Skip to content

Fix worker authentication with newer qWDTT servers - #28

Merged
luminescq merged 2 commits into
luminescq:mainfrom
Regstar2:fix/qwdtt-worker-auth
Sep 6, 2026
Merged

luminescq merged 2 commits into
luminescq:mainfrom
Regstar2:fix/qwdtt-worker-auth

Conversation

@Regstar2

@Regstar2 Regstar2 commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

Fixes #27.

Newer qWDTT servers require every DTLS connection to authenticate using either GETCONF or AUTH.

PWDTT currently sends GETCONF only from the worker that requests the WireGuard configuration. Other workers successfully complete the DTLS handshake but do not authenticate, so newer qWDTT servers immediately close those connections. This causes repeated:

Reader: EOF

Changes:

  • added SendAuth(conn, deviceID, password) using AUTH:|;
  • workers that do not request the WireGuard configuration now send AUTH before entering the normal proxy loop;
  • existing GETCONF behaviour remains unchanged.

Testing:

  • Windows Wails production build completed successfully;
  • the fix was tested against a newer qWDTT server and stopped the immediate mass worker disconnects;
  • go test ./... currently has pre-existing unrelated failures in store_test.go on Windows and those failures are unrelated to this change.

The code changes and this pull request description were prepared with the assistance of an AI coding assistant. The resulting Windows build was then tested manually.

@luminescq
luminescq merged commit 6722e4a into luminescq:main Sep 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Не работает с серверами qWDTT новее 2026-08-19: из 18 воркеров выживает один

2 participants