syncthing-lite icon indicating copy to clipboard operation
syncthing-lite copied to clipboard

TLS fails on Android 7.0

Open nekr0z opened this issue 5 years ago • 9 comments

Looks like syncthing-lite is suffering from what was recently discussed and fixed for syncthing-android. On Android 7.0 no connections to remote devices can be established; remote devices running Syncthing 1.0.1 show

INFO: Listen (BEP/tcp): TLS handshake: EOF INFO: Listen (BEP/tcp): TLS handshake: remote error: tls: illegal parameter INFO: Listen (BEP/tcp): TLS handshake: EOF INFO: Listen (BEP/tcp): TLS handshake: remote error: tls: illegal parameter INFO: Listen (BEP/tcp): TLS handshake: remote error: tls: illegal parameter

in their logs.

nekr0z avatar Mar 03 '19 10:03 nekr0z

When looking at the linked merge request at https://github.com/syncthing/syncthing-android/pull/1281/files#diff-a6bf66b4cf404ae3f19b5148b0084e1dR118, I think that it's only related to the web UI and not to the block exchange protocol.

l-jonas avatar Mar 03 '19 10:03 l-jonas

Could well be, I don't really speak Java to figure it out. Still, the problem exists. I'm currently testing the exactly same setup on Android 8 (no issues) and Android 7 (the problem described).

nekr0z avatar Mar 03 '19 10:03 nekr0z

Does it work with Android 7 when the remote device uses an older syncthing version?

l-jonas avatar Mar 03 '19 10:03 l-jonas

Will test, need to fire up a VM and deploy an old version for that.

nekr0z avatar Mar 03 '19 10:03 nekr0z

I think a new system user with a user local installation would be enough.

l-jonas avatar Mar 03 '19 10:03 l-jonas

0.14.51 - same behaviour.

nekr0z avatar Mar 03 '19 11:03 nekr0z

Exactly the same behavior? The EOF's are expected, the illegal parameters should not occur. Otherwise it never worked at Android 7 (or the version you tested is too new or it is related to something like the ssl libraries of the OS of the non-android device).

l-jonas avatar Mar 03 '19 11:03 l-jonas

Yes, exactly the same. The version I'm testing is what's released in Google Play. And yes, it's as Android a device as one could get. To be fair, from what I read in the abovementioned discussion, if st-lite relies on OS to provide TLS, it shouln't ever have worked on 7.0.

nekr0z avatar Mar 03 '19 11:03 nekr0z

For what it's worth I have the same issue on a stock Motorola G4plus, but not on a Asus Zenfone 2 with latest LineageOS. All the latest versions and Syncthing Lite is from FDroid on both.

Newar417 avatar Apr 04 '19 08:04 Newar417