Total Commander

Hi,

I have a problem where when I select to use the OkHttpClient I cannot connect to my WebDAV server however if I select the ApacheClient I can. I have looked quickly in the forum but can’t find a similar post. I am using Total Commander 3.11 and the WebDAV plugin 3.01 both downloaded from the play store. My phone is on Android Version 10.

When using the OkHttpClient it looks like the app is hanging on the Getting Directory screen (posted screenshot of config and where it hangs). As I can connect using the ApacheClient and on windows or any web browser I don’t think any configuration, permission or authorisation are wrong server side.

Any help is appreciated as I would rather use the OkHttpClient as it is the recommended one to use.

Image: https://ibb.co/Bc4yyNW
Image: https://ibb.co/MNmzNL6

Someone has reported this here in the forum when connecting to a Nextcloud server. Apparently the server sends some headers which OkHttpClient cannot handle or so. I still haven't found a server with this problem, so just use ApacheClient instead.

Will continue using the ApacheClient.

I did some further testing and currently the domain has its DNS settings set in Cloudflare. If I set the subdomain for the WebDAV server to not be proxied by Cloudflare I can connect fine with the OkHttpClient. However. when I set the subdomain to proxied, I can no longer use the OkHttpClient and have to use the ApacheClient. Hopefully that helps with recreating the issue.

Thanks

Does it only use DNS via Cloudflare, or also connect via a Cloudflare proxy?
According to this page, OkHTTP and Cloudlfare do not have a single cipher suite in common, so it's not possible to connect:
https://dkimitsa.github.io/2020/06/16/broken-ssl-handshake-okhttp4/

That does look to be the issue. I can connect fine when Cloudflare just provides the DNS.
However, when Cloudflare protects the server via proxy it fails. The issue looks to then be a cipher incompatibility problem with OkHTTP and Cloudflare proxied DNS records.

OK, I will check whether I can somehow add the missing ciphers to OkHTTP...