Does not implement crypto.Signer

[andrewostroumov]

I've been trying to handshake but have an error on the server side

tls: certificate private key (<nil>) does not implement crypto.Signer

I've investigate TCP messages with Wireshark and got this

Frame 5: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) on interface 0
Null/Loopback
Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
Transmission Control Protocol, Src Port: 56893, Dst Port: 9000, Seq: 1, Ack: 1, Len: 213
Transport Layer Security
    TLSv1.2 Record Layer: Handshake Protocol: Client Hello
        Content Type: Handshake (22)
        Version: TLS 1.0 (0x0301)
        Length: 208
        Handshake Protocol: Client Hello
            Handshake Type: Client Hello (1)
            Length: 204
            Version: TLS 1.2 (0x0303)
            Random: 1ebe756b7a80ca6dfed1ee668172abc8a531f5dc729f2ddb…
            Session ID Length: 32
            Session ID: d2899a6a27e4cf8e2e3cf7303191811c19d85d9d44a0c22a…
            Cipher Suites Length: 8
            Cipher Suites (4 suites)
                Cipher Suite: TLS_PSK_WITH_AES_128_CBC_SHA (0x008c)
                Cipher Suite: TLS_CHACHA20_POLY1305_SHA256 (0x1303)
                Cipher Suite: TLS_AES_128_GCM_SHA256 (0x1301)
                Cipher Suite: TLS_AES_256_GCM_SHA384 (0x1302)
            Compression Methods Length: 1
            Compression Methods (1 method)
                Compression Method: null (0)
            Extensions Length: 123
            Extension: status_request (len=5)
            Extension: supported_groups (len=10)
            Extension: ec_point_formats (len=2)
            Extension: signature_algorithms (len=26)
            Extension: renegotiation_info (len=1)
            Extension: signed_certificate_timestamp (len=0)
            Extension: supported_versions (len=9)
            Extension: key_share (len=38)

Client side request looks good (TLS_PSK_WITH_AES_128_CBC_SHA), but response from server had internal error

Frame 7: 63 bytes on wire (504 bits), 63 bytes captured (504 bits) on interface 0
Null/Loopback
Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
Transmission Control Protocol, Src Port: 9000, Dst Port: 56893, Seq: 1, Ack: 214, Len: 7
Transport Layer Security
    TLSv1.2 Record Layer: Alert (Level: Fatal, Description: Internal Error)
        Content Type: Alert (21)
        Version: TLS 1.2 (0x0303)
        Length: 2
        Alert Message
            Level: Fatal (2)
            Description: Internal Error (80)

[andrewostroumov]

And of course I'm following the description about setup tls config, etc.. golang version go 1.14 maybe there's the problem

[andrewostroumov]

Solution has been found ;)

Just added this to server config

MaxVersion: tls.VersionTLS12

Btw thanks for great lib