TLS connections to selected hosts fail on Norwegian flights

0

I fly often with Norwegian, which offers a free internet connection. While airborne, some https websites work, while others don't.

Websites that work:

Websites that don't:

The problem happens both with my Mac laptop (all curl, Safari and Chrome) and my Android phone.

Using http does work on all websites. For instance:

$ curl http://stackoverflow.com:80
<html><head><link href="http://wifi.norwegian.com/unb/unb.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="http://wifi.norwegian.com/unb/jqr44-1.8.3.js"></script>
<script type="text/javascript">var r44_btime=new Date();var r44_smu_time=1562338417.476;var r44_is_cached=false;</script>
<script type="text/javascript" src="http://wifi.norwegian.com/unb/unb.js"></script>
<title>Object moved</title></head><body>
<h2>Object moved to <a href="https://stackoverflow.com/">here</a>.</h2>
</body></html>

Note how Norwegian injects some html in the redirect response

When curling the failing websites I get the following error:

$ curl https://github.com
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to github.com:443

I captured the TCP exchange with GitHub (local IP 10.177.73.253 GitHub's IP 140.82.118.3):

Wireshark capture scrrenshot

You may also inspect the full capture at curl_https_github_dot_com.pcapng

Any ideas of what could be happening and how I could work around it?

fons

Posted 2019-07-10T12:27:36.570

Reputation: 486

No answers