Use (ftp.gnu.org) as fallback of (ftpmirror.gnu.org), as the second might fail due to unsafe crypto

[es20490446e]

With the departure towards OpenSSL 3 some mirrors are still using old unsafe renegotiation, and that's preventing from building this recipe.

I have noticed the mirror here about the issue, but for the time being it's just better to use the non mirrored FTP.

I will edit this back when I'm noticed it's fixed.

autoconf/2.71: ERROR: Error downloading file https://ftpmirror.gnu.org/autoconf/autoconf-2.71.tar.xz: 'HTTPSConnectionPool(host='ftp.rediris.es', port=443): Max retries exceeded with url: /mirror/GNU/autoconf/autoconf-2.71.tar.xz (Caused by SSLError(SSLError(1, '[SSL: UNSAFE_LEGACY_RENEGOTIATION_DISABLED] unsafe legacy renegotiation disabled (_ssl.c:1006)')))' ERROR: autoconf/2.71: Error in source() method, line 51
get(self, **self.conan_data["sources"][self.version], strip_root=True)
ConanException: Error downloading file https://ftpmirror.gnu.org/autoconf/autoconf-2.71.tar.xz: 'HTTPSConnectionPool(host='ftp.rediris.es', port=443): Max retries exceeded with url: /mirror/GNU/autoconf/autoconf-2.71.tar.xz (Caused by SSLError(SSLError(1, '[SSL: UNSAFE_LEGACY_RENEGOTIATION_DISABLED] unsafe legacy renegotiation disabled (_ssl.c:1006)')))'

Specify library name and version: lib/1.0

---

• I've read the contributing guidelines.
• I've used a recent Conan client version close to the currently deployed.
• I've tried at least one configuration locally with the conan-center hook activated.

[CLAassistant]

All committers have signed the CLA.

[es20490446e]

Shall I perform any extra action?

Is it mandatory that I port this recipe for this change to be accepted?

[jcar87]

Shall I perform any extra action?

Is it mandatory that I port this recipe for this change to be accepted?

The recipe is already compatible, this was an issue as the CLA was not signed by the time the build started.

I can relaunch it, however, I would advise to apply the changes as suggested by @valgur and list two URLs instead of just one.

As reviewers this is a constant back and forth - some experience issues with ftp.gnu.org and others have intermittent issues with specific mirrors in ftpmirror.gnu.org. Given that Conan can easily fallback, I'd suggest listing both URLS, perhaps with ftpmirror.gnu.org as the first attempt, as advised by GNU themselves:

https://www.gnu.org//server/mirror.html

We recommend using this generic ftpmirror.gnu.org address wherever possible in links, documentation, etc., to reduce load on the main GNU server.

Listing just one may work for you today, but not for others, or not in the future, so the fallback is probably sensible.

On the other hand, if there an issue with the mirrors, especially on systems with new OpenSSL 3, I would advise reporting this issue to GNU directly - the closest contact information I can find related to mirrors is at webmasters@gnu.org. I think it's sensible that it should be pointed out that clients on newer OpenSSL, that some mirrors are not complying with https://www.rfc-editor.org/rfc/rfc5746.html - if this can be confirmed.

[es20490446e]

Sorry, I thought the suggestion was already applied. Let me add it...

And about reporting the issue to GNU, I have already done it.

They replied that multiple mirrors have the issue. I guess it is on their side now.

[es20490446e]

Suggestions applied: ready to merge 👍

[es20490446e]

@conan-io/barbarians

[es20490446e]

@conan-io/barbarians This pull request seems ready to merge.

[conan-center-bot]

Conan v1 pipeline ✔️

All green in build 9 (d4ae38dff7862fba8968a834b3cd033848a89d87):

• autoconf/2.72:
  All packages built successfully! (All logs)

• autoconf/2.71:
  All packages built successfully! (All logs)

---

Conan v2 pipeline ✔️

Note: Conan v2 builds are now mandatory. Please read our discussion about it.

All green in build 8 (d4ae38dff7862fba8968a834b3cd033848a89d87):

• autoconf/2.72:
  All packages built successfully! (All logs)

• autoconf/2.71:
  All packages built successfully! (All logs)

[RubenRBS]

Thanks!

[es20490446e]

@RubenRBS 👌😉