Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Setting the "verify" field in ssl section to false, but still got cert file not found error. #696

Closed
1 task done
sunzcosmo opened this issue Mar 14, 2024 · 0 comments
Assignees
Labels

Comments

@sunzcosmo
Copy link

sunzcosmo commented Mar 14, 2024

  • I certify that I have read the contributing guidelines and I acknowledge if I don't follow the format below, or I'm using an old version of trojan, or I apparently fail to provide sufficient information (such as logs, specific numbers), or I don't check this box, my issue will be closed immediately without any notice.

Trojan Version

1.16.0 from openSUSE Tumbleweed official repo

~> trojan --version
Welcome to trojan 1.16.0
Boost 1_84, OpenSSL 3.1.4 24 Oct 2023
 [Enabled] MySQL Support (3.3.8)
 [Enabled] TCP_FASTOPEN Support
 [Enabled] TCP_FASTOPEN_CONNECT Support
 [Enabled] SSL KeyLog Support
 [Enabled] NAT Support
 [Enabled] TLS1.3 Ciphersuites Support
 [Enabled] TCP Port Reuse Support
OpenSSL Information
        Build Flags: compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -Wall -U_FORTIFY_SOURCE -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type -flto=auto -g -Wa,--noexecstack -fno-common -Wall -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL -DZLIB -DNDEBUG -D_FORTIFY_SOURCE=3 -DTERMIO -DPURIFY -D_GNU_SOURCE -DOPENSSL_NO_BUF_FREELISTS -DSYSTEM_CIPHERS_FILE="/etc/crypto-policies/back-ends/openssl.config"

Describe the bug
Following the official guide in https://trojan-gfw.github.io/trojan/config.html, set the "verify" field in ssl section to false, but still got cert file not found error.

~> trojan -t ./config.json
Welcome to trojan 1.16.0
[2024-03-14 13:24:20] [FATAL] fatal: use_certificate_chain_file: No such file or directory [system:2]
[2024-03-14 13:24:20] [FATAL] exiting. . .

To Reproduce
System version: windows subsystem for linux, openSUSE Tumbleweed 20240310
Config file:

{
    "run_type": "server",
    "local_addr": "0.0.0.0",
    "local_port": 10443,
    "remote_addr": "",
    "remote_port": ,
    "password": [
        ""
    ],
    "log_level": 1,
    "ssl": {
        "verify": false,
        "verify_hostname": false,
        "cert": "",
        "key": "",
        "key_password": "",
        "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384",
        "cipher_tls13": "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384",
        "prefer_server_cipher": true,
        "alpn": [
            "http/1.1"
        ],
        "alpn_port_override": {
            "h2": 81
        },
        "reuse_session": true,
        "session_ticket": false,
        "session_timeout": 600,
        "plain_http_response": "",
        "curves": "",
        "dhparam": ""
    },
    "tcp": {
        "prefer_ipv4": false,
        "no_delay": true,
        "keep_alive": true,
        "reuse_port": false,
        "fast_open": false,
        "fast_open_qlen": 20
    },
    "mysql": {
        "enabled": false,
        "server_addr": "127.0.0.1",
        "server_port": 3306,
        "database": "trojan",
        "username": "trojan",
        "password": "",
        "key": "",
        "cert": "",
        "ca": ""
    }
}

Expected behavior
Connecting to trojan server successfully without ssl verification.

Environment
System version: windows subsystem for linux, openSUSE Tumbleweed 20240310

@sunzcosmo sunzcosmo added the bug label Mar 14, 2024
@sunzcosmo sunzcosmo changed the title [BUG] [BUG] Setting the "verify" field in ssl section to false, but still got cert file not found error. Mar 14, 2024
@sunzcosmo sunzcosmo closed this as not planned Won't fix, can't repro, duplicate, stale Apr 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

2 participants