最新版本日志出现：【/tmp/openclash_last_version】下载失败

[sachikomakino]

Verify Steps

• [X] Tracker 我已经在 Issue Tracker 中找过我要提出的问题
• [X] Latest 我已经使用最新 Dev 版本测试过，问题依旧存在
• [X] Core 这是 OpenClash 存在的问题，并非我所使用的 Clash 或 Meta 等内核的特定问题
• [X] Meaningful 我提交的不是无意义的 催促更新或修复 请求

OpenClash Version

v0.45.70-beta

Bug on Environment

Official OpenWrt

Bug on Platform

Linux-amd64(x86-64)

To Reproduce

启动后每过一段时间日志就会出现报错

Describe the Bug

刚更新完最新版本出现以上的提示，链接好像暂时没问题，请问大神这个错误是什么意思，需要如何修复。

OpenClash Log

2022-11-07 10:12:13【/tmp/clash_last_version】下载失败：【how to fix it, please visit the web page mentioned above.】 2022-11-07 10:12:13【/tmp/clash_last_version】下载失败：【establish a secure connection to it. To learn more about this situation and】 2022-11-07 10:12:13【/tmp/clash_last_version】下载失败：【curl failed to verify the legitimacy of the server and therefore could not】 2022-11-07 10:12:13【/tmp/clash_last_version】下载失败：【】 2022-11-07 10:12:13【/tmp/clash_last_version】下载失败：【More details here: https://curl.se/docs/sslcerts.html】 2022-11-07 10:12:13【/tmp/clash_last_version】下载失败：【curl: (60) Cert verify failed: BADCERT_CN_MISMATCH】 2022-11-07 10:10:57【/tmp/openclash_last_version】下载失败：【how to fix it, please visit the web page mentioned above.】 2022-11-07 10:10:57【/tmp/openclash_last_version】下载失败：【establish a secure connection to it. To learn more about this situation and】 2022-11-07 10:10:57【/tmp/openclash_last_version】下载失败：【curl failed to verify the legitimacy of the server and therefore could not】 2022-11-07 10:10:57【/tmp/openclash_last_version】下载失败：【】 2022-11-07 10:10:57【/tmp/openclash_last_version】下载失败：【More details here: https://curl.se/docs/sslcerts.html】 2022-11-07 10:10:57【/tmp/openclash_last_version】下载失败：【curl: (60) Cert verify failed: BADCERT_CN_MISMATCH】 2022-11-07 09:26:43【/tmp/clash_last_version】下载失败：【how to fix it, please visit the web page mentioned above.】 2022-11-07 09:26:43【/tmp/clash_last_version】下载失败：【establish a secure connection to it. To learn more about this situation and】 2022-11-07 09:26:43【/tmp/clash_last_version】下载失败：【curl failed to verify the legitimacy of the server and therefore could not】 2022-11-07 09:26:43【/tmp/clash_last_version】下载失败：【】 2022-11-07 09:26:43【/tmp/clash_last_version】下载失败：【More details here: https://curl.se/docs/sslcerts.html】 2022-11-07 09:26:43【/tmp/clash_last_version】下载失败：【curl: (60) Cert verify failed: BADCERT_CN_MISMATCH】 2022-11-07 09:26:43 第二步: 组件运行前检查... 2022-11-07 09:26:43 第一步: 获取配置... 2022-11-07 09:26:43 OpenClash 开始启动... 2022-11-07 09:26:43 第六步：删除 OpenClash 残留文件... 2022-11-07 09:26:43 第五步: 重启 Dnsmasq 程序... 2022-11-07 09:26:43 第四步: 关闭 Clash 主程序... 2022-11-07 09:26:43 第三步: 关闭 OpenClash 守护程序... 2022-11-07 09:26:42 第二步: 删除 OpenClash 防火墙规则... 2022-11-07 09:26:42 第一步: 备份当前策略组状态... 2022-11-07 09:26:42 OpenClash 开始关闭... 2022-11-07 09:26:31 OpenClash 更新成功，即将进行重启！

OpenClash Config

No response

Expected Behavior

请问如何修复，谢谢。

Screenshots

No response

[a904055262]

同样出现

[thisdk]

同样的问题.我是v0.45.71-beta

[wxy1343]

看看raw.githubusercontent.com有没有解析正常

[warcns]

2022-11-13 22:36:21【/tmp/openclash_last_version】下载失败：【curl: (28) Operation timed out after 10001 milliseconds with 0 bytes received】 2022-11-13 19:51:03【/tmp/openclash_last_version】下载失败：【curl: (28) Operation timed out after 10001 milliseconds with 0 bytes received】

是的，每隔一段时间就会提示这个错误。

[onlyLTY]

我也一样

2022-11-14 00:52:28 【TUN】版本内核更新成功！
2022-11-14 00:52:28 【TUN】版本内核下载成功，开始更新...
2022-11-14 00:51:28【/tmp/clash_tun.gz】下载失败：【curl: (28) Operation timed out after 30000 milliseconds with 2326528 out of 4692235 bytes received】
2022-11-14 00:51:28【/tmp/clash_tun.gz】下载失败：【how to fix it, please visit the web page mentioned above.】
2022-11-14 00:51:28【/tmp/clash_tun.gz】下载失败：【establish a secure connection to it. To learn more about this situation and】
2022-11-14 00:51:28【/tmp/clash_tun.gz】下载失败：【curl failed to verify the legitimacy of the server and therefore could not】
2022-11-14 00:51:28【/tmp/clash_tun.gz】下载失败：【】
2022-11-14 00:51:28【/tmp/clash_tun.gz】下载失败：【More details here: https://curl.se/docs/sslcerts.html】
2022-11-14 00:51:28【/tmp/clash_tun.gz】下载失败：【curl: (60) SSL certificate problem: self signed certificate】
2022-11-14 00:51:28 【TUN】版本内核正在下载，如下载失败请尝试手动下载并上传...
2022-11-14 00:51:26【/tmp/clash_last_version】下载失败：【how to fix it, please visit the web page mentioned above.】
2022-11-14 00:51:26【/tmp/clash_last_version】下载失败：【establish a secure connection to it. To learn more about this situation and】
2022-11-14 00:51:26【/tmp/clash_last_version】下载失败：【curl failed to verify the legitimacy of the server and therefore could not】
2022-11-14 00:51:26【/tmp/clash_last_version】下载失败：【】
2022-11-14 00:51:26【/tmp/clash_last_version】下载失败：【More details here: https://curl.se/docs/sslcerts.html】
2022-11-14 00:51:26【/tmp/clash_last_version】下载失败：【curl: (60) SSL certificate problem: self signed certificate】
2022-11-14 00:51:26 提示: 检测到内核文件不存在，准备开始下载...
2022-11-14 00:51:25 第二步: 组件运行前检查...
2022-11-14 00:51:25 第一步: 获取配置...
2022-11-14 00:51:25 OpenClash 开始启动...

[vernesong]

直连污染导致的

[warcns]

直连污染导致的

我把Github 地址修改设置为 https://fastly.jsdelivr.net/ 应用之后当时就上不了外网了。。。 折腾了半天，恢复初始设置啥的都不行，最终重启路由器后重新配置了OpenClash才回来。。。

[vernesong]

选cf那个试试

[warcns]

选cf那个试试

谢了，我还是取消路由器直连吧，我怕整不好，还得再重装一次openclash😅

[dannyge]

可以尝试修改一下/usr/share/openclash 下面几个shell中的curl超时时间，例如：/usr/share/openclash/openclash_chnroute.sh

curl -SsL --connect-timeout 5 -m 30 --speed-time 15 --speed-limit 1 --retry 2 https://ispip.clang.cn/all_cn.txt -o /tmp/china_ip_route.txt 2>&1 | awk -v time="$(date "+%Y-%m-%d %H:%M:      %S")" -v file="/tmp/china_ip_route.txt" '{print time "【" file "】Download Failed:【"$0"】"}' >> "$LOG_FILE"

把 --connect-timeout 5 修改成 --connect-timeout 50 （相关的文件和位置可以参照：https://github.com/vernesong/OpenClash/search?l=Shell&q=%22+--connect-timeout+5%22 去修改）

[benjiamin2014]

直连污染导致的

抱歉，请问以上的设置是在哪里的？我没找到

[dannyge]

直连污染导致的

抱歉，请问以上的设置是在哪里的？我没找到

@benjiamin2014 全局设置-->基本设置

[CoolFeiFei]

直连污染导致的

请问这里的github下拉框选哪一个

[CoolFeiFei]

选cf那个试试

没找到带cf的选项

[warcns]

选cf那个试试

没找到带cf的选项

说的应该是 testingcf.jsdelivr.net

[CoolFeiFei]

选cf那个试试

没找到带cf的选项

说的应该是 testingcf.jsdelivr.net

ok谢谢但是试了还是不行

[warcns]

选cf那个试试

没找到带cf的选项

说的应该是 testingcf.jsdelivr.net

ok谢谢但是试了还是不行

是的，换完还是提示下载失败的错误。

[CoolFeiFei]

选cf那个试试

没找到带cf的选项

说的应该是 testingcf.jsdelivr.net

ok谢谢但是试了还是不行

是的，换完还是提示下载失败的错误。

我刚刚突然可以了，换完刷新了一下

[blacktea17]

可以尝试修改一下/usr/share/openclash 下面几个shell中的curl超时时间，例如：/usr/share/openclash/openclash_chnroute.sh

curl -SsL --connect-timeout 5 -m 30 --speed-time 15 --speed-limit 1 --retry 2 https://ispip.clang.cn/all_cn.txt -o /tmp/china_ip_route.txt 2>&1 | awk -v time="$(date "+%Y-%m-%d %H:%M:      %S")" -v file="/tmp/china_ip_route.txt" '{print time "【" file "】Download Failed:【"$0"】"}' >> "$LOG_FILE"

把 --connect-timeout 5 修改成 --connect-timeout 50 （相关的文件和位置可以参照：https://github.com/vernesong/OpenClash/search?l=Shell&q=%22+--connect-timeout+5%22 去修改）

的确可行 但是版本更新后 这些文件都会被更新 又得重来一次 太费力了

[dannyge]

可以尝试修改一下/usr/share/openclash 下面几个shell中的curl超时时间，例如：/usr/share/openclash/openclash_chnroute.sh

curl -SsL --connect-timeout 5 -m 30 --speed-time 15 --speed-limit 1 --retry 2 https://ispip.clang.cn/all_cn.txt -o /tmp/china_ip_route.txt 2>&1 | awk -v time="$(date "+%Y-%m-%d %H:%M:      %S")" -v file="/tmp/china_ip_route.txt" '{print time "【" file "】Download Failed:【"$0"】"}' >> "$LOG_FILE"

把 --connect-timeout 5 修改成 --connect-timeout 50 （相关的文件和位置可以参照：https://github.com/vernesong/OpenClash/search?l=Shell&q=%22+--connect-timeout+5%22 去修改）

的确可行 但是版本更新后 这些文件都会被更新 又得重来一次 太费力了

@vernesong 有可能把shell脚本里的curl超时时间延长一些吗？

[muaimingjun]

兄弟们，github本来就很难访问还给梯子用github？？？

[Yunak]

dns污染严重没有办法，临时解决就是 搜一下raw.githubusercontent.com 的 ip 手动加在/etc/hosts ，这样就没有问题了，clash正常后把这个host记录删掉就行

[github-actions[bot]]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days

[jacobin]

这个问题又出现了： 2023-02-16 20:07:00【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-16 19:17:19【/tmp/openclash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-16 19:17:19【/tmp/openclash_last_version】下载失败：【curl: (28) Operation timed out after 10001 milliseconds with 0 out of 0 bytes received】 2023-02-16 19:17:19【/tmp/openclash_last_version】下载失败：【curl: (28) Operation timed out after 10001 milliseconds with 0 out of 0 bytes received】 2023-02-16 19:17:18【/tmp/openclash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x7280) SSL - The connection indicated an EOF】 2023-02-16 17:26:25【/tmp/openclash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x7280) SSL - The connection indicated an EOF】 2023-02-16 17:26:25【/tmp/openclash_last_version】下载失败：【curl: (28) Operation timed out after 10000 milliseconds with 0 out of 0 bytes received】 2023-02-16 17:26:22【/tmp/openclash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x7280) SSL - The connection indicated an EOF】 2023-02-16 16:19:17【/tmp/openclash_last_version】下载失败：【curl: (28) Operation timed out after 10000 milliseconds with 0 out of 0 bytes received】 2023-02-16 16:19:11【/tmp/openclash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x7280) SSL - The connection indicated an EOF】 2023-02-16 15:25:14 OpenClash 启动成功，请等待服务器上线！

[jacobin]

2023-02-23 00:42:52【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:47【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:42【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:41【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:39【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:38【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:36【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:35【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:33【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:32【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:29【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:24【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:22【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:21【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:19【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:18【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:16【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:15【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:13【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:12【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:42:02【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:41:57【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:41:37【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:41:37【/tmp/clash_last_version】下载失败：【curl: (28) Operation timed out after 10000 milliseconds with 0 out of 0 bytes received】 2023-02-23 00:41:36【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:41:26【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:41:21【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:41:13【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:41:08【/tmp/clash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】 2023-02-23 00:40:21【/tmp/openclash_last_version】下载失败：【curl: (35) ssl_handshake returned - mbedTLS: (-0x0050) NET - Connection was reset by peer】

[jacobin]

歇斯底里的，这条日志是几个意思？下载clash的最新版本？每次出现这日志，我的系统的上网就开始有状况 ... ... ...

[ghost]

是不是只有我们这些人会遇到这些问题？？？ 其他人都没有这种问题？？ 为什么从去年11月反馈的问题 到现在都还在 ，一直刷 last version 下载失败， 一直重置防火墙 一直造成断网死机。 真的吐了。也没有解决方案。

[thisdk]

其实直到现在我都还有这个问题.只不过我有办法让它变正常...甚至知道什么原因 原因是因为开了fake-ip模式.开启了这个模式后.路由器的部分插件会失效.比如aliyun-webdav..

解决办法是 找到 -> 自定义 Fake-IP-Filter

添加

#阿里 *.aliyundrive.com *.aliyundrive.net #插件 *.jsdelivr.net ........ 那些geoip,geosite的好像是别的网站.都添加上去.就行了

看到哪里报错.从源码找到下载的域名,添加到这里.甚至别的插件使用失效.也可以把URL添加到这里

[ghost]

然而我用的并不是fake ip 我用的是Redir-Host TUN模式出现过 兼容模式也出现了。 我的N1 openwrt 一共使用了3个功能 一个openclash 一个 alist 一个 zoretire。 没了。 你说的阿里云webdav失效，在redir host 下面不存在这个问题， 因为前几天 alist被阿里云打的时候 我就用了一天的 aliyun webdav。 没有失效的问题。 最常出现的是 重置openclash防火墙 时不时就重置 ，重置就会断魔法十几秒， 没过多久就死机了。

[thisdk]

如果你开了了fake-ip模式.aliyun-webdav甚至登录都不成功.