Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

several TLS records

See original GitHub issue

I’m getting the following message in log for every domain I try: The MASK_HOST $host returned several TLS records, this is not supported What am I doing wrong? What domain can I use that is supported? Even my own domains with TLS1.3 only do not fit.

Issue Analytics

State:
Created 4 years ago
Reactions:3
Comments:13 (6 by maintainers)

Top GitHub Comments

3reactions

alexanderekcommented, Dec 10, 2019

Не понятно как решить данную проблему, если использовать собственный домен. В моем случае схема следующая: haproxy -> mtproto -> caddy. До 1.0.8 эта схема работала корректно, сейчас я также получаю данную ошибку.

3reactions

zhdkirillcommented, Nov 20, 2019

OK, so there are 2 issues.

Why if certificate length is less than MIN_CERT_LEN it marked as “several records”? It is more like insufficient record length, and I’m not quite getting why is it bad. And it’s definitely one record, not several.
How can I get my TLS record of sufficient length? Is it possible with Let’s Encrypt certificates?

So far I found that google.com and cloudflare.com are good enough, but making Fake-TLS with my actual domain would be much better in terms of obscurity.

Top Results From Across the Web

2 TLS record layers in the same packet - Server Fault

I am analyzing some packets from a smart cam, and I found that a single IP packet includes 2 TLS records as shown...

Networking 101: Transport Layer Security (TLS)

The TLS Record protocol is responsible for identifying different types of messages (handshake, alert, or data via the "Content Type" field), as well...

TLS Record Layer - Web Security, Privacy & Commerce, 2nd ...

Each TLS record contains the following information: Content type. Protocol version number. Length. Data payload (optionally compressed and encrypted).

TLS Record Protocol - Win32 apps - Microsoft Learn

The Transport Layer Security (TLS) Record protocol secures application data using the keys created during the Handshake.

Transport Layer Security - Wikipedia

It runs in the presentation layer and is itself composed of two layers: the TLS record and the TLS handshake protocols. The closely...