(2023-03-16, 23:48)Orion Pobursky Wrote: I've opened the parts path to non-HTTPS traffic (at least my internal testing suggests that it is) and LDPE part review still fails. Verbose doesn't really tell me why.
I just tried a bit of wireshark to see the traffic.
When I open anything on LDraw.org, the communication is running on TLSv1.3.
When I want to do a Part Review in LDPE, LDPE tries to set up a TLSv1.2 connection with the "ClientHello", but this is immediately refused by the server with a "Handshake Failure"
As TLS1.2 and TLS1.3 are not compatible, this looks like the server does not want a TLS1.2 connection and refuses it.
So in my view:
- either LDPE uses a non-encrypted connection to ldraw.org as Orion opened the traffic
- or LDPE tries to set up the connection using TLSv1.3
hope that points into the right direction....