ERR_SSL_PROTOCOL_ERR on some sites

Issues & Assistance
1

im really new to linux and due to the restrictions in my country im forced to use DNS, which is completely working fine and had no issues on debian whatsoever. i tried to close my firewall and reopen it, completely rebooting the system, making the updates on cachyos updater, reinstalling dns (dns wasnt the issue btw) didnt solve my problem. Here is the curl results for flathub.org

❯ curl --verbose flathub. org
* Host flathub. org:80 was resolved.
* IPv6: 2a04:4e42:4b::347
* IPv4: 199.232.57.91
* Trying [2a04:4e42:4b::347]:80…
* Immediate connect fail for 2a04:4e42:4b::347: Network is unreachable
* Trying 199.232.57.91:80…
* Established connection to flathub. org (199.232.57.91 port 80) from 192.168.1.11 port 55676
* using HTTP/1.x

GET / HTTP/1.1
Host: flathub. org
User-Agent: curl/8.16.0
Accept: */*

* Request completely sent off
< HTTP/1.1 400 Bad Request
< Connection: close
< Content-Length: 11
< content-type: text/plain; charset=utf-8
< x-served-by: cache-lon4276
<
* shutting down connection #0
Bad Request⏎

please help ):

2

Hello and welcome,

DNS is an important part of networking in general.
Without DNS you could not enter ‘google.com’ and be connected to anything.
So I wonder what ‘use DNS’ or later ‘install DNS’ means?

3

i use Zapret for bypassing restrictions on my country, thats what i mean by DNS

4

I see.
So this is something that modifies network packets in order to bypass DPI (Deep Packet Inspection) - allowing access to otherwise restricted sites.

I am unsure how it would interact with other components on your system.

But I might mention that Cachy uses systemd-resolved by default and users in some regions (particularly China and Russia) have reported problems with it enabled and/or without additional configuration steps. It is unclear whether or not zapret or something similar was also at work in those instances or maybe that such a utility would be implied.

See for example;

5

The two resolved addresses actually belong to flathub.org, so that’s good. But there is nothing running on port 80. Did you try https://flathub.org?

6

the thing is, it shows error on curl and i cant enter flathub on firefox, but somehow i can enter it normally on chromium…

7

after trying to fix issues more, now i get SSL_ERROR_DECODE_ERROR_ALERT only on firefox.

8

You need to give more detail about the error.

Maybe Firefox tries to use DoH but fails. In your case with probably a local DNS (?), you should disable DoH.

9

how can i disable that?
EDIT: i already disabled it and it doesnt work

is there any bugreport code or network check code to understand the issue better?