SSL handshake failed (-1) for certain https hosts (DEF-2633) (SOLVED)

[britzl]

I finally got around to testing this. Defold SSL connection is successful to my servers if I add
AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA to the default cipher list.

Thank you for providing an update and confirming that it was indeed the ciphers.

One thing to note, these ciphers were recently marked “weak” by SSL Labs due to the Robot Attack. It didn’t effect my rating, but maybe worth noting.

Yes, this is something we need to address at some point. Thank you for pointing this out.

[inactive-vilse]

The documentation was updated with supported cipher suites a couple of release ago here: https://www.defold.com/ref/http/#http.request:url-method-callback--headers---post_data---options-

Changing our SLL library to allow more modern ciphers is in the backlog, as @britzl stated.

[Dragosha]

Does it help with:

PlayFab Defold SDK Error (DEF-3789)

after added timeout to http.request options an error has changed to WARNING:DLIB: Unhandled ssl status code: -261 ERROR:SCRIPT: HTTP request to 'https://XXXX.playfabapi.com/Client/LoginWithCustomID?sdk=DefoldSdk_0.52.190304' failed (http result: -1 socket result: -1000)

?

[britzl]

We are making progress on this issue and we have at east partially pinpointed the problem. We will continue to work on it this sprint, and hopefully have a solution in place soon.

[AGulev]

We replaced the old SSL library with the new one mbedTLS.
It should work fine starting 1.2.162