Opened 19 months ago
Closed 15 months ago
#26103 closed defect (not a bug)
Can't use meek with any domain.
Reported by: | itslannas | Owned by: | dcf |
---|---|---|---|
Priority: | Medium | Milestone: | |
Component: | Circumvention/meek | Version: | |
Severity: | Normal | Keywords: | |
Cc: | Actual Points: | ||
Parent ID: | Points: | ||
Reviewer: | Sponsor: |
Description
I have been using meek-client to connect to Tor, using Cloudfront.
I know Amazon has blocked domain fronting, but in my case, there is no need for domain fronting. I'm just using https://d2cly7j4zqgua7.cloudfront.net/ without fronting to connect, as *.cloudfront.net is whitelisted on the firewall. The problem is it just won't finish the handshake. I've even tried creating a cloudfront distribution myself, or hosting it on my own domain (on another network), and testing it but it just won't connect.
May 14 22:53:09.000 [warn] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 6; recommendation warn; host 0000000000000000000000000000000000000000 at 0.0.0.0:2)
May 14 22:53:09.000 [warn] 6 connections have failed:
May 14 22:53:09.000 [warn] 6 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE
Child Tickets
Change History (5)
comment:1 Changed 19 months ago by
Priority: | High → Medium |
---|
comment:2 Changed 19 months ago by
comment:4 Changed 19 months ago by
Status: | new → needs_information |
---|---|
Version: | Tor: 0.3.2.10 |
If you don't need a front, you can just connect to a bridge directly, like this:
Bridge meek 0.0.2.0:2 url=https://meek.bamsoftware.com/
comment:3 is right, for now you should be able to use the azure bridge, with or without fronting
Bridge meek 0.0.2.0:3 97700DFE9F483596DDA6264C4D7DF7641E1E39CE url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com Bridge meek 0.0.2.0:3 97700DFE9F483596DDA6264C4D7DF7641E1E39CE url=https://meek.azureedge.net/
(But also be aware that we are probably going to modify that CDN configuration soon, so the something.azureedge.net part will change.)
For hosting your own CloudFront distribution, there are some hints at doc/meek#AmazonCloudFront.
comment:5 Changed 15 months ago by
Resolution: | → not a bug |
---|---|
Status: | needs_information → closed |
This distribution is down by amazon request.
What "Origin Domain Name" used?
Which way? Reflector? Meek bridge?