SSL errors on download - Githubissues

danihodovic commented 5 years ago

Hi,

I automatically install opm libraries when deploying OpenResty. This has a tendency to fail due to SSL errors from the upstream when performing this on AWS instances in the Sao Paolo region (sa-east-1). The other regions work fine.

docker run --rm --entrypoint=/usr/local/openresty/bin/opm --name lua-installation -v /usr/local/openresty/site/lualib/:/usr/local/openresty/site/lualib/ openresty/openresty:1.13.6.2-2-alpine-fat get pintsized/lua-resty-http

[10:31:32]   stderr: |-
[10:31:32]     * Fetching knyar/nginx-lua-prometheus
[10:31:32]     curl: (35) error:14004438:SSL routines:CONNECT_CR_SRVR_HELLO:tlsv1 alert internal error
[10:31:32]     ERROR: failed to run command "curl -sS -i -A 'opm 0.0.5 (x86_64-linux-thread-multi, perl v5.26.2)' 'https://opm.openresty.org/api/pkg/fetch?account=knyar&;name=nginx-lua-prometheus&op=&version='"

From my local machine it works fine and uses servers in DigitalOcean Singapore.

$ dig +short opm.openresty.org
v2.openresty.com.
188.166.239.230

From my Sao Paolo instances it fails and uses DigitalOcean US servers.

11:01:30 ~ ip-10-102-134-106 % dig +short opm.openresty.org
v2.openresty.com.
174.138.55.201

TristanPeers commented 5 years ago

Same here - AWS EU Ireland, cannot download packages.

dndx commented 5 years ago

Hi,

We are aware of possible issue that OPM connection is unreliable. We are working on investigating the cause and will update here as soon as more information is available.

dstockton commented 5 years ago

Same here

shiftie commented 1 year ago

any news about this?

openresty / opm

SSL errors on download #69