Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Package missing due to InvalidCertificateException #1334

Open
ehuss opened this issue Feb 23, 2018 · 67 comments

Comments

Projects
None yet
@ehuss
Copy link

commented Feb 23, 2018

The package at https://packagecontrol.io/packages/Rust%20Enhanced is currently marked as Missing with the following error:

Package info was unavailable last time crawler ran. Error downloading repository. HTTP exception InvalidCertificateException (Host api.github.com returned an invalid certificate ([SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:548))) downloading https://api.github.com/repos/rust-lang/sublime-rust.

Is it possible this is a transient error of some kind? Is there some way to kick the crawler to try again?

@FichteFoll

This comment has been minimized.

Copy link
Contributor

commented Feb 23, 2018

Looks like there are a couple Rust packages affected by it. https://packagecontrol.io/search/rust

@ehuss

This comment has been minimized.

Copy link
Author

commented Feb 23, 2018

Looks like Github recently made a change to their TLS configuration: https://github.com/blog/2507-weak-cryptographic-standards-removed

EDIT: Not sure if it will also affect Windows 7 users, but they are stuck on TLS 1.0 unless they implement this change: https://support.microsoft.com/en-us/help/3140245/update-to-enable-tls-1-1-and-tls-1-2-as-a-default-secure-protocols-in

@FichteFoll

This comment has been minimized.

Copy link
Contributor

commented Feb 23, 2018

The problem is that the crawler is running on an old OS and Python 3.3, which doesn't support TLS 1.2. wbond is already on it.

@wbond

This comment has been minimized.

Copy link
Owner

commented Feb 23, 2018

I’ve had a new Python TLS library in development for a while, so today I implemented a downloader using it, but I have some more debugging to do before I can push out a new version. Was hoping to be done with it today, but it looks like that is unlikely to happen.

@ehuss

This comment has been minimized.

Copy link
Author

commented Feb 24, 2018

Thanks @wbond! Please let us know if there is any way we can help.

@cweagans

This comment has been minimized.

Copy link

commented Feb 24, 2018

@wbond not to rush you, but is there anything that can be done here to help? Or some kind of workaround? I know I'm pretty much dead in the water right now as far as getting my ST3 set up goes.

@wbond

This comment has been minimized.

Copy link
Owner

commented Feb 24, 2018

Not really. I am debugging the new downloader. There are some hangs it seems, probably some error in OscryptoDownloader logic. It is a new HTTP client as of yesterday, so needs some ironing out.

@LucaCappelletti94

This comment has been minimized.

Copy link

commented Feb 26, 2018

Same issue, any update?

@kaste

This comment has been minimized.

Copy link

commented Feb 26, 2018

Hi @wbond, can you please put a banner on packagecontrol.io so people don't open issues everywhere. Ty.

@wbond

This comment has been minimized.

Copy link
Owner

commented Feb 26, 2018

No updates, been working on a solution all weekend, not going to spent time to try and design a banner on the site. Just be patient, or download the packages manually.

@kaste

This comment has been minimized.

Copy link

commented Feb 26, 2018

Yeah sure, but SublimeLinter gets a new issue like every hour.

@wbond

This comment has been minimized.

Copy link
Owner

commented Feb 26, 2018

Then maybe you should leave one open and explain the situation? You can point them to the forum, or this issue.

@ghost

This comment has been minimized.

Copy link

commented Mar 9, 2018

startup, version: 3143 linux x64 channel: stable
executable: /opt/sublime_text/sublime_text
working dir: /
packages path: /home/vladislav/.config/sublime-text-3/Packages
state path: /home/vladislav/.config/sublime-text-3/Local
zip path: /opt/sublime_text/Packages
zip path: /home/vladislav/.config/sublime-text-3/Installed Packages
ignored_packages: ["Vintage"]
pre session restore time: 0.126302
startup time: 0.303447
first paint time: 0.333066
reloading plugin Default.auto_indent_tag
reloading plugin Default.block
reloading plugin Default.comment
reloading plugin Default.convert_syntax
reloading plugin Default.copy_path
reloading plugin Default.delete_word
reloading plugin Default.detect_indentation
reloading plugin Default.duplicate_line
reloading plugin Default.echo
reloading plugin Default.exec
reloading plugin Default.fold
reloading plugin Default.font
reloading plugin Default.goto_line
reloading plugin Default.history_list
reloading plugin Default.indentation
reloading plugin Default.install_package_control
reloading plugin Default.kill_ring
reloading plugin Default.mark
reloading plugin Default.new_templates
reloading plugin Default.open_context_url
reloading plugin Default.open_in_browser
reloading plugin Default.pane
reloading plugin Default.paragraph
reloading plugin Default.paste_from_history
reloading plugin Default.profile
reloading plugin Default.quick_panel
reloading plugin Default.run_syntax_tests
reloading plugin Default.save_on_focus_lost
reloading plugin Default.scroll
reloading plugin Default.set_unsaved_view_name
reloading plugin Default.settings
reloading plugin Default.show_scope_name
reloading plugin Default.side_bar
reloading plugin Default.sort
reloading plugin Default.swap_line
reloading plugin Default.switch_file
reloading plugin Default.symbol
reloading plugin Default.transform
reloading plugin Default.transpose
reloading plugin Default.trim_trailing_white_space
reloading plugin Default.ui
reloading plugin CSS.css_completions
reloading plugin Diff.diff
reloading plugin HTML.encode_html_entities
reloading plugin HTML.html_completions
reloading plugin 0_package_control_loader.00-package_control
reloading plugin Package Control.1_reloader
reloading plugin Package Control.2_bootstrap
reloading plugin Package Control.Package Control
plugins loaded
Package Control: Skipping automatic upgrade, last run at 2018-02-23 12:31:44, next run at 2018-02-23 13:31:44 or after
Package Control: Fetching list of available packages and dependencies
Platform: linux-x64
Sublime Text Version: 3143
Package Control Version: 3.3.0
Package Control: Download Debug
URL: https://packagecontrol.io/channel_v3.json
Timeout: 30
Resolved IP: 50.116.34.243
Resolved IPv6: 2600:3c02:e000:42::1
Package Control: Urllib Debug Proxy
http_proxy:
https_proxy:
proxy_username:
proxy_password:
Package Control: Found system CA bundle at /usr/lib/ssl/certs/ca-certificates.crt (233394 bytes)
Package Control: Urllib HTTPS Debug General
Connecting to packagecontrol.io on port 443
Package Control: Urllib HTTPS Debug General
Upgrading connection to SSL using CA certs file at /home/vladislav/.config/sublime-text-3/Packages/User/Package Control.merged-ca-bundle
Using hostname "packagecontrol.io" for TLS SNI extension
Successfully upgraded connection to packagecontrol.io:443 with SSL Using TLSv1/SSLv3 with cipher ECDHE-RSA-AES128-SHA
Server SSL certificate:
subject: CN=packagecontrol.io
subject alt name: packagecontrol.io, www.packagecontrol.io
expire date: Nov 27 23:59:59 2019 GMT
Certificate validated for packagecontrol.io
Package Control: Urllib HTTPS Debug Write
GET /channel_v3.json HTTP/1.1
Accept-Encoding: bzip2,gzip,deflate
Connection: Keep-Alive
Host: packagecontrol.io
User-Agent: Package Control v3.3.0
Package Control: Connection went away while trying to download https://packagecontrol.io/channel_v3.json, trying again
Package Control: Urllib Debug Proxy
http_proxy:
https_proxy:
proxy_username:
proxy_password:
Package Control: Found system CA bundle at /usr/lib/ssl/certs/ca-certificates.crt (233394 bytes)
Package Control: Urllib HTTPS Debug General
Connecting to packagecontrol.io on port 443
Package Control: Urllib HTTPS Debug General
Upgrading connection to SSL using CA certs file at /home/vladislav/.config/sublime-text-3/Packages/User/Package Control.merged-ca-bundle
Using hostname "packagecontrol.io" for TLS SNI extension
Successfully upgraded connection to packagecontrol.io:443 with SSL Using TLSv1/SSLv3 with cipher ECDHE-RSA-AES128-SHA
Server SSL certificate:
subject: CN=packagecontrol.io
subject alt name: packagecontrol.io, www.packagecontrol.io
expire date: Nov 27 23:59:59 2019 GMT
Certificate validated for packagecontrol.io
Package Control: Urllib HTTPS Debug Write
GET /channel_v3.json HTTP/1.1
Accept-Encoding: bzip2,gzip,deflate
Connection: Keep-Alive
Host: packagecontrol.io
User-Agent: Package Control v3.3.0
Package Control: Connection went away while trying to download https://packagecontrol.io/channel_v3.json, trying again
Package Control: Urllib Debug Proxy
http_proxy:
https_proxy:
proxy_username:
proxy_password:
Package Control: Found system CA bundle at /usr/lib/ssl/certs/ca-certificates.crt (233394 bytes)
Package Control: Urllib HTTPS Debug General
Connecting to packagecontrol.io on port 443
Package Control: Urllib HTTPS Debug General
Upgrading connection to SSL using CA certs file at /home/vladislav/.config/sublime-text-3/Packages/User/Package Control.merged-ca-bundle
Using hostname "packagecontrol.io" for TLS SNI extension
Successfully upgraded connection to packagecontrol.io:443 with SSL Using TLSv1/SSLv3 with cipher ECDHE-RSA-AES128-SHA
Server SSL certificate:
subject: CN=packagecontrol.io
subject alt name: packagecontrol.io, www.packagecontrol.io
expire date: Nov 27 23:59:59 2019 GMT
Certificate validated for packagecontrol.io
Package Control: Urllib HTTPS Debug Write
GET /channel_v3.json HTTP/1.1
Accept-Encoding: bzip2,gzip,deflate
Connection: Keep-Alive
Host: packagecontrol.io
User-Agent: Package Control v3.3.0
Package Control: Connection went away while trying to download https://packagecontrol.io/channel_v3.json, trying again
Package Control: Urllib Debug Proxy
http_proxy:
https_proxy:
proxy_username:
proxy_password:
Package Control: Found system CA bundle at /usr/lib/ssl/certs/ca-certificates.crt (233394 bytes)
Package Control: Unable to download https://packagecontrol.io/channel_v3.json after 3 attempts

@20Tauri

This comment has been minimized.

Copy link

commented Mar 22, 2018

The TLS 1.2 problem has been reported few week ago on my plugin repository.

On Windows, the curl or wget tips not work. Because, PackageControl looks for curl instead of curl.exe. Unfortunatly is not the only problem (curl seem to work but really really slowly). n haven't investigate more.

To allow TLS 1.2 on old windows versions, microsoft has publish a fix KB4019276. On error, it will be great, if you can suggest the users to install it or to use curl.

@FichteFoll

This comment has been minimized.

Copy link
Contributor

commented Mar 22, 2018

Note that this shouldn't be an issue for end users that only use the default channel. This will only surface if they added a custom repository to Package Control's settings that requires making API calls to github.

Edit: Ah, it appears you are distributing your package in a packages.json that was added to the default channel's repositories list and reference a release download url which appears to reject non-TLSv1.2 requests as well.

@spicybeef

This comment has been minimized.

Copy link

commented Mar 30, 2018

I'm having this issue on macOS High Sierra 10.13.4 with a fresh installation of Sublime Text 3 when attempting to install DoxyDoxygen. Anything I can add to help debug the issue further?

@naoyeye

This comment has been minimized.

Copy link

commented Mar 30, 2018

@spicybeef uninstall Package Control then reinstall, it works fine for me. maybe you can try. :)

@spicybeef

This comment has been minimized.

Copy link

commented Mar 30, 2018

@naoyeye I removed it from /Users/myusername/Library/Application Support/Sublime Text 3/Installed Packages and restarted Sublime but I get the same issue.

Package Control: Skipping automatic upgrade, last run at 2018-03-29 22:46:50, next run at 2018-03-29 23:46:50 or after
ignored packages updated to: ["DoxyDoxygen", "Vintage"]
reloading settings Packages/User/Package Control.sublime-settings
reloading settings Packages/User/Preferences.sublime-settings
Package Control: Error downloading package. HTTP exception InvalidCertificateException (Host github.com returned an invalid certificate ([SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:548))) downloading https://github.com/20Tauri/DoxyDoxygen/releases/download/0.63.3/ST3_DoxyDoxygen.sublime-package.
error: Package Control

@naoyeye

This comment has been minimized.

Copy link

commented Mar 30, 2018

@spicybeef Hope this helps you 20Tauri/DoxyDoxygen#103 (comment)

@spicybeef

This comment has been minimized.

Copy link

commented Mar 30, 2018

@naoyeye that fixed it, thank you! I just had to change linux to osx.

@justnealpatel

This comment has been minimized.

Copy link

commented Oct 20, 2018

Has there been a fix yet?

@megadr01d

This comment has been minimized.

Copy link

commented Oct 20, 2018

This has been long fixed for me.

@20Tauri

This comment has been minimized.

Copy link

commented Oct 20, 2018

Nobody has reported me this problem for a long time...
As it was a major issue (reported many time in my package GitHub), I have added the explaination of the bug on my package page (this may also explain why)... But, I have just removed it... Let's see if all case have been fixed (probably)

@wbond has worked on a new downloader (oscrypto_downloader) to solve this and this downloader is probably deployed (unchecked information)

@justnealpatel

This comment has been minimized.

Copy link

commented Oct 20, 2018

I tried installing the Cobalt2 theme from Package Control and got the same error that started this issue.
EDIT: Quick reinstall fixed this. I think I was using an outdated version.

@ConorSheehan1

This comment has been minimized.

Copy link

commented Nov 12, 2018

Currently getting the same issue for Restructured Text (RST) Snippets. I'm using:

  • Sublime3 (Sublime Text Build 3126)
  • Package Control v3.3.0

Package Control: Error downloading package. HTTP exception InvalidCertificateException (Host codeload.github.com returned an invalid certificate ([SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:548))) downloading https://codeload.github.com/mgaitan/sublime-rst-completion/zip/master.
error: Package Control

@wbond

This comment has been minimized.

Copy link
Owner

commented Nov 12, 2018

@ConorSheehan1 Build 3126 is very old, is unsupported, and has quite a number of bugs. If you upgrade to 3176, the issue will be resolved.

@ConorSheehan1

This comment has been minimized.

Copy link

commented Nov 12, 2018

@wbond You're absolutely right, that fixed it.
I update package control and didn't think to just update sublime. Sorry!

@milnomada

This comment has been minimized.

Copy link

commented Dec 18, 2018

I fixed this in version 3143 by updating Package Control user settings:

"downloader_precedence":  
{  
    "linux": [ "curl","wget","urllib"],  
    "osx":   ["curl","wget","urllib"]  
}

As @FichteFoll pointed out, set urllib as the last option for the downloader fixed the issue.

@Enkumicahel

This comment has been minimized.

Copy link

commented Dec 20, 2018

@spicybeef that's great, man.

@dagnaldo

This comment has been minimized.

Copy link

commented Dec 27, 2018

@milnomada it worked for me, Thanks!

@oliverhu

This comment has been minimized.

Copy link

commented Jan 4, 2019

@milnomada worked for me, thanks!

@cpuodzius

This comment has been minimized.

Copy link

commented Jan 14, 2019

@milnomada great (and clean) solution. It worked for me, thanks!

@RoyiAvital

This comment has been minimized.

Copy link

commented Jan 15, 2019

"downloader_precedence":
	{
		"linux":
		[
			"curl",
			"wget",
			"urllib"
		],
		"osx":
		[
			"curl",
			"wget",
			"urllib"
		]
	},

@milnomada , It worked for me on Linux Mint 18.3. Thank You.

@mattirish

This comment has been minimized.

Copy link

commented Jan 30, 2019

My package is a bitbucket repo rather than GitHub, but implementing @milnomada's change to use curl still isn't working for me. Anyone else? Just downloaded newest Package Control and have Build 3176 of Sublime.

Still getting:

Package Control: Error downloading package. HTTP exception InvalidCertificateException (Host bitbucket.org returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:548))) downloading https://bitbucket.org/teddy_beer_maniac/sublime-text-dependency-markupsafe/get/0.23.0.zip.
error: Package Control
@codeninja

This comment has been minimized.

Copy link

commented May 11, 2019

@spicybeef uninstall Package Control then reinstall, it works fine for me. maybe you can try. :)

This worked for me after updating curl 7.64.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.