-
-
Notifications
You must be signed in to change notification settings - Fork 60
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
WebTransport connection rejected on FF 124-127 #251
Comments
Furthermore, simply typing this in the console also fails:
|
More troubleshooting: FF 125 (Stable) also does not work. |
Also doesn't work on FF 127 (Nightly) |
Looks like a cert issue |
Im not aware of any issues with FF webtransport using selfsigned certs. @cBournhonesque im pretty sure we tested FF too? Though since the api is still unstable there is the possibility of flags being set wrongly as well as recent api changes in FF (unlikely, but possible i guess). |
What gives you that information from the stack trace? I might not be seeing it. Also, it works on Chrome, as mentioned. So I'm dually confused then if it's a cert issue. I used the generate script. |
Its the most likely explanation since the issue occurs during the handshake. Definitely requires some more testing to confirm though! |
Thanks for the report; @Nul-led I haven't tested in Firefox, no. I'm not entirely sure if the self-signed certificate mechanism is intended for production settings, see this: BiagioFesta/wtransport#130 According to this: https://wpt.fyi/results/webtransport?label=experimental&label=master&aligned |
I tested FF 127 (Nightly), mentioned earlier. Specifically, The first connection gives this error:
Trying to connect a second times gives the common error:
|
How can I help to narrow that down? Given FF 127 which is supposed to support these certs (thanks @cBournhonesque) doesn't work, does that mean it's a different issue? |
Opened this: BiagioFesta/wtransport#166 |
I would highly recommend using ACME/LetsEncrypt provided certificates, unless you actually need to subvert Web PKI for security reasons. |
Anyone that feels comfortable with testing this with a LetsEncrypt/ACME cert? |
I have other wtransport/xwt project that works on FF with ACME and no cert hashes. That said, it still crashes on FF but due to other bug in bevy rendering... So, things are rough :D |
@Nul-led did you test that it works on FF? |
@cBournhonesque didnt we confirm that server hashes arent supported by FF? whats the point in keeping this open then? maybe close as not planned then 🤔 |
I'd like to confirm if possible that examples can work on FF if we use a LetsEncrypt/ACME certificate |
Following this rabbit hole into the linked issued and hg changesets seems to indicate that the parameter should indeed be supported in current Firefox. This is wonderful news. I came here during an entirely unrelated search and am not a user of this library. Though if I may chime in with my previous WebTransport experiences:
|
@ansemjo thanks for the insights :) |
BiagioFesta/wtransport#192 on |
It (specifically) didn't - see MOZGIII/xwt#156 (comment) |
Oh ok! I haven't tested it actually, I just trusted the issue above. I can re-open it if others still encounter the issue |
According to https://caniuse.com/webtransport, FF 124 is supported?
On Firefox 124, MacOS (Silicon), I get a vague WebTransport connection rejected error.
I tried connecting from
[::1]:8080
,localhost:8080
, and127.0.0.1:8080
with Trunk, no dice.Chrome works fine.
Stack trace:
The text was updated successfully, but these errors were encountered: