn] Sending fatal alert HandshakeFailure
[2021-12-12T11:30:27Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-12T11:30:27Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-12T11:30:27Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-12T11:30:27Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-12T11:30:45Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-12T11:30:49Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-12T11:30:53Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }
[2021-12-12T11:30:56Z ERROR rustls::conn] TLS alert received: AlertMessagePayload {
        level: Fatal,
        description: BadCertificate,
    }

[joepio]

actix/actix-web#2507

[joepio]

I'm seriously considering rolling back actix-web to v3.x. Will break Tauri builds, but that's a nice to have anyway. I think I've learned my lesson on upgrading too early to beta software :)

Should also fix #283

[joepio]

Just noticed this on atomicdata.dev, after the server went down without a specific panic log

[2021-12-21T04:36:19Z WARN  rustls::server::tls13] Resumption ignored, DHE_KE not offered

[joepio]

This comment is interesting:

6bb7412#r62189445

[joepio]

This fixes it, had nothing to do with actix:
77bbfb4

[joepio]

It's still here...

2021-12-30T13:43:13.838283Z  WARN rustls::conn: Sending fatal alert HandshakeFailure
2021-12-30T13:43:59.125224Z  WARN rustls::conn: Sending fatal alert HandshakeFailure
2021-12-30T13:44:42.298872Z  WARN rustls::msgs::handshake: Illegal SNI hostname received [49, 48, 56, 46, 54, 49, 46, 50, 53, 50, 46, 53, 48]