ST3 package control cannot update or download packages

[justinshea]

Hello,

A few weeks ago my ST3 instances (on two separate windows7 machines on different networks) stopped being able to download and update packages. I've researched and tried all potential fixes mentioned here and in the ST forum including, creating a fresh instance of ST3, purging package manager, disabling windows firewall and explictly opening port 443 inbound.outbound rules. Nothing is working. And, since this is happening in two separate Windows7 environments I think it is safe to assume this is an issue not localized to me. Here is the debugged log for a typical failed package download:

Package Control: Fetching list of available packages
  Platform: windows-x64
  Sublime Text Version: 3065
  Package Control Version: 2.0.0
Package Control: Download Debug
  URL: https://sublime.wbond.net/channel.json
  Resolved IP: 50.116.34.243
  Timeout: 30
Package Control: WinINet Debug Proxy
  proxy: 
  proxy bypass: 
  proxy username: 
  proxy password: 
Package Control: WinINet HTTPS Debug General
  Server SSL Certificate:
    subject: ZtL8p1RCzFndzRrqxUKqA6bD5HjQv5Zb, US, sublime.wbond.net, GT52951423, See www.rapidssl.com/resources/cps (c)12, Domain Control Validated - RapidSSL(R), sublime.wbond.net
    issuer: US, "GeoTrust, Inc.", RapidSSL CA
    common name: sublime.wbond.net
    issue date: Sun, 06 Apr 2014 21:04:43 GMT
    expire date: Thu, 26 Feb 2015 04:13:18 GMT
Package Control: WinINet HTTPS Debug Write
  GET /channel.json HTTP/1.1
  Accept-Encoding: gzip,deflate
  If-Modified-Since: Tue, 09 Dec 2014 02:10:17 GMT
  User-Agent: Sublime Package Control v2.0.0
  Host: sublime.wbond.net
  Connection: Keep-Alive
  Cache-Control: no-cache
Package Control: WinINet HTTPS Debug Read
  HTTP/1.1 304 Not Modified
  Server: nginx
  Date: Tue, 09 Dec 2014 02:12:19 GMT
  Last-Modified: Tue, 09 Dec 2014 02:10:17 GMT
  Connection: keep-alive
  ETag: "54865a09-1a7fd9"
Package Control: Using cached content for https://sublime.wbond.net/channel.json
Package Control: WinINet HTTPS Debug General
  Closing connection to sublime.wbond.net on port 443 after 1 request
ignored packages updated to: [Vintage, Sass]
found 1 files for base name Default.sublime-theme
Package Control: Fetching list of available packages
  Platform: windows-x64
  Sublime Text Version: 3065
  Package Control Version: 2.0.0
theme loaded
Package Control: Download Debug
  URL: https://sublime.wbond.net/channel.json
  Resolved IP: 50.116.34.243
  Timeout: 30
reloading Packages/User/Preferences.sublime-settings
found 1 files for base name Default.sublime-theme
theme loaded
Package Control: WinINet Debug Proxy
  proxy: 
  proxy bypass: 
  proxy username: 
  proxy password: 
Package Control: WinINet HTTPS Debug General
  Server SSL Certificate:
    subject: ZtL8p1RCzFndzRrqxUKqA6bD5HjQv5Zb, US, sublime.wbond.net, GT52951423, See www.rapidssl.com/resources/cps (c)12, Domain Control Validated - RapidSSL(R), sublime.wbond.net
    issuer: US, "GeoTrust, Inc.", RapidSSL CA
    common name: sublime.wbond.net
    issue date: Sun, 06 Apr 2014 21:04:43 GMT
    expire date: Thu, 26 Feb 2015 04:13:18 GMT
Package Control: WinINet HTTPS Debug Write
  GET /channel.json HTTP/1.1
  Accept-Encoding: gzip,deflate
  If-Modified-Since: Tue, 09 Dec 2014 02:10:17 GMT
  User-Agent: Sublime Package Control v2.0.0
  Host: sublime.wbond.net
  Connection: Keep-Alive
  Cache-Control: no-cache
Package Control: WinINet HTTPS Debug Read
  HTTP/1.1 304 Not Modified
  Server: nginx
  Date: Tue, 09 Dec 2014 02:12:28 GMT
  Last-Modified: Tue, 09 Dec 2014 02:10:17 GMT
  Connection: keep-alive
  ETag: "54865a09-1a7fd9"
Package Control: Using cached content for https://sublime.wbond.net/channel.json
Package Control: Unable to find a sublime-package file for Sass
Package Control: Unable to find file package-metadata.json in the package Sass
Package Control: Download Debug
  URL: https://codeload.github.com/nathos/sass-textmate-bundle/zip/sublime
  Resolved IP: 192.30.252.145
  Timeout: 30
Package Control: Error downloading package. Connection refused (errno 12029) during HTTP write phase of downloading https://codeload.github.com/nathos/sass-textmate-bundle/zip/sublime.
error: Package Control

Unable to download Sass. Please view the console for more details.
ignored packages updated to: [Vintage]
found 1 files for base name Default.sublime-theme
theme loaded
Package Control: WinINet HTTPS Debug General
  Closing connection to sublime.wbond.net on port 443 after 1 request
Package Control: WinINet HTTPS Debug General
  Closing connection to codeload.github.com on port 443 after 0 requests
reloading Packages/User/Preferences.sublime-settings
found 1 files for base name Default.sublime-theme
theme loaded

Man, I am exhausted at this point. I have spent hours of time looking for a fix to this to no avail. Please, can somebody help???

JShea

[wbond]

My guess, since you said the problem is recent, is that GitHub disabled SSL v3 on their servers to prevent the POODLE SSL attack. If you have your Advanced Settings in Internet Explorer is not set to allow TLS 1.0, TLS 1.1 and TLS 1.2, then the WinINet API that Package Control uses won't be able to properly connect.

You could also try accessing the URL (https://codeload.github.com/nathos/sass-textmate-bundle/zip/sublime) in Internet Explorer to see if that works.

Unfortunately I don't control codeload.github.com. You could try to contact them if you are sure TLS is enabled.

I can tell you for sure that error 12029 means that there was a connection error between your computer and the server.

[justinshea]

Dude! I find it hilarious that somehow this issue comes back to a setting in internet explorer. IE is always lingering!!!
.
Anyway, THANK YOU for the advice. Sure enough, after allowing TLS in IE advanced settings all is well. Hopefully, git will keep that open...seems POODLE has mutated and is exploiting TLS now as well.

Is there any documentation on manually installing packages if push comes to shove?

Cheers,
JShea

[wbond]

The good news is that when Package Control 3.0.0 drops in a few days, PC will fall back to urllib if WinINet fails. I am also working on some docs on the site to help Windows users ensure their IE security settings are properly set.

Manually installing packages is completely up to the individual package. Some packages have dependencies, which is going to become more common with the PC 3.0.0 release since it include dependency support. Some packages you git clone, others you download a .sublime-package and place it in the Installed Packages/ folder. Unfortunately there isn't a one-size-fits-all option.