leaf icon indicating copy to clipboard operation
leaf copied to clipboard

iOS VMess, VMessWSS - SSL error

Open corgisupercode opened this issue 2 years ago • 4 comments

I success connected with ss and trojan, but can not connect with VMess and VMessWSS. "cacert.pem" also added to project tun-fd also replaced

var certPath = Bundle.main.executableURL?.deletingLastPathComponent() setenv("SSL_CERT_DIR", certPath?.path, 1) // NSLog("certPath = \(certPath!.path)") certPath?.appendPathComponent("cacert.pem") NSLog("certPath = \(certPath?.path)") setenv("SSL_CERT_FILE", certPath?.path, 1)

My conf:

[General] loglevel = debug dns-server = 223.5.5.5, 8.8.8.8 tun-fd = REPLACE-ME-WITH-THE-FD routing-domain-resolve = true

interface = 127.0.0.1 port = 1087

socks-interface = 127.0.0.1 socks-port = 1086

[Proxy] #SS = ss, MY_SERVER_IP, 1080, encrypt-method=chacha20-ietf-poly1305, password=mypass #TrojanWS = trojan, MY_SERVER_IP, 2083, password=mypass,tls-insecure=true, tls=true, sni=825bcb48ee1c3929.metric.gstatic.com, ws=true, ws-path=/ #VMess = vmess, MY_SERVER_IP, 8081, username=cce1dcd4-ad51-471e-bf61-07b7e156d9b2 VMessWSS = vmess, MY_SERVER_IP, 8080, username=2002b73f-60dd-402a-8e11-b5fdcad37ca2, tls=true, ws=true, ws-path=/

Error in logs Jan 27 20:21:38 PacketTunnel[45416] <Notice>: 2024-01-27T19:21:38.732979Z DEBUG leaf::app::dispatcher: dispatch tcp 240.0.0.1:59688 -> configuration.apple.com:443 to [VMessWSS] failed: connect ssl stream failed: error:0A0000C6:SSL routines:tls_get_more_records:packet length too long:ssl/record/methods/tls_common.c:649:, error:0A000139:SSL routines::record layer failure:ssl/record/rec_layer_s3.c:646: Jan 27 20:21:38 PacketTunnel[45416] <Notice>: 2024-01-27T19:21:38.733019Z INFO leaf::app::dispatcher: [240.0.0.1] [tcp] [tun] [VMessWSS] [failed] [configuration.apple.com:443]

Does it work for anyone? What could be the reason? I've been looking for two days now.

corgisupercode avatar Jan 27 '24 19:01 corgisupercode

  1. try the same config on desktop
  2. check your server config

eycorsican avatar Jan 27 '24 20:01 eycorsican

Thank you for your reply. I tried to connect with this config using app (v2box for iOS) and successfully connected.

Info: I use Marzban for create configs. Can you check on your side? (shadowsocks and trojan works perfect)

This 2 configs vmess works in v2box iOS app. But I get ssl error. vmess://eyJhZGQiOiAiMTk1LjIzNC42My4zMiIsICJhaWQiOiAiMCIsICJob3N0IjogImdvb2dsZS5jb20iLCAiaWQiOiAiNWEzNzdmNzItZDVlYS00M2MxLWEzYjItMmI3MTYxNjk2OWY3IiwgIm5ldCI6ICJ0Y3AiLCAicGF0aCI6ICIvIiwgInBvcnQiOiA4MDgxLCAicHMiOiAiXHVkODNkXHVkZTgwIE1hcnogKE5ld1VzZXIpIFtWTWVzcyAtIHRjcF0iLCAic2N5IjogImF1dG8iLCAidGxzIjogIm5vbmUiLCAidHlwZSI6ICJodHRwIiwgInYiOiAiMiJ9

vmess://eyJhZGQiOiAiMTk1LjIzNC42My4zMiIsICJhaWQiOiAiMCIsICJob3N0IjogImdvb2dsZS5jb20iLCAiaWQiOiAiNWEzNzdmNzItZDVlYS00M2MxLWEzYjItMmI3MTYxNjk2OWY3IiwgIm5ldCI6ICJ3cyIsICJwYXRoIjogIi8iLCAicG9ydCI6IDgwODAsICJwcyI6ICJcdWQ4M2RcdWRlODAgTWFyeiAoTmV3VXNlcikgW1ZNZXNzIC0gd3NdIiwgInNjeSI6ICJhdXRvIiwgInRscyI6ICJub25lIiwgInR5cGUiOiAiIiwgInYiOiAiMiJ9

Thank you for such a wonderful product. I would be grateful if you can help solve this problem.

corgisupercode avatar Jan 28 '24 09:01 corgisupercode

i guess it's vmessaead on your server, which is not supported by leaf

eycorsican avatar Jan 28 '24 10:01 eycorsican

Yes, you are right. I have been tried config from internet: VMess = vmess, 130.61.111.167, 21872, username=9a7a75d4-ab7e-4ba0-bbfa-a4acddc18084 And its works.

corgisupercode avatar Jan 28 '24 10:01 corgisupercode

有telegram?可以一起讨论下

ghost avatar Feb 02 '24 02:02 ghost

@loveCodingStar my or repository owner?

corgisupercode avatar Feb 05 '24 17:02 corgisupercode

@corgisupercode Hi, I also encountered the same error as you, but only on iOS. macOS can connect to Vmess normally using the same configuration file. However, when connecting to iOS, the same error as yours appears. What is the reason?

Cyberbolt avatar Mar 03 '24 07:03 Cyberbolt

@loveCodingStar my or repository owner?

your

ghost avatar Mar 20 '24 10:03 ghost