[Chilli] client MTU too small for SSL requests

andrew@PolkaSpots.com andrew at polkaspots.com
Mon May 19 20:02:26 UTC 2014


Hi Liu,

Not sure if this is the best way of doing it, but try in
/etc/config/network

to add on the wan interface

option mtu '1400'

Have a great one

On 19/05/14 18:15, Liu Wenmao wrote:
> Hi list:
>
> I recently use coova-chilli as wifi auth service on my openwrt box, 
> http web seems ok, but some of my client can not rearch some https 
> webs, which are random, for example, my android phone can not load one 
> https page, but my ipad can.
>
> After I googled I find that it may be a MTU problem, so I set a small 
> MTU value,say 1400 for the android phone, so it can load the https 
> page now. But I can not change every mobile phone because it is not 
> convinient, so I probably should change the chilli settings. But I do 
> not know how, any someone help?
>
> I notice that all interfaces of the openwrt system has MTU 1500, and 
> none of them drop any packets from 'ifconfig' cmd output.
>
> I tcpdumped the packets and find that the key exchage finishes, but 
> when client sends requests, it seems to have no responses because it 
> retransmit the packets for 3 more times, but there are no error icmp 
> responses from chilli during the retransmission,which I think should 
> occur when the router find a too big segment, is it a bug?
>
> Wenmao Liu
>
>
> _______________________________________________
> Chilli mailing list
> Chilli at coova.org
> http://lists.coova.org/cgi-bin/mailman/listinfo/chilli


---------------------------------------------------------------------------------------

The information contained in this email and its attachments is confidential and may be the subject of legal, professional or other privilege. It is intended only for the named addressees and may not be disclosed to anyone else without consent from PolkaSpots Limited. If you are not the named addressee you must not use, disclose, distribute, copy, print or rely on the contents of this email and should destroy it immediately. Whilst PolkaSpots Limited takes care to protect its systems from electronic virus attack or other harmful event, the firm gives no warranty that this email message (including any attachments to it) is free of any virus or other harmful matter and accepts no responsibility for any loss or damage resulting from the recipient receiving, opening or using it. If you need any further information, please contact the originator of this message on +44 (0)20 7183 1471.

PolkaSpots is a limited company registered in the UK (registered number 05508105). Registered Office: 204 Buspace Studios, Conlan Street, London W10 5AP

Website: www.polkaspots.com
WiFi Hotspot Blog: www.polkaspots.com/blog

---------------------------------------------------------------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.coova.org/pipermail/chilli/attachments/20140519/b7afe060/attachment.html>


More information about the Chilli mailing list