search

pypi / support

Issue tracker for support requests related to using https://pypi.org
94 stars 48 forks source link

Connection timeout #2575

Closed mauros191 closed 1 year ago

mauros191 commented 1 year ago

My Platform

OS: MacOS 12.6.3 ISP: Vodafone

The issue is very strange: sometimes pip works and other times no (connection timeout).

Example:


--2023-02-07 15:08:49--  https://files.pythonhosted.org/packages/4d/56/ccfa32d35f2e200f1525c349e26c00767e72acb34c53bea77f08627e72c6/tensorflow-2.11.0-cp37-cp37m-macosx_10_14_x86_64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.1.63
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.1.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 244213996 (233M) [application/octet-stream]
Saving to: ‘tensorflow-2.11.0-cp37-cp37m-macosx_10_14_x86_64.whl.2’

tensorflow-2.11.0-cp37-cp37m-macosx_10_14_x86_64.whl.2                   97%[========================================================================================================================================================================>     ] 227,00M  --.-KB/s    eta 2s

How can I fix the issue? Thanks!

Fastly Debug

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

DNS Resolution

$ dig pypi.org A
; <<>> DiG 9.10.6 <<>> pypi.org A
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50555
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1220
;; QUESTION SECTION:
;pypi.org.          IN  A

;; ANSWER SECTION:
pypi.org.       42322   IN  A   151.101.192.223
pypi.org.       42322   IN  A   151.101.0.223
pypi.org.       42322   IN  A   151.101.128.223
pypi.org.       42322   IN  A   151.101.64.223

;; Query time: 25 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Tue Feb 07 14:44:10 CET 2023
;; MSG SIZE  rcvd: 101
$ dig pypi.org AAAA
; <<>> DiG 9.10.6 <<>> pypi.org AAAA
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42127
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1220
;; QUESTION SECTION:
;pypi.org.          IN  AAAA

;; ANSWER SECTION:
pypi.org.       21292   IN  AAAA    2a04:4e42::223
pypi.org.       21292   IN  AAAA    2a04:4e42:600::223
pypi.org.       21292   IN  AAAA    2a04:4e42:400::223
pypi.org.       21292   IN  AAAA    2a04:4e42:200::223

;; Query time: 26 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Tue Feb 07 14:44:17 CET 2023
;; MSG SIZE  rcvd: 149
$ dig files.pythonhosted.org A
; <<>> DiG 9.10.6 <<>> files.pythonhosted.org A
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16266
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1220
;; QUESTION SECTION:
;files.pythonhosted.org.        IN  A

;; ANSWER SECTION:
files.pythonhosted.org. 65269   IN  CNAME   dualstack.r.ssl.global.fastly.net.
dualstack.r.ssl.global.fastly.net. 17 IN A  146.75.61.63

;; Query time: 20 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Tue Feb 07 14:44:23 CET 2023
;; MSG SIZE  rcvd: 114
$ dig files.pythonhosted.org AAAA
; <<>> DiG 9.10.6 <<>> files.pythonhosted.org AAAA
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61411
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1220
;; QUESTION SECTION:
;files.pythonhosted.org.        IN  AAAA

;; ANSWER SECTION:
files.pythonhosted.org. 65264   IN  CNAME   dualstack.r.ssl.global.fastly.net.
dualstack.r.ssl.global.fastly.net. 30 IN AAAA   2a04:4e42:7f::319

;; Query time: 51 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Tue Feb 07 14:44:28 CET 2023
;; MSG SIZE  rcvd: 126

Traceroutes / IPv4

$ traceroute pypi.org
traceroute to pypi.org (151.101.0.223), 64 hops max, 52 byte packets
 1  vodafone.station (192.168.1.1)  73.775 ms  2.745 ms  1.612 ms
 2  172.21.0.1 (172.21.0.1)  6.584 ms  6.033 ms  4.246 ms
 3  192.168.50.13 (192.168.50.13)  6.024 ms  5.966 ms  6.902 ms
 4  net-93-65-241-31.cust.vodafonedsl.it (93.65.241.31)  4.493 ms  4.020 ms  4.559 ms
 5  10.177.21.217 (10.177.21.217)  5.885 ms  5.597 ms  5.739 ms
 6  185.210.48.42 (185.210.48.42)  22.822 ms  22.840 ms  23.755 ms
 7  185.210.48.43 (185.210.48.43)  24.926 ms  24.909 ms  26.017 ms
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *
31  * * *
32  * * *
33  * * *
34  * * *
35  * * *
36  * * *
37  * * *
38  * * *
39  * * *
40  * * *
41  * * *
42  * * *
43  * * *
44  * * *
45  * * *
46  * * *
47  * * *
48  * * *
49  * * *
50  * *
$ traceroute -I pypi.org
traceroute to pypi.org (151.101.0.223), 64 hops max, 72 byte packets
 1  vodafone.station (192.168.1.1)  9.018 ms  2.462 ms  1.427 ms
 2  172.21.0.1 (172.21.0.1)  5.403 ms  4.999 ms  4.416 ms
 3  192.168.50.13 (192.168.50.13)  7.301 ms  5.245 ms  6.135 ms
 4  net-93-65-241-31.cust.vodafonedsl.it (93.65.241.31)  4.325 ms  7.641 ms  4.088 ms
 5  10.177.21.217 (10.177.21.217)  4.888 ms  5.008 ms  4.624 ms
 6  185.210.48.42 (185.210.48.42)  22.040 ms  23.189 ms  22.326 ms
 7  185.210.48.43 (185.210.48.43)  24.208 ms  24.725 ms  24.138 ms
 8  * * *
 9  pypi.org (151.101.0.223)  22.440 ms  22.333 ms  22.015 ms
$ traceroute files.pythonhosted.org
traceroute to files.pythonhosted.org (151.101.1.63), 64 hops max, 52 byte packets
 1  vodafone.station (192.168.1.1)  115.526 ms  1.817 ms  1.801 ms
 2  172.21.0.1 (172.21.0.1)  4.973 ms  5.120 ms  4.421 ms
 3  192.168.50.13 (192.168.50.13)  5.856 ms  174.839 ms  5.552 ms
 4  net-93-65-241-31.cust.vodafonedsl.it (93.65.241.31)  4.738 ms  5.230 ms  4.586 ms
 5  10.177.21.217 (10.177.21.217)  5.453 ms  4.559 ms  5.580 ms
 6  185.210.48.42 (185.210.48.42)  53.995 ms  23.485 ms
    185.210.48.43 (185.210.48.43)  158.457 ms
 7  185.210.48.43 (185.210.48.43)  28.528 ms  157.101 ms  26.910 ms
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *
31  * * *
32  * * *
33  * * *
34  * * *
35  * * *
36  * * *
37  * * *
38  * * *
39  * * *
40  * * *
41  * * *
42  * * *
43  * * *
44  * * *
45  * * *
46  * * *
47  * * *
48  * * *
$ traceroute -I files.pythonhosted.org
traceroute to files.pythonhosted.org (151.101.1.63), 64 hops max, 72 byte packets
 1  vodafone.station (192.168.1.1)  3.771 ms  1.962 ms  1.339 ms
 2  172.21.0.1 (172.21.0.1)  4.855 ms  4.753 ms  4.495 ms
 3  192.168.50.13 (192.168.50.13)  8.559 ms  5.226 ms  4.850 ms
 4  net-93-65-241-31.cust.vodafonedsl.it (93.65.241.31)  4.579 ms  4.202 ms  4.152 ms
 5  10.177.21.217 (10.177.21.217)  100.781 ms  6.871 ms  5.218 ms
 6  185.210.48.43 (185.210.48.43)  24.883 ms  24.687 ms  25.819 ms
 7  185.210.48.43 (185.210.48.43)  25.284 ms  24.987 ms  24.274 ms
 8  * * *
 9  files.pythonhosted.org (151.101.1.63)  29.444 ms  22.524 ms  23.715 ms

Traceroutes / IPv6 (If available)

$ traceroute6 pypi.org

$ traceroute6 files.pythonhosted.org

HTTPS Requests / IPv4

$ curl -vvv -I --ipv4 https://pypi.org/pypi/pip/json
*   Trying 151.101.0.223:443...
* Connected to pypi.org (151.101.0.223) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*  CAfile: /etc/ssl/cert.pem
*  CApath: none
* (304) (OUT), TLS handshake, Client hello (1):
* (304) (IN), TLS handshake, Server hello (2):
* (304) (IN), TLS handshake, Unknown (8):
* (304) (IN), TLS handshake, Certificate (11):
* (304) (IN), TLS handshake, CERT verify (15):
* (304) (IN), TLS handshake, Finished (20):
* (304) (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / AEAD-AES128-GCM-SHA256
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=pypi.org
*  start date: Jul 26 19:45:14 2022 GMT
*  expire date: Aug 27 19:45:13 2023 GMT
*  subjectAltName: host "pypi.org" matched cert's "pypi.org"
*  issuer: C=BE; O=GlobalSign nv-sa; CN=GlobalSign Atlas R3 DV TLS CA 2022 Q3
*  SSL certificate verify ok.
* Using HTTP2, server supports multiplexing
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x7ff491811800)
> HEAD /pypi/pip/json HTTP/2
> Host: pypi.org
> user-agent: curl/7.79.1
> accept: */*
>
< HTTP/2 200
HTTP/2 200
< access-control-allow-headers: Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since
access-control-allow-headers: Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since
< access-control-allow-methods: GET
access-control-allow-methods: GET
< access-control-allow-origin: *
access-control-allow-origin: *
< access-control-expose-headers: X-PyPI-Last-Serial
access-control-expose-headers: X-PyPI-Last-Serial
< access-control-max-age: 86400
access-control-max-age: 86400
< cache-control: max-age=900, public
cache-control: max-age=900, public
< content-security-policy: base-uri 'self'; block-all-mixed-content; connect-src 'self' https://api.github.com/repos/ https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com fastly-insights.com *.fastly-insights.com *.ethicalads.io https://api.pwnedpasswords.com https://cdn.jsdelivr.net/npm/mathjax@3.2.2/es5/sre/mathmaps/ https://2p66nmmycsj3.statuspage.io; default-src 'none'; font-src 'self' fonts.gstatic.com; form-action 'self' https://checkout.stripe.com; frame-ancestors 'none'; frame-src 'none'; img-src 'self' https://warehouse-camo.ingress.cmh1.psfhosted.org/ https://*.google-analytics.com https://*.googletagmanager.com *.fastly-insights.com *.ethicalads.io; script-src 'self' https://*.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com *.fastly-insights.com *.ethicalads.io 'sha256-U3hKDidudIaxBDEzwGJApJgPEf2mWk6cfMWghrAa6i0=' https://cdn.jsdelivr.net/npm/mathjax@3.2.2/ 'sha256-1CldwzdEg2k1wTmf7s5RWVd7NMXI/7nxxjJM2C4DqII=' 'sha256-0POaN8stWYQxhzjKS+/eOfbbJ/u4YHO5ZagJvLpMypo='; style-src 'self' fonts.googleapis.com *.ethicalads.io 'sha256-2YHqZokjiizkHi1Zt+6ar0XJ0OeEy/egBnlm+MDMtrM=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-JLEjeN9e5dGsz5475WyRaoA4eQOdNPxDIeUhclnJDCE=' 'sha256-mQyxHEuwZJqpxCw3SLmc4YOySNKXunyu2Oiz1r3/wAE=' 'sha256-OCf+kv5Asiwp++8PIevKBYSgnNLNUZvxAp4a7wMLuKA=' 'sha256-h5LOiLhk6wiJrGsG5ItM0KimwzWQH/yAcmoJDJL//bY='; worker-src *.fastly-insights.com
content-security-policy: base-uri 'self'; block-all-mixed-content; connect-src 'self' https://api.github.com/repos/ https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com fastly-insights.com *.fastly-insights.com *.ethicalads.io https://api.pwnedpasswords.com https://cdn.jsdelivr.net/npm/mathjax@3.2.2/es5/sre/mathmaps/ https://2p66nmmycsj3.statuspage.io; default-src 'none'; font-src 'self' fonts.gstatic.com; form-action 'self' https://checkout.stripe.com; frame-ancestors 'none'; frame-src 'none'; img-src 'self' https://warehouse-camo.ingress.cmh1.psfhosted.org/ https://*.google-analytics.com https://*.googletagmanager.com *.fastly-insights.com *.ethicalads.io; script-src 'self' https://*.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com *.fastly-insights.com *.ethicalads.io 'sha256-U3hKDidudIaxBDEzwGJApJgPEf2mWk6cfMWghrAa6i0=' https://cdn.jsdelivr.net/npm/mathjax@3.2.2/ 'sha256-1CldwzdEg2k1wTmf7s5RWVd7NMXI/7nxxjJM2C4DqII=' 'sha256-0POaN8stWYQxhzjKS+/eOfbbJ/u4YHO5ZagJvLpMypo='; style-src 'self' fonts.googleapis.com *.ethicalads.io 'sha256-2YHqZokjiizkHi1Zt+6ar0XJ0OeEy/egBnlm+MDMtrM=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-JLEjeN9e5dGsz5475WyRaoA4eQOdNPxDIeUhclnJDCE=' 'sha256-mQyxHEuwZJqpxCw3SLmc4YOySNKXunyu2Oiz1r3/wAE=' 'sha256-OCf+kv5Asiwp++8PIevKBYSgnNLNUZvxAp4a7wMLuKA=' 'sha256-h5LOiLhk6wiJrGsG5ItM0KimwzWQH/yAcmoJDJL//bY='; worker-src *.fastly-insights.com
< content-type: application/json
content-type: application/json
< etag: "ujujhYPU/K6HugqfQRGuLQ"
etag: "ujujhYPU/K6HugqfQRGuLQ"
< referrer-policy: origin-when-cross-origin
referrer-policy: origin-when-cross-origin
< server: nginx/1.13.9
server: nginx/1.13.9
< x-pypi-last-serial: 16625770
x-pypi-last-serial: 16625770
< accept-ranges: bytes
accept-ranges: bytes
< date: Tue, 07 Feb 2023 13:45:51 GMT
date: Tue, 07 Feb 2023 13:45:51 GMT
< x-served-by: cache-iad-kcgs7200098-IAD, cache-fco2270020-FCO
x-served-by: cache-iad-kcgs7200098-IAD, cache-fco2270020-FCO
< x-cache: HIT, HIT
x-cache: HIT, HIT
< x-cache-hits: 660203, 1
x-cache-hits: 660203, 1
< x-timer: S1675777551.228963,VS0,VE2
x-timer: S1675777551.228963,VS0,VE2
< vary: Accept-Encoding, Accept-Encoding
vary: Accept-Encoding, Accept-Encoding
< strict-transport-security: max-age=31536000; includeSubDomains; preload
strict-transport-security: max-age=31536000; includeSubDomains; preload
< x-frame-options: deny
x-frame-options: deny
< x-xss-protection: 1; mode=block
x-xss-protection: 1; mode=block
< x-content-type-options: nosniff
x-content-type-options: nosniff
< x-permitted-cross-domain-policies: none
x-permitted-cross-domain-policies: none
< content-length: 168327
content-length: 168327

<
* Connection #0 to host pypi.org left intact
$ curl -vvv -I --ipv4 https://files.pythonhosted.org/packages/ae/e8/2340d46ecadb1692a1e455f13f75e596d4eab3d11a57446f08259dee8f02/pip-10.0.1.tar.gz
*   Trying 151.101.1.63:443...
* Connected to files.pythonhosted.org (151.101.1.63) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*  CAfile: /etc/ssl/cert.pem
*  CApath: none
* (304) (OUT), TLS handshake, Client hello (1):
* (304) (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.pythonhosted.org
*  start date: Sep 27 20:45:08 2022 GMT
*  expire date: Oct 29 20:45:07 2023 GMT
*  subjectAltName: host "files.pythonhosted.org" matched cert's "*.pythonhosted.org"
*  issuer: C=BE; O=GlobalSign nv-sa; CN=GlobalSign Atlas R3 DV TLS CA 2022 Q3
*  SSL certificate verify ok.
* Using HTTP2, server supports multiplexing
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x7fc9f700d200)
> HEAD /packages/ae/e8/2340d46ecadb1692a1e455f13f75e596d4eab3d11a57446f08259dee8f02/pip-10.0.1.tar.gz HTTP/2
> Host: files.pythonhosted.org
> user-agent: curl/7.79.1
> accept: */*
>
< HTTP/2 200
HTTP/2 200
< last-modified: Wed, 26 Feb 2020 17:47:37 GMT
last-modified: Wed, 26 Feb 2020 17:47:37 GMT
< etag: "83a177756e2c801d0b3a6f7b0d4f3f7e"
etag: "83a177756e2c801d0b3a6f7b0d4f3f7e"
< x-goog-generation: 1582739257438329
x-goog-generation: 1582739257438329
< x-goog-metageneration: 1
x-goog-metageneration: 1
< x-goog-stored-content-encoding: identity
x-goog-stored-content-encoding: identity
< x-goog-stored-content-length: 1246072
x-goog-stored-content-length: 1246072
< content-type: binary/octet-stream
content-type: binary/octet-stream
< x-goog-hash: crc32c=Om2N1A==
x-goog-hash: crc32c=Om2N1A==
< x-goog-hash: md5=g6F3dW4sgB0LOm97DU8/fg==
x-goog-hash: md5=g6F3dW4sgB0LOm97DU8/fg==
< server: UploadServer
server: UploadServer
< cache-control: max-age=365000000, immutable, public
cache-control: max-age=365000000, immutable, public
< accept-ranges: bytes
accept-ranges: bytes
< date: Tue, 07 Feb 2023 13:47:57 GMT
date: Tue, 07 Feb 2023 13:47:57 GMT
< age: 604591
age: 604591
< x-served-by: cache-bfi-kbfi7400070-BFI, cache-fco2270022-FCO
x-served-by: cache-bfi-kbfi7400070-BFI, cache-fco2270022-FCO
< x-cache: HIT, MISS
x-cache: HIT, MISS
< x-cache-hits: 1, 0
x-cache-hits: 1, 0
< x-timer: S1675777639.617968,VS0,VE38787
x-timer: S1675777639.617968,VS0,VE38787
< strict-transport-security: max-age=31536000; includeSubDomains; preload
strict-transport-security: max-age=31536000; includeSubDomains; preload
< x-frame-options: deny
x-frame-options: deny
< x-xss-protection: 1; mode=block
x-xss-protection: 1; mode=block
< x-content-type-options: nosniff
x-content-type-options: nosniff
< x-permitted-cross-domain-policies: none
x-permitted-cross-domain-policies: none
< x-robots-header: noindex
x-robots-header: noindex
< x-pypi-file-python-version: source
x-pypi-file-python-version: source
< x-pypi-file-version: 10.0.1
x-pypi-file-version: 10.0.1
< x-pypi-file-package-type: sdist
x-pypi-file-package-type: sdist
< x-pypi-file-project: pip
x-pypi-file-project: pip
< content-length: 1246072
content-length: 1246072

<
* Connection #0 to host files.pythonhosted.org left intact

HTTPS Requests / IPv6 (If available)

$ curl -vvv -I --ipv6 https://pypi.org/pypi/pip/json

$ curl -vvv -I --ipv6 https://files.pythonhosted.org/packages/ae/e8/2340d46ecadb1692a1e455f13f75e596d4eab3d11a57446f08259dee8f02/pip-10.0.1.tar.gz

TLS Debug / IPv4

$ echo -n | openssl s_client -4 -connect pypi.org:443
CONNECTED(00000003)
depth=2 OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign Atlas R3 DV TLS CA 2022 Q3
verify return:1
depth=0 CN = www.python.org
verify return:1
---
Certificate chain
 0 s:/CN=www.python.org
   i:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Atlas R3 DV TLS CA 2022 Q3
 1 s:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Atlas R3 DV TLS CA 2022 Q3
   i:/OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/CN=www.python.org
issuer=/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Atlas R3 DV TLS CA 2022 Q3
---
No client certificate CA names sent
Server Temp Key: ECDH, X25519, 253 bits
---
SSL handshake has read 3500 bytes and written 289 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 616EE6CD44A4CA0C323716BAC583716EAD6A4FDEFECA96E210415012EAB6D017
    Session-ID-ctx:
    Master-Key: A504D332FAF3B1AB2F15CBB79B5BC9DFDFF83B7AFF5F772852970903CAE5F44D95573239ACBF7CB776534B426F79D2EB
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - a4 e6 ad 76 46 ff a7 b4-e6 c6 cf ae 69 39 f4 2a   ...vF.......i9.*
    0010 - 80 78 5c 3a 3e 30 48 86-56 62 e9 fe ea 1c 44 d8   .x\:>0H.Vb....D.
    0020 - 71 d3 9e 48 62 52 71 f6-38 ce 13 2d f7 a2 11 e1   q..HbRq.8..-....
    0030 - 59 ea ac fd a6 b6 9a 20-c7 b1 3a f1 04 3c a4 f1   Y...... ..:..<..
    0040 - 7d 6c b5 f5 c9 79 92 06-22 30 dc 54 32 a6 49 70   }l...y.."0.T2.Ip
    0050 - 41 58 2a 13 c1 4b eb 29-96 ae 6c 7e bd 2a 0a 1b   AX*..K.)..l~.*..
    0060 - c5 17 db 69 22 02 63 43-88 48 7d 12 42 f3 59 83   ...i".cC.H}.B.Y.
    0070 - 71 f0 3b 5a cb eb 6d a4-30 8e 3c 62 73 83 e9 8f   q.;Z..m.0.<bs...
    0080 - 77 ed f3 08 ae 43 95 22-d3 1f 74 49 20 0c 30 86   w....C."..tI .0.
    0090 - 93 af be f8 07 e4 93 e5-ca f2 ab f6 a4 c7 84 5a   ...............Z

    Start Time: 1675778243
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
---
DONE
$ echo -n | openssl s_client -4 -connect files.pythonhosted.org:443
CONNECTED(00000003)
depth=2 OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign Atlas R3 DV TLS CA 2022 Q2
verify return:1
depth=0 CN = r.shared-319-default.ssl.fastly.net
verify return:1
---
Certificate chain
 0 s:/CN=r.shared-319-default.ssl.fastly.net
   i:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Atlas R3 DV TLS CA 2022 Q2
 1 s:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Atlas R3 DV TLS CA 2022 Q2
   i:/OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
---
Server certificate
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
subject=/CN=r.shared-319-default.ssl.fastly.net
issuer=/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Atlas R3 DV TLS CA 2022 Q2
---
No client certificate CA names sent
Server Temp Key: ECDH, X25519, 253 bits
---
SSL handshake has read 3473 bytes and written 289 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 7F21645A2ADDEF36026F6E14B91207AF246A277CDD0012F0DDC7A2135B088D43
    Session-ID-ctx:
    Master-Key: 185078AD7B3D810A523D1B87F1DF069F86220878E3F333F33B13FC136ED1F5D26B9E9B9C3D209098D4A4259AE44BA326
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - a4 e6 ad 76 46 ff a7 b4-e6 c6 cf ae 69 39 f4 2a   ...vF.......i9.*
    0010 - 4f 79 1c 6c 11 12 bd 7c-0c 39 3b 73 ab ca 66 78   Oy.l...|.9;s..fx
    0020 - af 36 44 b6 6d 13 85 2e-59 df 56 c7 5b 68 d2 77   .6D.m...Y.V.[h.w
    0030 - 40 f2 6e 7f 1d 3e ba f6-59 ac 2e 72 6e 02 50 b4   @.n..>..Y..rn.P.
    0040 - da 66 4b 3e ec 1e f2 01-44 0b 9d b3 7a d3 1a 8b   .fK>....D...z...
    0050 - 82 18 9b 56 5a 52 96 c5-99 56 7d d8 75 1d 6e 6e   ...VZR...V}.u.nn
    0060 - 19 71 20 ef 67 1e 23 3d-b1 e6 de e1 67 05 5b f1   .q .g.#=....g.[.
    0070 - ed a7 e1 4f 54 10 1c 91-b5 00 a0 76 77 2c 03 ff   ...OT......vw,..
    0080 - 86 71 ea 85 2b af 1e f3-72 c7 e3 90 c9 72 d2 fe   .q..+...r....r..
    0090 - 39 6d 02 3e 4c e2 be 39-0d 5e 94 11 48 15 5f 3b   9m.>L..9.^..H._;

    Start Time: 1675778262
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
---
DONE

TLS Debug / IPv6 (If available)

$ echo -n | openssl s_client -6 -connect pypi.org:443

$ echo -n | openssl s_client -6 -connect files.pythonhosted.org:443

Code of Conduct

mauros191 commented 1 year ago

Please can someone help me? I use Python for work and in these conditions it's getting really hard to work. Thanks

mauros191 commented 1 year ago

OK I don't know if you did anything but right now it's working!

di commented 1 year ago

Closing since this seems resolved.