Conversation
Notices
-
@p @Moon I've played around with federation from rawr; https being hardcoded even in AP objects/actors makes it a pain in the ass. Did anything get received? The only request I see in logs is to the user profile.
-
@mint @p @Moon
> https being hardcoded even in AP objects/actors makes it a pain in the ass.
Accurate. The stupid "https everywhere" meme claims more time. (Incidentally, one of the first rules of HTTP is that you do not construct URLs, you follow links. Nobody does it that way, but this problem would not exist if everyone did.)
> Did anything get received?
I see occasional errors that it couldn't fetch, e.g., https://ryonagujouss6tp6tpuxdjonaetk24b4ksekvkktnwxutq2m3mhhu5qd.onion/.well-known/webfinger?resource=acct:mint@ryonagujouss6tp6tpuxdjonaetk24b4ksekvkktnwxutq2m3mhhu5qd.onion , and I see some that look like webfinger logs: "2024/01/13 10:24:21 finger lick: acct:p@pbuhwjjhrzcvrghtfqlwqlgabuzc7jnkqv4swekxjvv7pgubd7jjoiqd.onion". It's probably sending back a bunch of (bad) HTTPs URLs that you can't actually fetch. After I got it to make a request by tracing it down a ways, I grepped the codebase for "https" and there are a few dozen at least, so they'd all need to be replaced with a decision. (The fedilist crawler had an easier time with this: instead of "Get these URLs", the logic is higher-level so the "https" only needed to be replaced in one place.)
> Did anything get received? The only request I see in logs is to the user profile.
I don't think anything came back; I can't see anyone. I tried following some people from the cleartext addresses but it's probably sending you HTTPS URLs to send the "Accept" activities to.
-
@p @Moon @p >it's probably sending you HTTPS URLs to send the "Accept" activities to
Yup. I tried changing it to HTTP right in rawr's DB and seems like it didn't help, likely making it fail on signature validation since it expect the HTTPS URL. That's when the only GET to profile happened. Tried another hack (which should keep it presented as HTTPS), didn't help as in this case honk didn't even attempt to load profile.
N.B.: trying to federate with agency's Tor mirror is fruitless, best you'll get is a duplicate profile and activities, and nothing would federate straight to onion because of the same HTTP signatures.
Screenshot_20240114_193522.png
-
@mint @Moon @p
> I tried the Tor one first,
That is, you were seeing the "bash computer and observe results" debugging method.
-
@mint @Moon @p
> That's when the only GET to profile happened.
You don't see anything in ryona.agency logs? Basically, those were the only two instances that I could think of off the top of my head that had both Tor and clearnet. I tried poking a Mitra service, I think it might be easier to work with Mitra than Honk for something like this (or just use your Pleroma patches).
> best you'll get is a duplicate profile and activities, and nothing would federate straight to onion because of the same HTTP signatures.
Yeah, I tried the Tor one first, but Honk wanted https://...onion, that's why I tried ryona.agency.
-
@p @Moon @p I saw a bunch of requests in agency's logs (a couple GETs, a couple POSTs), that's where I found the full address since you never disclosed it. I'm mostly talking about my own attempts at getting it to federate with my own Tor instance.
>or just use your Pleroma patches
You don't need any for full federation, those patches that I have are mostly quality of life and workarounds for abandonware Hackney adapter (which still is the only adapter that correctly works with HTTP proxies; I think Gun and Finch completely spaz out with them, but the former might work fine with SOCKS proxy instead).
Speaking of, Pleb made a patch that dynamically connects to Tor depending on hostname: https://declin.eu/objects/7d564cb6-cbb0-4801-b052-59975d0cc1fe.
-
@mint @Moon @p
> that's where I found the full address since you never disclosed it.
Yeah, getting "pbuh" by luck, it makes me wanna ensure I can use it for *something*.
> (which still is the only adapter that correctly works with HTTP proxies; I think Gun and Finch completely spaz out with them, but the former might work fine with SOCKS proxy instead).
I do not know why, but some languages seem to lend themselves to having a half-dozen implementations of HTTP with a different set of broken/missing features.
> Speaking of, Pleb made a patch that dynamically connects to Tor depending on hostname: https://declin.eu/objects/7d564cb6-cbb0-4801-b052-59975d0cc1fe.
Fuckin' *nice*.