Comment

Comment on Randomly getting ECH errors on self-hosted services.

Try with nslookup and see if you’re resolving the domain to both your local ipv4 address, and the Cloudflare ipv6 at the same time. I am using pihole for my local DNS, and it would give me both my local address, and also the Cloudflare ipv6 address.

source

Sort:hotnew top

Darkassassin07@lemmy.ca ⁨1⁩ ⁨month⁩ ago
Crap, looks like that’s exactly what it is.

Now how to fix that…

source
Darkassassin07@lemmy.ca ⁨1⁩ ⁨month⁩ ago
Added an AAAA record to pihole:

ombi.mydomain.example 0000:0000::0000:0000

Now nslookup returns the correct ipv4 address, and ‘::’ as the ipv6.

We’ll see if that works.

source
- Darkassassin07@lemmy.ca ⁨1⁩ ⁨month⁩ ago
  That unfortunately did not work. I am only getting the ipv4 address now, but I still get the same ECH error in chrome 1/5 tries.
  
  Firefox now changed errors from ‘invalid certificate’ to ‘connection is insecure but this site has HSTS’. Still wont show the cert or provide any further info. (forgot to grab a screenshot before the below ‘solution’)
  
  I’m really annoyed at this point and have just disabled cloudflare proxying for this service. That seems to have sorted it for all browsers. I may look further later, I may just say fuck it and leave it like this. Gotta walk away for a bit.
  
  source
  - bobslaede@feddit.dk ⁨1⁩ ⁨month⁩ ago
    You should change to use cname in pihole. I will write up on my computer later for you.
    
    source