Unverified Commit a092192d authored by Birte Kristina Friesel's avatar Birte Kristina Friesel
Browse files

Setting TLS ciphersuites via API did not work out entirely 

Re-add the corresponding patch to the documentation.
This partially reverts commit 72d5c98f.
parent 0e692702

doc/setup.md

+19 −0
Changes for doc/setup.md: 19 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -84,6 +84,16 @@ Note that Deutsche Bahn have put parts of their API behind an IP reputation filt 
In general, checkins with the bahn.de backend will only be possible if travelynx is accessing it from a residential (non-server) IP range.

See the dbris bahn.de proxy / proxies setting in `example/travelynx.conf` for workarounds.



### Akamai BMP / bahn.de TLS fingerprinting



You may need to patch the TLS cipher suites advertised by travelynx.

If you're getting HTTP 403 errors for the bahn.de backend, run the

following and re-start travelynx:



```

patch -p1 < doc/tls-ciphers.patch

```



## Updating



It is recommended to run travelynx directly from the git repository.  This way,
@@ -94,6 +104,15 @@ introduce new dependencies, run **examples/update.sh with-deps**. 
If you are not using carton, or have some other peculiarities in your setup,

you may need to adjust the script.



### Akamai BMP / bahn.de TLS fingerprinting



If you're getting HTTP 403 errors for the bahn.de backend after a **with-deps**

update, run the following and re-start travelynx:



```

patch -p1 < doc/tls-ciphers.patch

```



## Setup with Docker (EXPERIMENTAL)

---

doc/tls-ciphers.patch

0 → 100644
+11 −0
Changes for doc/tls-ciphers.patch: 11 added lines, 0 removed lines.
Original line number Diff line number Diff line 
--- a/local/lib/perl5/IO/Socket/SSL.pm

+++ b/local/lib/perl5/IO/Socket/SSL.pm

@@ -3373,7 +3373,7 @@

 	    ) || return IO::Socket::SSL->error("Failed to set SSL cipher list");

 	}

     }

-    if ( my $cl = $arg_hash->{SSL_ciphersuites} ) {

+    if ( my $cl = 'TLS_AES_256_GCM_SHA384' ) {

 	return IO::Socket::SSL->error("no support for SSL_ciphersuites in Net::SSLeay")

 	    if ! $can_ciphersuites;

 	for (keys %ctx) {