FiveM Stuck on downloading content on all servers - logs show

[vmlinux]

@Painwithin

Sure they are, but the question is… why is it not happening to everyone on the same server? wouldnt it effect everyone?

The connection in his screenshots are to localhost and the server. If something were blocking those requests it would not affect all users. What you’re failing to understand is there are different issues.

@Painwithin

You keep ignoring this question i have been asking.

I mean, think about it… its clearly not souly because of FiveM this is happening and the Client and Server are not communicating with each other properly or in this case “servers” which could still be on his end.

Yet I’ve answered that twice now. I never said it wasn’t on their end, I said server in reference to tls.

@Painwithin

But, the only question that really needs an answer too is, why is it happening on every single server hes trying but not to every single person that plays FiveM.

Perhaps sense you know so much about how TLS works, you could provide a solution or possible reasons it could be happening to help rectify the issue instead of saying “oh its fivem’s fault”, if you feel it is… please by all means show why that is and how it could possibly be fixed.

I did. You appear to have no idea how TLS nor SSL, I can’t help with that.

@Painwithin

Anyway, lets stay on topic, none of this is helping the user that is having the issue.

You mean telling yet another user to disable their firewall without addressing the core issue? Agreed.

[zirconium]

@vmlinux

It would only affect servers that don’t have valid certificates

all servers present a certificate with this CN. this user would probably have an issue with a web filter trying to mitm and failing because it doesn’t realize the certificate is meant to be invalid according to normal CA chains.

a firewall/filter/antivirus that doesn’t respect the intent of a legitimate application/user is one that you don’t want to have installed on your system.

[vmlinux]

@zirconium

all servers present a certificate with this CN. this user would probably have an issue with a web filter trying to mitm and failing because it doesn’t realize the certificate is meant to be invalid according to normal CA chains.

It’s unlikely most users have any idea how their virus scanners work especially with content filters.

@zirconium

a firewall/filter/antivirus that doesn’t respect the intent of a legitimate application/user is one that you don’t want to have installed on your system.

Completely agree. Have you seen what browsers have been doing however? They do not respect such things. TLS1.2, and soon 1.3 is being forced down the internets throat. What I mean by that is you will not be able to use untrusted certs. Hell with pinning you already can’t on your own systems without recompiling that shit out of your browser. CEF appears at least for now immune to some of it. Problems will continue to happen with CDN’s and other infrastructure upstream regardless. It became mandatory for PCI compliance last June.

FWIW I have removed all trust from CAs and do SSL/TLS intercept. I’m quite aware of what breaks.

[Issue_33]

If someone comes up with a solution or already know one please tell me because im having that problem right now

[zjk100]

I have removed all firewalls and even tried a DMZ, did not help!