pull down to refresh

59 sats \ 8 replies \ @optimism 26 Jun \ parent \ on: Zeus Problem Connecting to CLN Node After Update lightning

There's definitely something changed there. I have been really nervous to update because of the switch to react-native-nitro-tor because I have a million process findings on that repo.

Are you on v13.1.1? or .0?

write
compose
71 sats \ 6 replies \ @siggy47 OP 26 Jun

.0

reply
1169 sats \ 5 replies \ @optimism 26 Jun

Okay. v13.1.1 is tagged but not marked as release yet for me. That supposedly will fix this issue.

From the commit in there:

scope TLS bypass to .onion HTTPS endpoints

And from the PR @evankaloudis did to the tor dependency I mention above:

Adds a trust_invalid_certs: boolean field to HttpGetParams, HttpPostParams, HttpPutParams, and HttpDeleteParams. When true, the underlying reqwest::Client is built with .danger_accept_invalid_certs(true) so connections to endpoints with self-signed certificates succeed. Defaults to false, so existing callers are unaffected.

Perhaps Evan can advice on release timing / downgrading back to v13.0.2

reply
71 sats \ 4 replies \ @siggy47 OP 26 Jun

Damn, you are good! Thank you

reply
38 sats \ 2 replies \ @optimism 26 Jun

Maybe one thing you could try in the meantime (this is how I deal with it on my own PKI) is to import your cert into Android and trust it there. Then it should not throw. However, I do this with an actual private CA, not a self-signed thing, and mTLS, so it may be that for simple self-signed, there are issues. Maybe a stacker that uses self-signed certs on Android knows more.

reply
71 sats \ 1 reply \ @siggy47 OP 26 Jun

I don't know. If it matters, I run graphene.It's no big deal. The desktop CLN GUI wallet is fine for now

reply
38 sats \ 0 replies \ @optimism 26 Jun

I use Graphene on all my phones now. So yes, this absolutely works. It actually works better on AOSP than on Google stock Spydroid.

reply
38 sats \ 0 replies \ @optimism 26 Jun

Haha thanks. I review Zeus like I review Signal because I really want to use it again (current live LN wallets are Blixt) so it is my duty to my own security to know everything, because it would touch my money, directly.

Right now it's still too unstable, but I have hope. Evan is doing an awesome job.

reply
20 sats \ 0 replies \ @optimism 26 Jun

deleted by author