opm icon indicating copy to clipboard operation
opm copied to clipboard

SSL errors on download

Open danihodovic opened this issue 6 years ago • 4 comments

Hi,

I automatically install opm libraries when deploying OpenResty. This has a tendency to fail due to SSL errors from the upstream when performing this on AWS instances in the Sao Paolo region (sa-east-1). The other regions work fine.

docker run --rm --entrypoint=/usr/local/openresty/bin/opm --name lua-installation -v /usr/local/openresty/site/lualib/:/usr/local/openresty/site/lualib/ openresty/openresty:1.13.6.2-2-alpine-fat get pintsized/lua-resty-http
[10:31:32]   stderr: |-
[10:31:32]     * Fetching knyar/nginx-lua-prometheus
[10:31:32]     curl: (35) error:14004438:SSL routines:CONNECT_CR_SRVR_HELLO:tlsv1 alert internal error
[10:31:32]     ERROR: failed to run command "curl -sS -i -A 'opm 0.0.5 (x86_64-linux-thread-multi, perl v5.26.2)' 'https://opm.openresty.org/api/pkg/fetch?account=knyar&;name=nginx-lua-prometheus&op=&version='"

From my local machine it works fine and uses servers in DigitalOcean Singapore.

$ dig +short opm.openresty.org
v2.openresty.com.
188.166.239.230

From my Sao Paolo instances it fails and uses DigitalOcean US servers.

11:01:30 ~ ip-10-102-134-106 % dig +short opm.openresty.org
v2.openresty.com.
174.138.55.201

danihodovic avatar Jan 03 '19 10:01 danihodovic

Same here - AWS EU Ireland, cannot download packages.

TristanPeers avatar Jan 04 '19 08:01 TristanPeers

Hi,

We are aware of possible issue that OPM connection is unreliable. We are working on investigating the cause and will update here as soon as more information is available.

dndx avatar Jan 04 '19 08:01 dndx

Same here

dstockton avatar Jan 04 '19 09:01 dstockton

any news about this?

shiftie avatar Apr 21 '23 07:04 shiftie