ssl->need_bytes issue about axtls-8266 HOT 10 OPEN

Looks like the other side is not talking over SSL. Per SSL spec, fragment size can not exceed 16 kilobytes, but your log shows that message header indicates size >16k (37663, 61896, 52978, 26851).

(so there is no point in setting max_plain_length above 16*1024 bytes)

from axtls-8266.

@igrr what about Error: Invalid X509 ASN.1 file (X509 not ok) and your library supports tlsv1.1 right?

from axtls-8266.

That one is open in #10

from axtls-8266.

@igrr this is the error i receive at the server side:
1458292496: OpenSSL Error: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

from axtls-8266.

Could you please give me an URL of the server so I can try myself?

from axtls-8266.

it is an MQTT broker (mosquitto) running at frezbo.com on port 8883, I can succesfully connect to it using MQTTfx a client for linux, how do i PM you the login details and cert files. The problem is that i cannot connect to the broker without providing a CA file to the MQTTfx client, but the esp8266 connects even if i do not load the CA file with the above mentioned error and frequent disconnections.

from axtls-8266.

Okay, i don't think i need login details or correct cert files to establish a TLS connection. Obviously the server will kick me out later on, but your issue happens during handshake, to that would be enough.

from axtls-8266.

@igrr I changed the MQTT library i was using from PubSubClient to Adafruit's MQTT library and now there seems to be no issue till now. The funny fact is that loading or not loading the CA cert have no effect whatsoever.

from axtls-8266.

Same error here :-((

webSocket.beginSSL("dcf77logs.de", 443,"/ajax/liveview");

[WSc] Disconnected!
please start sntp first !
Error: Invalid X509 ASN.1 file (X509 not ok)

from axtls-8266.

With >>> webSocket.beginSSL("dcf77logs.de", 80,"/ajax/liveview");

please start sntp first !
ssl->need_bytes=20527 violates spec
[WSc] Disconnected!

from axtls-8266.