Skip to content

TLS MITM doesn't work in Pi due to Bun's unimplemented SNICallback #147

Description

@antonok-edm

No matter what I configured, I couldn't get any https:// requests to work under Pi with the Gondolin extension. I discovered that the root cause is as follows:

  • Pi is built with Bun
  • Bun does not support SNICallback
  • Gondolin uses SNICallback as part of the TLS MITM

As a result, it's impossible for Gondolin-sandboxed agents running in Pi to make https:// network requests.

I'm not sure if this is issue is better suited for the Pi repo or here, but both are managed by the same org so I figured it can be moved if necessary.

Steps to reproduce

  1. Install Pi with the default-packaged pi-extension-gondolin extension
  2. Launch a new Pi session
  3. !curl http://example.com works, but !curl https://example.com doesn't

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions