🐛 2024.1.1 → CurvePreferences includes unsupported curve

Question

🐛 2024.1.1 → CurvePreferences includes unsupported curve

AndreTheHunter opened this issue 6 months ago · comments

Describe the bug
failed to dial to edge with quic: INTERNAL_ERROR (local): tls: CurvePreferences includes unsupported curve

To Reproduce
Steps to reproduce the behavior:

Run cloudflared
See error in logs

If it's an issue with Cloudflare Tunnel:

Tunnel ID : aae7248f-182b-4b90-a546-fe384ca6d525

cloudflared config:

tunnel: aae7248f-182b-4b90-a546-fe384ca6d525
credentials-file: /Users/adejager/.cloudflared/aae7248f-182b-4b90-a546-fe384ca6d525.json
logfile: /Users/adejager/.cloudflared/aae7248f-182b-4b90-a546-fe384ca6d525.log
no-autoupdate: true
originRequest:
noTLSVerify: true
ingress:
- hostname: adejager.REDACTED
  service: http://localhost:8080
- service: http_status:404
  tunnel-cli:
  create-date: 2024-01-11T06:11:13.696Z

Expected behavior
No crash

Environment and versions

OS: MacOS
Architecture: ARM
Version: 2024.1.1

Logs and errors

{"level":"info","tunnelID":"aae7248f-182b-4b90-a546-fe384ca6d525","time":"2024-01-11T06:11:13Z","message":"Starting tunnel"}
{"level":"info","time":"2024-01-11T06:11:13Z","message":"Version 2024.1.1"}
{"level":"info","time":"2024-01-11T06:11:13Z","message":"GOOS: darwin, GOVersion: go1.21.6, GoArch: arm64"}
{"level":"info","time":"2024-01-11T06:11:13Z","message":"Settings: map[config:/Users/adejager/.cloudflared/aae7248f-182b-4b90-a546-fe384ca6d525.yml cred-file:/Users/adejager/.cloudflared/aae7248f-182b-4b90-a546-fe384ca6d525.json credentials-file:/Users/adejager/.cloudflared/aae7248f-182b-4b90-a546-fe384ca6d525.json logfile:/Users/adejager/.cloudflared/aae7248f-182b-4b90-a546-fe384ca6d525.log no-autoupdate:true]"}
{"level":"info","time":"2024-01-11T06:11:13Z","message":"Generated Connector ID: 7819734f-6dc6-4c0d-8d2c-98bb99e6aebf"}
{"level":"info","time":"2024-01-11T06:11:13Z","message":"cloudflared will not automatically update if installed by a package manager."}
{"level":"info","time":"2024-01-11T06:11:13Z","message":"Initial protocol quic"}
{"level":"info","time":"2024-01-11T06:11:13Z","message":"ICMP proxy will use 192.168.1.9 as source for IPv4"}
{"level":"info","time":"2024-01-11T06:11:13Z","message":"ICMP proxy will use fe80::82:d35e:76d8:6bf9 in zone en8 as source for IPv6"}
{"level":"info","time":"2024-01-11T06:11:13Z","message":"Created ICMP proxy listening on 192.168.1.9:0"}
{"level":"info","time":"2024-01-11T06:11:13Z","message":"Created ICMP proxy listening on [fe80::82:d35e:76d8:6bf9%en8]:0"}
{"level":"error","error":"no release found","time":"2024-01-11T06:11:14Z","message":"update check failed"}
{"level":"info","time":"2024-01-11T06:11:14Z","message":"Starting metrics server on 127.0.0.1:63157/metrics"}
{"level":"error","event":0,"ip":"198.41.200.13","connIndex":0,"error":"failed to dial to edge with quic: INTERNAL_ERROR (local): tls: CurvePreferences includes unsupported curve","time":"2024-01-11T06:11:14Z","message":"Failed to create new quic connection"}
{"level":"info","event":0,"ip":"198.41.200.13","connIndex":0,"time":"2024-01-11T06:11:14Z","message":"Retrying connection in up to 2s"}
{"level":"error","event":0,"ip":"198.41.192.107","connIndex":0,"error":"failed to dial to edge with quic: INTERNAL_ERROR (local): tls: CurvePreferences includes unsupported curve","time":"2024-01-11T06:11:15Z","message":"Failed to create new quic connection"}
{"level":"info","event":0,"ip":"198.41.192.107","connIndex":0,"time":"2024-01-11T06:11:15Z","message":"Retrying connection in up to 4s"}
{"level":"error","event":0,"ip":"198.41.200.13","connIndex":0,"error":"failed to dial to edge with quic: INTERNAL_ERROR (local): tls: CurvePreferences includes unsupported curve","time":"2024-01-11T06:11:18Z","message":"Failed to create new quic connection"}
{"level":"info","event":0,"ip":"198.41.200.13","connIndex":0,"time":"2024-01-11T06:11:18Z","message":"Retrying connection in up to 8s"}
{"level":"error","event":0,"ip":"198.41.192.7","connIndex":0,"error":"failed to dial to edge with quic: INTERNAL_ERROR (local): tls: CurvePreferences includes unsupported curve","time":"2024-01-11T06:11:21Z","message":"Failed to create new quic connection"}
{"level":"info","event":0,"ip":"198.41.192.7","connIndex":0,"time":"2024-01-11T06:11:21Z","message":"Retrying connection in up to 16s"}
{"level":"error","event":0,"ip":"198.41.200.13","connIndex":0,"error":"failed to dial to edge with quic: INTERNAL_ERROR (local): tls: CurvePreferences includes unsupported curve","time":"2024-01-11T06:11:25Z","message":"Failed to create new quic connection"}
{"level":"info","event":0,"ip":"198.41.200.13","connIndex":0,"time":"2024-01-11T06:11:25Z","message":"Retrying connection in up to 32s"}
{"level":"error","event":0,"ip":"198.41.192.47","connIndex":0,"error":"failed to dial to edge with quic: INTERNAL_ERROR (local): tls: CurvePreferences includes unsupported curve","time":"2024-01-11T06:11:54Z","message":"Failed to create new quic connection"}
{"level":"info","event":0,"ip":"198.41.192.47","connIndex":0,"time":"2024-01-11T06:11:54Z","message":"Retrying connection in up to 1m4s"}
{"level":"error","event":0,"ip":"198.41.200.13","connIndex":0,"error":"failed to dial to edge with quic: INTERNAL_ERROR (local): tls: CurvePreferences includes unsupported curve","time":"2024-01-11T06:12:06Z","message":"Failed to create new quic connection"}
{"level":"info","event":0,"ip":"198.41.200.13","connIndex":0,"time":"2024-01-11T06:12:06Z","message":"Retrying connection in up to 1m4s"}
{"level":"error","event":0,"ip":"198.41.192.37","connIndex":0,"error":"failed to dial to edge with quic: INTERNAL_ERROR (local): tls: CurvePreferences includes unsupported curve","time":"2024-01-11T06:12:12Z","message":"Failed to create new quic connection"}
{"level":"info","event":0,"ip":"198.41.192.37","connIndex":0,"time":"2024-01-11T06:12:12Z","message":"Retrying connection in up to 1m4s"}
{"level":"error","event":0,"ip":"198.41.200.53","connIndex":0,"error":"failed to dial to edge with quic: INTERNAL_ERROR (local): tls: CurvePreferences includes unsupported curve","time":"2024-01-11T06:12:29Z","message":"Failed to create new quic connection"}
{"level":"info","event":0,"ip":"198.41.200.53","connIndex":0,"time":"2024-01-11T06:12:29Z","message":"Retrying connection in up to 1m4s"}
{"level":"info","event":0,"ip":"198.41.200.53","connIndex":0,"time":"2024-01-11T06:12:39Z","message":"Switching to fallback protocol http2"}
{"level":"info","event":0,"connection":"e1416d27-a004-49b5-848e-61dc913358ff","connIndex":0,"location":"syd06","ip":"198.41.200.63","protocol":"http2","time":"2024-01-11T06:12:39Z","message":"Registered tunnel connection"}
{"level":"info","event":0,"connection":"aa6fb6fd-ad2b-47b9-834c-df381dcb5241","connIndex":1,"location":"bne01","ip":"198.41.192.47","protocol":"http2","time":"2024-01-11T06:12:40Z","message":"Registered tunnel connection"}
{"level":"info","event":0,"connection":"9cd6f7d3-d6d4-4509-aaac-f1b8d2c7f35e","connIndex":2,"location":"syd07","ip":"198.41.200.33","protocol":"http2","time":"2024-01-11T06:12:41Z","message":"Registered tunnel connection"}
{"level":"info","event":0,"connection":"24d8c46d-42e5-470f-9bb9-8e336c411034","connIndex":3,"location":"bne01","ip":"198.41.192.27","protocol":"http2","time":"2024-01-11T06:12:42Z","message":"Registered tunnel connection"}
{"level":"info","time":"2024-01-11T06:28:13Z","message":"Initiating graceful shutdown due to signal interrupt ..."}

Additional context
Appears to be the same issue as #1143. Others have also commented that the issue is ongoing on 2024.1.1: #1143 (comment)

João "Pisco" Fernandes · Answer 1 · Thu Jan 11 2024 20:04:04 GMT+0800 (China Standard Time)

Hi,
We realized that the release 2024.1.1 generated a binary in homebrew that didn't used the right go toolchain. We will be releasing 2024.1.2 today which should fix that.

André de Jager · Answer 2 · Thu Jan 11 2024 20:16:00 GMT+0800 (China Standard Time)

Awesome! Thanks @jcsf

Tim Golen · Answer 3 · Fri Jan 12 2024 01:02:53 GMT+0800 (China Standard Time)

Just hit this myself. Thanks for the quick update!

João "Pisco" Fernandes · Answer 4 · Fri Jan 12 2024 02:23:51 GMT+0800 (China Standard Time)

Release 2024.1.2 is out. We are just waiting for it to be bumped in homebrew to validate that everything is now fixed. Will leave this issue open until we validate the homebrew release.

André de Jager · Answer 5 · Fri Jan 12 2024 08:26:48 GMT+0800 (China Standard Time)

Homebrew/homebrew-core#159686 is out and it's working for me. Thanks @jcsf and @mdluo

João "Pisco" Fernandes · Answer 6 · Fri Jan 12 2024 19:55:03 GMT+0800 (China Standard Time)

Nice to ear.

AlpinDale · Answer 7 · Wed Jan 24 2024 10:25:32 GMT+0800 (China Standard Time)

I'm having this issue on ver. 2024.1.2 (from the Arch Linux extra repositories). Looks like it may not have been fixed.

Dehemi Weerakkody · Answer 8 · Thu Jan 25 2024 00:03:20 GMT+0800 (China Standard Time)

I'm also having this issue in arch linux. I'm on
cloudflared version 2024.1.2 (built 20240117-13:27:30)

Parfait Detchenou · Answer 9 · Thu Jan 25 2024 18:49:47 GMT+0800 (China Standard Time)

I'm facing same issue on Garuda Linux (arch based distro)

João "Pisco" Fernandes · Answer 10 · Fri Jan 26 2024 00:27:10 GMT+0800 (China Standard Time)

Which binaries are you using? the ones that we provide or the ones that come from arch linux repository? Because we are not the ones uploading it to arch linux repository, therefore we can't fix this for you guys. The person that built it for the Arch Linux repository needs to use the go toolchain of cloudflare.

Parfait Detchenou · Answer 11 · Fri Jan 26 2024 01:10:19 GMT+0800 (China Standard Time)

I'm using 2024.1.4 from project releases now and everything seems to work fine.

Chase Moskal · Answer 12 · Fri Mar 01 2024 04:18:50 GMT+0800 (China Standard Time)

on arch linux, the version installed via pacman did not work for me just now.

my solution was to uninstall my not-working pacman version via sudo pacman -Rcns cloudflared, then download the binary release of cloudflared from the downloads page, then move it to my /usr/local/bin/ with sudo mv ~/Downloads/cloudflared-linux-amd64 /usr/local/bin/cloudflared and give it executable permission with sudo chmod +x /usr/local/bin/cloudflared -- this worked 🎉