fetch timeout

Mark Brethen mark.brethen at gmail.com
Fri Jul 15 14:08:24 UTC 2022


~ $ /usr/bin/curl -L -v -o tetgen1.5.1.tar.gz https://wias-berlin.de/software/tetgen/1.5/src/tetgen1.5.1.tar.gz
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0*   Trying 62.141.177.111...
* TCP_NODELAY set
* Connected to wias-berlin.de (62.141.177.111) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/cert.pem
  CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
} [228 bytes data]
* TLSv1.2 (IN), TLS handshake, Server hello (2):
{ [59 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [6122 bytes data]
* TLSv1.2 (IN), TLS alert, handshake failure (552):
{ [2 bytes data]
* error:14008410:SSL routines:CONNECT_CR_KEY_EXCH:sslv3 alert handshake failure
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
* Closing connection 0
curl: (35) error:14008410:SSL routines:CONNECT_CR_KEY_EXCH:sslv3 alert handshake failure

Other than updating the system from High Sierra, nothing else. It sounds like I may need to update my certificates?

Mark Brethen
mark.brethen at gmail.com



> On Jul 15, 2022, at 8:55 AM, Chris Jones <jonesc at hep.phy.cam.ac.uk> wrote:
> 
> 
> 
> On 15/07/2022 2:53 pm, Mark Brethen wrote:
>> Indeed, I get the same error
>> ~ $ /usr/bin/curl -L -o tetgen1.5.1.tar.gz https://wias-berlin.de/software/tetgen/1.5/src/tetgen1.5.1.tar.gz <https://wias-berlin.de/software/tetgen/1.5/src/tetgen1.5.1.tar.gz>
>>   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
>>                                  Dload  Upload   Total   Spent    Left  Speed
>>   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
>> curl: (35) error:14008410:SSL routines:CONNECT_CR_KEY_EXCH:sslv3 alert handshake failure
> 
> right. So this usually means your SSL certs are not up to date. Are you doing anything 'special' in this regard, as I am a little surprised to see this on macOS11, which isn't exactly an old OS, so I would expect it to work with an up to date OS ?
> 
> Can someone on macOS11 or older give the above a try ? I only have access to macOS12 and its fine there for me.
> 
> Chris
> 
>> Mark Brethen
>> mark.brethen at gmail.com <mailto:mark.brethen at gmail.com>
>>> On Jul 15, 2022, at 8:49 AM, Chris Jones <jonesc at hep.phy.cam.ac.uk <mailto:jonesc at hep.phy.cam.ac.uk>> wrote:
>>> 
>>> 
>>> :debug:fetch Fetching distfile failed: error:14008410:SSL routines:CONNECT_CR_KEY_EXCH:sslv3 alert handshake failure
>>> 
>>> that is your problem.
>>> 
>>> Can you reproduce the above by using the system curl (which is effectively) what macports uses
>>> 
>>> /usr/bin/curl -L -o tetgen1.5.1.tar.gz http://www.tetgen.org/1.5/src/tetgen1.5.1.tar.gz <http://www.tetgen.org/1.5/src/tetgen1.5.1.tar.gz>
>>> 
>>> On 15/07/2022 2:44 pm, Chris Jones wrote:
>>>> That is not what I asked...
>>>> You shouldn't have to override the fetch phase. I think you are probably looking in the wrong place for your issue, but without seeing the portfile and the exact error you get no one is going to be able to help you that much...
>>>> On 15/07/2022 2:39 pm, Mark Brethen wrote:
>>>>> 
>>>>> 
>>>>> Overriding fetch in the portfile does work.
>>>>> 
>>>>> Mark Brethen
>>>>> mark.brethen at gmail.com <mailto:mark.brethen at gmail.com>
>>>>> 
>>>>> 
>>>>> 
>>>>>> On Jul 15, 2022, at 8:26 AM, Chris Jones <jonesc at hep.phy.cam.ac.uk> wrote:
>>>>>> 
>>>>>> 
>>>>>> OK, so next please post the portfile you are testing, and exactly what you get from the fetch phase when you run
>>>>>> 
>>>>>>> sudo port -d fetch xyz
>>>>>> 
>>>>>> On 15/07/2022 2:12 pm, Mark Brethen wrote:
>>>>>>> macOS 11.6.7
>>>>>>> Mark Brethen
>>>>>>> mark.brethen at gmail.com <mailto:mark.brethen at gmail.com>
>>>>>>>> On Jul 15, 2022, at 8:10 AM, Mark Brethen <mark.brethen at gmail.com <mailto:mark.brethen at gmail.com>> wrote:
>>>>>>>> 
>>>>>>>> ~ $ which curl
>>>>>>>> /opt/local/bin/curl
>>>>>>>> 
>>>>>>>> Mark Brethen
>>>>>>>> mark.brethen at gmail.com <mailto:mark.brethen at gmail.com>
>>>>>>>> 
>>>>>>>> 
>>>>>>>> 
>>>>>>>>> On Jul 15, 2022, at 8:09 AM, Chris Jones <jonesc at hep.phy.cam.ac.uk <mailto:jonesc at hep.phy.cam.ac.uk>> wrote:
>>>>>>>>> 
>>>>>>>>> 
>>>>>>>>> what curl are you using ? System of macports version ?
>>>>>>>>> 
>>>>>>>>> What OS are you on ?
>>>>>>>>> 
>>>>>>>>> On 15/07/2022 2:01 pm, Mark Brethen wrote:
>>>>>>>>>> Have to follow a redirected file. This worked in terminal:
>>>>>>>>>> ~ $ curl -L -o tetgen1.5.1.tar.gz http://www.tetgen.org/1.5/src/tetgen1.5.1.tar.gz <http://www.tetgen.org/1.5/src/tetgen1.5.1.tar.gz> <http://www.tetgen.org/1.5/src/tetgen1.5.1.tar.gz <http://www.tetgen.org/1.5/src/tetgen1.5.1.tar.gz>>
>>>>>>>>>>    % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
>>>>>>>>>>                                   Dload  Upload   Total   Spent    Left  Speed
>>>>>>>>>>    0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
>>>>>>>>>> 100   273  100   273    0     0    534      0 --:--:-- --:--:-- --:--:--      0
>>>>>>>>>> 100  275k  100  275k    0     0   187k      0  0:00:01  0:00:01 --:--:--  187k
>>>>>>>>>> Unless there is a way to set this up in the portfile, I’ll need to override the fetch phase.
>>>>>>>>>> Mark Brethen
>>>>>>>>>> mark.brethen at gmail.com <mailto:mark.brethen at gmail.com> <mailto:mark.brethen at gmail.com <mailto:mark.brethen at gmail.com>>
>>>>>>>>>>> On Jul 15, 2022, at 7:21 AM, Mark Brethen <mark.brethen at gmail.com <mailto:mark.brethen at gmail.com> <mailto:mark.brethen at gmail.com <mailto:mark.brethen at gmail.com>>> wrote:
>>>>>>>>>>> 
>>>>>>>>>>> The next logical question is what agent do I use? Is there a Macports user agent?
>>>>>>>>>>> 
>>>>>>>>>>> 
>>>>>>>>>>> Mark Brethen
>>>>>>>>>>> mark.brethen at gmail.com <mailto:mark.brethen at gmail.com> <mailto:mark.brethen at gmail.com <mailto:mark.brethen at gmail.com>>
>>>>>>>>>>> 
>>>>>>>>>>> 
>>>>>>>>>>> 
>>>>>>>>>>>> On Jul 14, 2022, at 8:19 PM, Joshua Root <jmr at macports.org <mailto:jmr at macports.org> <mailto:jmr at macports.org <mailto:jmr at macports.org>>> wrote:
>>>>>>>>>>>> 
>>>>>>>>>>>> fetch.user_agent
>>>>>>>>>>> 
>>>>>>>> 
>>>>> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macports.org/pipermail/macports-dev/attachments/20220715/d8f83838/attachment-0001.htm>


More information about the macports-dev mailing list