-
-
Notifications
You must be signed in to change notification settings - Fork 9.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SSL error when downloading from homebrew.bintray.com #10739
Comments
Confirm the same problem on MacOS 10.15.7. ISP is Spectrum as sometimes that has something to do with it too.
I was trying to upgrade git-delta. Looks like it's a bintray problem:
Download also fails in Firefox with the error: Despite that, the bintray status page says everything is fine. |
This comment has been minimized.
This comment has been minimized.
Could possibly be CDN related (Bintray use AWS Cloudfront). It is working fine for me in the UK. |
Same issue on GitHub actions. brew install libjwt
/bin/bash --noprofile --norc -eo pipefail /tmp/knicknic/os-specific-run/412a92a6-9412-4c03-b5b4-b63794aa3deb
==> Downloading https://homebrew.bintray.com/bottles/jansson-2.13.1.catalina.bottle.tar.gz
curl: (35) error:1400410B:SSL routines:CONNECT_CR_SRVR_HELLO:wrong version number
Error: Failed to download resource "jansson"
Download failed: https://homebrew.bintray.com/bottles/jansson-2.13.1.catalina.bottle.tar.gz
Warning: Bottle installation failed: building from source.
==> Downloading https://digip.org/jansson/releases/jansson-2.13.1.tar.gz
==> Downloading https://homebrew.bintray.com/bottles/libjwt-1.12.1.catalina.bottle.tar.gz
curl: (35) error:1400410B:SSL routines:CONNECT_CR_SRVR_HELLO:wrong version number
Error: Failed to download resource "libjwt"
Download failed: https://homebrew.bintray.com/bottles/libjwt-1.12.1.catalina.bottle.tar.gz
Warning: Bottle installation failed: building from source.
==> Downloading https://homebrew.bintray.com/bottles/automake-1.16.3.catalina.bottle.tar.gz
curl: (35) error:1400410B:SSL routines:CONNECT_CR_SRVR_HELLO:wrong version number
Error: Failed to download resource "automake"
Download failed: https://homebrew.bintray.com/bottles/automake-1.16.3.catalina.bottle.tar.gz
Warning: Bottle installation failed: building from source.
==> Downloading https://git.savannah.gnu.org/cgit/config.git/snapshot/config-0b5188819ba6091770064adf26360b204113317e.tar.gz
curl: (35) LibreSSL SSL_connect: SSL_ERROR_SYSCALL in connection to git.savannah.gnu.org:443
Error: Failed to download resource "automake--config"
Download failed: https://git.savannah.gnu.org/cgit/config.git/snapshot/config-0b5188819ba6091770064adf26360b204113317e.tar.gz
Error: The process '/bin/bash' failed with exit code 1 |
This comment has been minimized.
This comment has been minimized.
Same error on Homebrew CI. |
This comment has been minimized.
This comment has been minimized.
Does it have anything to do with this? Homebrew/discussions#691 |
No, that happens in May. This is just an outage - and seemingly one only affecting certain regions. |
Also, if you NEED to upgrade you can build from source. |
US East coaster here, it seems to be working again. |
Still failing here (UK): macOS 10.14.6 (18G8022)
I don't suppose Homebrew has an option for ignoring SSL errors? |
It seems to be a server-side cert error, so I don't think a local toggle will help. |
I think there is, but the Bintray site itself is unreachable for me in North Central Texas, not just the SSL side. |
Personally, I'd rather wait for the issue to be resolved than to ignore the security provided by SSL. |
The remote end is not speaking SSL: it's speaking in plain text. Check http://homebrew.bintray.com:443/ with a browser. |
This seems to be more the CDN can't connect to the server. If you do just go to http://homebrew.bintray.com/ (no https) with a browser, you will get an error from the CDN of 403 ERROR |
This comment has been minimized.
This comment has been minimized.
Same in Switzerland:
|
Same in NC USA. Not sure if it's related but I had run a brew upgrade just prior to outage and openssl 1.1.1j was poured in that update. |
Singapore (possibly region) is affected as well since 2330-ish |
in UK all worked yesterday but does not today. openssl 1.1.1j was updated on 19th of Feb - so do not think it is related. |
Responding to this issue with "Me too!" without any additional context is not useful. Please use the 👍 button on the original message (and the subscribe button if you want to be notified about comments) unless you have something meaningful to add that could help in fixing this issue. |
This is CloudFront's normal behavior if you send a HTTP request to the HTTPS port. Try with "http://aws.amazon.com:443" for the same behavior (in cURL, in a browser it may automatically upgrade you to HTTPS through HSTS). |
This comment has been minimized.
This comment has been minimized.
As a workaround, you may temporarily use |
This comment has been minimized.
This comment has been minimized.
This is a temporary workaround for the Bintray access issues. See Homebrew/brew#10739 (comment)
Hi, how can I do that? |
export HOMEBREW_BOTTLE_DOMAIN=https://dl.bintray.com/homebrew |
@ayypril, while it's a normal behaviour but it works when an endpoint recognizes and serves both HTTP & HTTPS. In this case it looks like due to misconfiguration HTTPS has been disabled and only HTTP is enabled at the moment. Here was a very similar issue - kubernetes/ingress-nginx#3556 |
This is a temporary workaround for the Bintray access issues. See Homebrew/brew#10739 (comment)
or inline
|
Solution for Chinese usersWell if you are using Tuna (Like many other developers in China), you can use the bottles from tsinghua university or other mirrors: https://mirrors.tuna.tsinghua.edu.cn/help/homebrew/ if [[ "$(uname -s)" == "Linux" ]]; then BREW_TYPE="linuxbrew"; else BREW_TYPE="homebrew"; fi
export HOMEBREW_BREW_GIT_REMOTE="https://mirrors.tuna.tsinghua.edu.cn/git/homebrew/brew.git"
export HOMEBREW_CORE_GIT_REMOTE="https://mirrors.tuna.tsinghua.edu.cn/git/homebrew/${BREW_TYPE}-core.git"
export HOMEBREW_BOTTLE_DOMAIN="https://mirrors.tuna.tsinghua.edu.cn/${BREW_TYPE}-bottles" =>
|
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
Changing VPN location to UK solves issue for me. Before I was connected to a server in Spain and I got this error. |
As a temporary workaround, I've been using the Nix package manager to search and install packages. |
The env var workaround doesn’t seem to be working for nvm: https://github.com/ljharb/nvm/runs/1999125389 |
For Linux, the URL should contain I'm hearing reports that this is starting to work for people without any workaround (just as I was considering releasing a workaround update!). Does it work for anyone now? Give this comment 👍 or a 👎 if it's now working or not working for you without the workaround. |
@Bo98 It does indeed look like Bintray's fixed their DNS. Works for me without any workaround now.
|
Confirmed; it seems to be fixed. |
Closing as the Bintray issue is now resolved. |
brew config
outputbrew doctor
outputbrew doctor
above contains no "Warning" lines.What were you trying to do (and why)?
brew upgrade
What happened (include all command output)?
[...same for other packages...]
What did you expect to happen?
Upgrade completes successfully
Step-by-step reproduction instructions (by running
brew
commands)Run
brew upgrade -v
, see above.The text was updated successfully, but these errors were encountered: