No matter what I configured, I couldn't get any https:// requests to work under Pi with the Gondolin extension. I discovered that the root cause is as follows:
- Pi is built with Bun
- Bun does not support
SNICallback
- Gondolin uses
SNICallback as part of the TLS MITM
As a result, it's impossible for Gondolin-sandboxed agents running in Pi to make https:// network requests.
I'm not sure if this is issue is better suited for the Pi repo or here, but both are managed by the same org so I figured it can be moved if necessary.
Steps to reproduce
- Install Pi with the default-packaged
pi-extension-gondolin extension
- Launch a new Pi session
!curl http://example.com works, but !curl https://example.com doesn't
No matter what I configured, I couldn't get any
https://requests to work under Pi with the Gondolin extension. I discovered that the root cause is as follows:SNICallbackSNICallbackas part of the TLS MITMAs a result, it's impossible for Gondolin-sandboxed agents running in Pi to make
https://network requests.I'm not sure if this is issue is better suited for the Pi repo or here, but both are managed by the same org so I figured it can be moved if necessary.
Steps to reproduce
pi-extension-gondolinextension!curl http://example.comworks, but!curl https://example.comdoesn't