Saturday, September 7, 2019

Orbit Downloader download.dll TLS 1.2 hack

The original Orbit Downloader (since 2.7) comes with download.dll that relies to OpenSSL-0.9.8 way for finding SSL/TLS cert's RSA key length, which cause crash with newer OpenSSL (1.0.0 to 1.0.2 only, 1.1.x and newer is not supported).
I made a hack to bypass RSA key length finding routine and it works!
SNI is not supported (yet, don't know if this can be added or not by myself).

Download:
http://o.rths.ml/gpc/files1.rt/Orbitdownloader-tls12hack.7z

EDIT: ... and since there is no SNI support (yet?), for downloading from CF-walled servers, you may need ProxHTTPSProxy's PopMenu TLS 1.3 3V3 and set Orbit's proxy to HTTP Connect 127.0.0.1:8079.

6 comments:

  1. Thanks for this roytam, the dll version is 2.7.0.10 I assume this is Orbit before version 4.x, which one you use?

    ReplyDelete
    Replies
    1. IIRC that DLL is never changed since 2.7.

      Delete
  2. ssl handshake error to caddy(web server) with let'sencrpt

    ReplyDelete
    Replies
    1. many TLS server requires SNI now, and it seems to be hard to hack it in the machine code to me.

      Delete