Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL Error on Arch #2278

Closed
jsaalfeld opened this issue Feb 10, 2018 · 13 comments
Closed

SSL Error on Arch #2278

jsaalfeld opened this issue Feb 10, 2018 · 13 comments
Labels
Linux Issues specific for Linux Network Issues affecting internet connections of CKAN

Comments

@jsaalfeld
Copy link

Background

I seem to be having the same problem as this issue here :
#2253

I tried following directions from there and ran cert-sync /etc/ssl/certs/ca-certificates.crt

CKAN Version: Installed CKAN from the AUR Repository, its version 1.22.6+e8e10ae2e98e

KSP Version: 1.3.1.1891

Operating System: Arch Linux with 4.15.1-2-ARCH kernel

MONO Version:

Mono JIT compiler version 5.4.1 (makepkg/e66d9abbb27 Thu Nov  9 22:28:33 CET 2017)
Copyright (C) 2002-2014 Novell, Inc, Xamarin Inc and Contributors. www.mono-project.com
	TLS:           __thread
	SIGSEGV:       normal
	Notifications: epoll
	Architecture:  amd64
	Disabled:      none
	Misc:          softdebug 
	LLVM:          supported, not enabled.
	GC:            sgen (concurrent by default)

Wine Version:

% wine --version
wine-3.1

Have you made any manual changes to your GameData folder (i.e., not via CKAN)? Nope

Problem

What steps did you take in CKAN? First I ran the mozroots --import --ask-remove command as user and root to get my certificate storage straight. With no success. After that I read about the new cert-sync process for mono, and ran that as sudo and user, but with no sucess either. On their imports however, they added a whole bunch of new certs to my system storages.

What did you expect to happen? Start without any issue and run CKAN correctly

What happened instead? Here is a full trace of a normal start.

% ckan
0031:fixme:gdiplus:GdipGetLineSpacing ignoring style
protocol "ip" not found; You might want to add this to /etc/protocols
4182 [1] ERROR CKAN.AutoUpdate (null) - WebException while accessing https://api.github.com/repos/KSP-CKAN/CKAN/releases/latest: System.Net.WebException: Error: TrustFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: Invalid certificate received from server. Error code: 0xffffffff800b010a
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00037] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x00032] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x0004b] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0007b] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebConnection.CreateStream (System.Net.HttpWebRequest request) [0x00073] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadDataInternal (System.Uri address, System.Net.WebRequest& request) [0x00072] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00020] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadString (System.Uri)
  at CKAN.AutoUpdate.MakeRequest (System.Uri url) [0x0001b] in <07e785b6df9648b6b0c7cbfd202f3386>:0 
4242 [1] ERROR CKAN.ErrorDialog (null) - Error in autoupdate: 
	Error: TrustFailure (The authentication or decryption has failed.)
5734 [1] ERROR CKAN.Main (null) - Error in autoupdate
System.Net.WebException: Error: TrustFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: Invalid certificate received from server. Error code: 0xffffffff800b010a
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00037] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x00032] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x0004b] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0007b] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebConnection.CreateStream (System.Net.HttpWebRequest request) [0x00073] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadDataInternal (System.Uri address, System.Net.WebRequest& request) [0x00072] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00020] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadString (System.Uri)
  at CKAN.AutoUpdate.MakeRequest (System.Uri url) [0x0003d] in <07e785b6df9648b6b0c7cbfd202f3386>:0 
  at CKAN.AutoUpdate.FetchLatestReleaseInfo () [0x00000] in <07e785b6df9648b6b0c7cbfd202f3386>:0 
  at CKAN.Main.OnLoad (System.EventArgs e) [0x00094] in <07e785b6df9648b6b0c7cbfd202f3386>:0 
5886 [1] WARN CKAN.Curl (null) - Curl environment not pre-initialised, performing non-threadsafe init.
5973 [1] WARN CKAN.GameVersionProviders.KspBuildMap (null) - Could not retrieve latest build map from: https://raw.githubusercontent.com/KSP-CKAN/CKAN-meta/master/builds.json
7746 [Threadpool worker] WARN CKAN.Curl (null) - Curl environment not pre-initialised, performing non-threadsafe init.
7746 [Threadpool worker] WARN CKAN.GameVersionProviders.KspBuildMap (null) - Could not retrieve latest build map from: https://raw.githubusercontent.com/KSP-CKAN/CKAN-meta/master/builds.json
8173 [1] ERROR CKAN.ErrorDialog (null) - 
Oh no! Our download failed with a certificate error!

If you're on Linux, try running:
	mozroots --import --ask-remove
on the command-line to update your certificate store, and try again.


^C0044:fixme:console:CONSOLE_DefaultHandler Terminating process 30 on event 0
0044:err:mscoree:expect_no_runtimes Process exited with a Mono runtime loaded.

Side-Note Change the Error from telling the user to run mozroots --import --ask-remove to run the cert-sync process with the location to be determined to their specific system.

@HebaruSan HebaruSan added Support Issues that are support requests Linux Issues specific for Linux Network Issues affecting internet connections of CKAN labels Feb 10, 2018
@HebaruSan
Copy link
Member

Rather than embedding the newer command in the error message, I'm thinking we might want to write up a generic wiki covering this topic for all distros, and then link that instead. That way if the command changes again, we could update the wiki instead of the code (and it would consolidate the currently disparate and redundant distro-specific wiki pages on the topic). And of course "If you're on Linux" shouldn't be necessary because CKAN believes it knows your OS in other places.

As for why it doesn't work on your system, that might require a Mono expert or an Arch expert to determine. But if it was my system, I would wonder whether there were any other files under /etc/ssl/certs/*? Maybe Arch tracks multiple files worth of certs and just one of them isn't enough to trust CKAN's typical download hosts. If you are able to figure this out, please let us know so we can ensure the wiki is updated.

@HebaruSan
Copy link
Member

OK, all the various wiki sections about this are now merged here, along with an explanation of why the errors happen:

Created #2279 to replace the reference to mozroots with a link to this page.

@jsaalfeld
Copy link
Author

I looked into the issue and stumbled upon this Wiki Entry, which linked to the ca-certificates package and stated, that this package manage the root ca-storage. I took a look at the source files and took a look at update-ca-trust, more specifically

DEST=/etc/ca-certificates/extracted
...
for f in $DEST/cadir/*; do
  ln -fsr -t /etc/ssl/certs "$f"
done

Therefore the certs should all be in /etc/ssl/certs, or at least to be linked in that folder. This should then be the single point of truth for certificates.

@jsaalfeld
Copy link
Author

This Issue is not resolved.

@HebaruSan HebaruSan reopened this Feb 19, 2018
@KSP-CKAN KSP-CKAN deleted a comment from netkan-bot Feb 19, 2018
@HebaruSan
Copy link
Member

Do you by any chance have a proxy server?

@jsaalfeld
Copy link
Author

No proxy Server at all.

@HebaruSan HebaruSan removed the Support Issues that are support requests label Feb 27, 2018
@jsaalfeld
Copy link
Author

Just tried it again with the ckan v1.25.0-PRE1

The error still exists.
Wine is also a bit newer: wine-3.4

But the mono version is still the same.

Here the full log:

% ckan
0009:fixme:gdiplus:GdipGetLineSpacing ignoring style
protocol "ip" not found; You might want to add this to /etc/protocols
4298 [1] ERROR CKAN.AutoUpdate (null) - WebException while accessing https://api.github.com/repos/KSP-CKAN/CKAN/releases/latest: System.Net.WebException: Error: SecureChannelFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: The authentication or decryption has failed.
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00037] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x00032] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x0004b] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0007b] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebConnection.CreateStream (System.Net.HttpWebRequest request) [0x00073] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadDataInternal (System.Uri address, System.Net.WebRequest& request) [0x00072] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00020] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadString (System.Uri)
  at CKAN.AutoUpdate.MakeRequest (System.Uri url) [0x0001e] in <4dba8018338b4ae7a71a4551630d0568>:0 
4375 [1] ERROR CKAN.ErrorDialog (null) - Error in auto-update:
	Error: SecureChannelFailure (The authentication or decryption has failed.)
6148 [1] ERROR CKAN.Main (null) - Error in auto-update
System.Net.WebException: Error: SecureChannelFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: The authentication or decryption has failed.
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00037] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x00032] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x0004b] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0007b] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebConnection.CreateStream (System.Net.HttpWebRequest request) [0x00073] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadDataInternal (System.Uri address, System.Net.WebRequest& request) [0x00072] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00020] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadString (System.Uri)
  at CKAN.AutoUpdate.MakeRequest (System.Uri url) [0x00043] in <4dba8018338b4ae7a71a4551630d0568>:0 
  at CKAN.AutoUpdate.FetchLatestReleaseInfo () [0x00001] in <4dba8018338b4ae7a71a4551630d0568>:0 
  at CKAN.Main.OnLoad (System.EventArgs e) [0x00101] in <4dba8018338b4ae7a71a4551630d0568>:0 
6398 [1] WARN CKAN.Curl (null) - Curl environment not pre-initialised, performing non-threadsafe init.
6487 [1] WARN CKAN.GameVersionProviders.KspBuildMap (null) - Could not retrieve latest build map from: https://raw.githubusercontent.com/KSP-CKAN/CKAN-meta/master/builds.json
8413 [Threadpool worker] WARN CKAN.Curl (null) - Curl environment not pre-initialised, performing non-threadsafe init.
8414 [Threadpool worker] WARN CKAN.GameVersionProviders.KspBuildMap (null) - Could not retrieve latest build map from: https://raw.githubusercontent.com/KSP-CKAN/CKAN-meta/master/builds.json
8882 [1] ERROR CKAN.ErrorDialog (null) - Oh no! Our download failed with a certificate error

I can curl the https://raw.githubusercontent.com/KSP-CKAN/CKAN-meta/master/builds.json URL just fine, so the certificate has to be in the correct place. Of course i reran the cert-sync with no success that far.

To make sure, that this is not some kind of an issue with the wrong source of the trust-storage for the CA Certificates. I cleared the trust-storage in mono and only imported the certificate with cert-sync, so that just this one is in the trust-storage. The error remains the same.

@HebaruSan
Copy link
Member

Yeah, I wouldn't expect any recent changes to affect this. As far as I know, we haven't done anything with certificates since #2297.

@jsaalfeld
Copy link
Author

There was hope, some time to spare and the additional try to fix it, by just importing the responsible CA-Certificate into the mono trust-storage. Unfortunately, without a fix.

And there still is hope, that the updated information may help someone to fix this issue.

@Ruedii
Copy link

Ruedii commented Apr 12, 2018

I'm experiencing this issue on Ubuntu as well.

It seems to affect many Linux platforms.

The easiest solution is to just require Windows users to install .Net 4.6 or later like they should.

Honestly we shouldn't be relying on the TLS 1.2 code in .Net 4.5 that Microsoft found of questionable reliability.

@diego-treitos
Copy link

diego-treitos commented Apr 15, 2018

I am having this problem also on Ubuntu 17.10

2610 [1] ERROR CKAN.AutoUpdate (null) - WebException while accessing https://api.github.com/repos/KSP-CKAN/CKAN/releases/latest: System.Net.WebException: Error: SecureChannelFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: The authentication or decryption has failed.
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00040] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x0003b] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x00057] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x00011] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x00044] in <bd46d4d4f7964dfa9beea098499ab597>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadDataInternal (System.Uri address, System.Net.WebRequest& request) [0x0008a] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00027] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadString (System.Uri)
  at CKAN.AutoUpdate.MakeRequest (System.Uri url) [0x0001b] in <abbe73cfa9954b939d15955cf3cc42de>:0 
2620 [1] ERROR CKAN.ErrorDialog (null) - Error in auto-update:
	Error: SecureChannelFailure (The authentication or decryption has failed.)
4400 [1] ERROR CKAN.Main (null) - Error in auto-update
System.Net.WebException: Error: SecureChannelFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: The authentication or decryption has failed.
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00040] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x0003b] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x00057] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x00011] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x00044] in <bd46d4d4f7964dfa9beea098499ab597>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadDataInternal (System.Uri address, System.Net.WebRequest& request) [0x0008a] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00027] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadString (System.Uri)
  at CKAN.AutoUpdate.MakeRequest (System.Uri url) [0x0001b] in <abbe73cfa9954b939d15955cf3cc42de>:0 

@novembrea
Copy link

Same issue on 18.10.

@jsaalfeld
Copy link
Author

I just retried it...

It just seem to work... I can download the List and install the mods I want to. It's strange, but I'm happy!

% wine --version
wine-3.17 (Staging)
% mono --version
Mono JIT compiler version 5.14.0 (makepkg/f3a2216b65a Fri Aug 17 18:51:18 CEST 2018)
Copyright (C) 2002-2014 Novell, Inc, Xamarin Inc and Contributors. www.mono-project.com
	TLS:           __thread
	SIGSEGV:       altstack
	Notifications: epoll
	Architecture:  amd64
	Disabled:      none
	Misc:          softdebug 
	Interpreter:   yes
	LLVM:          supported, not enabled.
	GC:            sgen (concurrent by default)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Linux Issues specific for Linux Network Issues affecting internet connections of CKAN
Projects
None yet
Development

No branches or pull requests

6 participants