Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Trouble connecting after a day or two #742

Closed
matbor opened this issue Jun 16, 2023 · 4 comments
Closed

Trouble connecting after a day or two #742

matbor opened this issue Jun 16, 2023 · 4 comments
Assignees
Labels

Comments

@matbor
Copy link

matbor commented Jun 16, 2023

Hi team, I have 3x ios16.5 devices running Owntracks 16.4.1 and 2x of them seem to work fine, as they are used a lot, but one of my other devices that doesn’t leave the house that often has trouble connecting if it hasn’t been touched for a few days.

Running tls with client certificates.

mosquito logs

1680839866: mosquitto version 2.0.15 running

58056-1686917077: New connection from 180.xxx.xxx.xxx:50279 on port 8883.
58057-1686917077: OpenSSL Error[0]: error:14FFF0C7:SSL routines:(UNKNOWN)SSL_internal:peer did not return a certificate
58058-1686917077: Client <unknown> disconnected: Protocol error.
58059-1686917078: New connection from 180.xxx.xxx.xxx:50280 on port 8883.
58060-1686917078: OpenSSL Error[0]: error:14FFF0C7:SSL routines:(UNKNOWN)SSL_internal:peer did not return a certificate
58061-1686917078: Client <unknown> disconnected: Protocol error.
58062-1686918030: New connection from 180.xxx.xxx.xxx:50305 on port 8883.
58063-1686918030: OpenSSL Error[0]: error:14FFF0C7:SSL routines:(UNKNOWN)SSL_internal:peer did not return a certificate
58064-1686918030: Client <unknown> disconnected: Protocol error.
58065-1686918030: New connection from 180.xxx.xxx.xxx:50308 on port 8883.
58066-1686918031: OpenSSL Error[0]: error:14FFF0C7:SSL routines:(UNKNOWN)SSL_internal:peer did not return a certificate
58067-1686918031: Client <unknown> disconnected: Protocol error.
58068-1686918032: New connection from 180.xxx.xxx.xxx:50316 on port 8883.
58069-1686918032: OpenSSL Error[0]: error:14FFF0C7:SSL routines:(UNKNOWN)SSL_internal:peer did not return a certificate
58070-1686918032: Client <unknown> disconnected: Protocol error.
58071-1686918034: New connection from 180.xxx.xxx.xxx:50328 on port 8883.
58072-1686918034: OpenSSL Error[0]: error:14FFF0C7:SSL routines:(UNKNOWN)SSL_internal:peer did not return a certificate
58073-1686918034: Client <unknown> disconnected: Protocol error.
58074:1686918038: New connection from 180.xxx.xxx.xxx:50335 on port 8883.
58075:1686918038: OpenSSL Error[0]: error:14FFF0C7:SSL routines:(UNKNOWN)SSL_internal:peer did not return a certificate
58076:1686918038: Client <unknown> disconnected: Protocol error.

In the owntracks app, it keeps going from idle to connecting, don’t really see any error.

However, after killing the app, ie. swipe up, the app reconnects fine and uploads all the cached mqtt messages. Will then switch fine between 4g/wifi

Logs after killing app.

58077-1686918046: New connection from 180.xxx.xxx.xxx:50341 on port 8883.
58078-1686918046: New client connected from 180.xxx.xxx.xxx:50341 as FRED (p2, c0, k60, u'FRED').
58079-1686918057: Client FRED disconnected

Let me know if you need anymore details.

@ckrey ckrey self-assigned this Jun 17, 2023
@ckrey ckrey added the bug label Jun 17, 2023
@ckrey
Copy link
Member

ckrey commented Jun 17, 2023

@matbor thank you for reporting the issue. The problem is known since #605. We are using Apple's NSURLSession do connect and re-connect. Up to now we have not found a solution for the problem.

@matbor
Copy link
Author

matbor commented Jun 20, 2023

@ckrey thanks for that, I did find those similar issues, but noticed they had stalled.

Where you able to replicate this on your devices?

@ckrey
Copy link
Member

ckrey commented Jun 20, 2023

The problem only occurs when client certificates are used. It can be replicated but happens only eventually when the device does not connect for a longer time.
In day-to-day operations we don‘t use clent certifcates bit server certificates by letsencrypt and user/pass

@ckrey
Copy link
Member

ckrey commented Mar 19, 2024

Sorry, we have no new insight to the problem. Will close this issue, but leave #605 open

@ckrey ckrey closed this as completed Mar 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants