search

pypi / support

Issue tracker for support requests related to using https://pypi.org
91 stars 48 forks source link

Pip timeouts with ipv6 #965

Closed royassis closed 1 year ago

royassis commented 3 years ago

My Platform

The problem is with the network. When using ipv6 to connect, pip timeouts endlessly. When disabling ipv6 pip works fine. I'm not that good with networking, and don't know how to provide data about said topics: SSL/TLS implementation in use, internet service provider, and if there are any firewalls or proxies in use

Fastly Debug

WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ReadTimeoutError("HTTPSConnectionPool(host='pypi.org', port=443): Read timed out. (read timeout=15)")': /simple/numpy/ WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ReadTimeoutError("HTTPSConnectionPool(host='pypi.org', port=443): Read timed out. (read timeout=15)")': /simple/numpy/ WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ReadTimeoutError("HTTPSConnectionPool(host='pypi.org', port=443): Read timed out. (read timeout=15)")': /simple/numpy/ WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ReadTimeoutError("HTTPSConnectionPool(host='pypi.org', port=443): Read timed out. (read timeout=15)")': /simple/numpy/ WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ReadTimeoutError("HTTPSConnectionPool(host='pypi.org', port=443): Read timed out. (read timeout=15)")': /simple/numpy/ ERROR: Could not find a version that satisfies the requirement numpy ERROR: No matching distribution found for numpy

DNS Resolution

$ dig pypi.org A

$ dig pypi.org AAAA

$ dig files.pythonhosted.org A

$ dig files.pythonhosted.org AAAA

Traceroutes / IPv4

$ traceroute pypi.org
 1  DESKTOP-05EDHR9.mshome.net (172.31.16.1)  0.231 ms  0.217 ms  0.241 ms
 2  192.168.1.1 (192.168.1.1)  0.485 ms  0.352 ms  0.329 ms
 3  10.186.64.1 (10.186.64.1)  15.092 ms  9.200 ms  15.297 ms
 4  172.18.8.150 (172.18.8.150)  15.788 ms * *
 5  * 172.17.3.57 (172.17.3.57)  16.087 ms  15.850 ms
 6  172.17.3.114 (172.17.3.114)  16.463 ms  15.575 ms  15.361 ms
 7  * * *
 8  HotNet-213-57-1-62.hotnet.net.il (213.57.1.62)  26.356 ms * *
 9  HotNet-213-57-1-69.hotnet.net.il (213.57.1.69)  9.959 ms  15.299 ms  15.277 ms
10  * * *
11  core-213-57-0-90.PT.hotnet.net.il (213.57.0.90)  15.257 ms * *
12  * * core-213-57-0-69.PT.hotnet.net.il (213.57.0.69)  65.108 ms
13  89.221.34.176 (89.221.34.176)  67.264 ms  62.775 ms *
14  195.22.211.41 (195.22.211.41)  71.655 ms  73.355 ms  71.609 ms
15  4.68.63.109 (4.68.63.109)  83.574 ms  62.194 ms  71.246 ms
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *
$ traceroute files.pythonhosted.org
traceroute to files.pythonhosted.org (151.101.1.63), 30 hops max, 60 byte packets
 1  DESKTOP-05EDHR9.mshome.net (172.31.16.1)  0.476 ms  0.464 ms  0.458 ms
 2  192.168.1.1 (192.168.1.1)  1.164 ms  1.161 ms  1.993 ms
 3  10.186.64.1 (10.186.64.1)  12.628 ms  12.516 ms  12.716 ms
 4  172.18.8.150 (172.18.8.150)  15.514 ms * *
 5  172.17.3.57 (172.17.3.57)  15.517 ms  15.509 ms  15.515 ms
 6  172.17.3.114 (172.17.3.114)  15.478 ms  13.934 ms  15.142 ms
 7  * * *
 8  * * *
 9  HotNet-213-57-1-69.hotnet.net.il (213.57.1.69)  13.632 ms  13.843 ms  13.797 ms
10  * HotNet-213-57-1-76.hotnet.net.il (213.57.1.76)  14.367 ms *
11  * * *
12  * * *
13  89.221.34.176 (89.221.34.176)  61.819 ms  61.562 ms  61.771 ms
14  195.22.211.41 (195.22.211.41)  66.254 ms  66.813 ms  63.725 ms
15  4.68.63.109 (4.68.63.109)  74.220 ms  79.032 ms  73.769 ms
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *

Traceroutes / IPv6 (If available)

$ traceroute6 pypi.org
traceroute6: connect: Network is unreachable
$ traceroute6 files.pythonhosted.org
traceroute6: connect: Network is unreachable

HTTPS Requests / IPv4

$ curl -vvv -I --ipv4 https://pypi.org/pypi/pip/json
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0*   Trying 151.101.192.223:443...
* TCP_NODELAY set
* Connected to pypi.org (151.101.192.223) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [19 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [3284 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: businessCategory=Private Organization; jurisdictionC=US; jurisdictionST=Delaware; serialNumber=3359300; C=US; ST=Oregon; L=Beaverton; O=Python Software Foundation; CN=www.python.org
*  start date: Sep 29 00:00:00 2020 GMT
*  expire date: Oct 31 00:00:00 2021 GMT
*  subjectAltName: host "pypi.org" matched cert's "pypi.org"
*  issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=DigiCert SHA2 Extended Validation Server CA
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* Using Stream ID: 1 (easy handle 0x55e4ea3c27c0)
} [5 bytes data]
> HEAD /pypi/pip/json HTTP/2
> Host: pypi.org
> user-agent: curl/7.68.0
> accept: */*
>
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [177 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
} [5 bytes data]
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0< HTTP/2 200
< access-control-allow-headers: Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since
< access-control-allow-methods: GET
< access-control-allow-origin: *
< access-control-expose-headers: X-PyPI-Last-Serial
< access-control-max-age: 86400
< cache-control: max-age=900, public
< content-security-policy: base-uri 'self'; block-all-mixed-content; connect-src 'self' https://api.github.com/repos/ *.fastly-insights.com sentry.io https://api.pwnedpasswords.com https://2p66nmmycsj3.statuspage.io; default-src 'none'; font-src 'self' fonts.gstatic.com; form-action 'self'; frame-ancestors 'none'; frame-src 'none'; img-src 'self' https://warehouse-camo.ingress.cmh1.psfhosted.org/ www.google-analytics.com *.fastly-insights.com; script-src 'self' www.googletagmanager.com www.google-analytics.com *.fastly-insights.com https://cdn.ravenjs.com; style-src 'self' fonts.googleapis.com; worker-src *.fastly-insights.com
< content-type: application/json
< etag: "GJ2MzzNzT4zaHofzvnmRcA"
< referrer-policy: origin-when-cross-origin
< server: nginx/1.13.9
< x-pypi-last-serial: 9272759
< accept-ranges: bytes
< date: Tue, 16 Mar 2021 20:27:24 GMT
< x-served-by: cache-bwi5125-BWI, cache-fra19124-FRA
< x-cache: HIT, HIT
< x-cache-hits: 2, 1
< x-timer: S1615926445.720271,VS0,VE1
< vary: Accept-Encoding, Accept-Encoding
< strict-transport-security: max-age=31536000; includeSubDomains; preload
< x-frame-options: deny
< x-xss-protection: 1; mode=block
< x-content-type-options: nosniff
< x-permitted-cross-domain-policies: none
< content-length: 117476
<
  0  114k    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
* Connection #0 to host pypi.org left intact
HTTP/2 200
access-control-allow-headers: Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-expose-headers: X-PyPI-Last-Serial
access-control-max-age: 86400
cache-control: max-age=900, public
content-security-policy: base-uri 'self'; block-all-mixed-content; connect-src 'self' https://api.github.com/repos/ *.fastly-insights.com sentry.io https://api.pwnedpasswords.com https://2p66nmmycsj3.statuspage.io; default-src 'none'; font-src 'self' fonts.gstatic.com; form-action 'self'; frame-ancestors 'none'; frame-src 'none'; img-src 'self' https://warehouse-camo.ingress.cmh1.psfhosted.org/ www.google-analytics.com *.fastly-insights.com; script-src 'self' www.googletagmanager.com www.google-analytics.com *.fastly-insights.com https://cdn.ravenjs.com; style-src 'self' fonts.googleapis.com; worker-src *.fastly-insights.com
content-type: application/json
etag: "GJ2MzzNzT4zaHofzvnmRcA"
referrer-policy: origin-when-cross-origin
server: nginx/1.13.9
x-pypi-last-serial: 9272759
accept-ranges: bytes
date: Tue, 16 Mar 2021 20:27:24 GMT
x-served-by: cache-bwi5125-BWI, cache-fra19124-FRA
x-cache: HIT, HIT
x-cache-hits: 2, 1
x-timer: S1615926445.720271,VS0,VE1
vary: Accept-Encoding, Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: deny
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
content-length: 117476
$ curl -vvv -I --ipv4 https://files.pythonhosted.org/packages/ae/e8/2340d46ecadb1692a1e455f13f75e596d4eab3d11a57446f08259dee8f02/pip-10.0.1.tar.gz

<

HTTPS Requests / IPv6 (If available)

$ curl -vvv -I --ipv6 https://pypi.org/pypi/pip/json

$ curl -vvv -I --ipv6 https://files.pythonhosted.org/packages/ae/e8/2340d46ecadb1692a1e455f13f75e596d4eab3d11a57446f08259dee8f02/pip-10.0.1.tar.gz

TLS Debug / IPv4

$ echo -n | openssl s_client -4 -connect pypi.org:443

CONNECTED(00000003) depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA verify return:1 depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 Extended Validation Server CA verify return:1 depth=0 businessCategory = Private Organization, jurisdictionC = US, jurisdictionST = Delaware, serialNumber = 3359300, C = US, ST = Oregon, L = Beaverton, O = Python Software Foundation, CN = www.python.org verify return:1

Certificate chain 0 s:businessCategory = Private Organization, jurisdictionC = US, jurisdictionST = Delaware, serialNumber = 3359300, C = US, ST = Oregon, L = Beaverton, O = Python Software Foundation, CN = www.python.org i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 Extended Validation Server CA 1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 Extended Validation Server CA i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA

Server certificate -----BEGIN CERTIFICATE----- MIIIBDCCBuygAwIBAgIQCgvu6rKU/G36blVsu5S6BzANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTIwMDkyOTAwMDAwMFoXDTIxMTAzMTAw MDAwMFowgdExHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAlVTMRkwFwYLKwYBBAGCNzwCAQITCERlbGF3YXJlMRAwDgYDVQQF EwczMzU5MzAwMQswCQYDVQQGEwJVUzEPMA0GA1UECBMGT3JlZ29uMRIwEAYDVQQH EwlCZWF2ZXJ0b24xIzAhBgNVBAoTGlB5dGhvbiBTb2Z0d2FyZSBGb3VuZGF0aW9u MRcwFQYDVQQDEw53d3cucHl0aG9uLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKb7uzSV2u41/YZbs+vvB5ob5BVQtKYKg+npgFfdvn/yMuG5Vrvl iokKJL3RtQGQDGZmYkhsUah2yiYCsQ0dzjBUquG1yxzprRkn1/m/dtwDjH8+mm+t my80sSVp3TVCnnDuuzazxe0HBGcRM8yqnW5aN+AXV074UUuRRx0ixZy3ttoHl66M MshcFdJ1mKOKm1ZKCque4Ydk1EizWSjiDtIj4wRzHbOjuGtZrbv+uw396ILmI6oI AcKIC7VkteEe2s04cXOh7inQgw+fMeiVEnLs+TADNAvYG+4zYNk1ddL3QxiqYTld JyyUAdIdE5+Q1U2kJrVQnCvAWCAMFVElBzkCAwEAAaOCBDEwggQtMB8GA1UdIwQY MBaAFD3TUKXWoK3u80pgCmXTIdT4+NYPMB0GA1UdDgQWBBREsu1+8w+FHnZxpf7i oOhf7b0BVjCCAVQGA1UdEQSCAUswggFHgg53d3cucHl0aG9uLm9yZ4IPZG9jcy5w eXRob24ub3Jngg9idWdzLnB5dGhvbi5vcmeCD3dpa2kucHl0aG9uLm9yZ4INaGcu cHl0aG9uLm9yZ4IPbWFpbC5weXRob24ub3Jngg9weXBpLnB5dGhvbi5vcmeCFHBh Y2thZ2luZy5weXRob24ub3JnghBsb2dpbi5weXRob24ub3Jnggx1cy5weWNvbi5v cmeCCHB5cGkub3JnggdweXBpLmlvggxkb2NzLnB5cGkuaW+CDWRvY3MucHlwaS5v cmeCDmRvbmF0ZS5weXBpLmlvgg9kb25hdGUucHlwaS5vcmeCE2Rldmd1aWRlLnB5 dGhvbi5vcmeCE3d3dy5idWdzLnB5dGhvbi5vcmeCCnB5dGhvbi5vcmeCFGRvd25s b2Fkcy5weXRob24ub3JnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGln aWNlcnQuY29tL3NoYTItZXYtc2VydmVyLWczLmNybDA0oDKgMIYuaHR0cDovL2Ny bDQuZGlnaWNlcnQuY29tL3NoYTItZXYtc2VydmVyLWczLmNybDBLBgNVHSAERDBC MDcGCWCGSAGG/WwCATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2Vy dC5jb20vQ1BTMAcGBWeBDAEBMIGIBggrBgEFBQcBAQR8MHowJAYIKwYBBQUHMAGG GGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBSBggrBgEFBQcwAoZGaHR0cDovL2Nh Y2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkV4dGVuZGVkVmFsaWRhdGlv blNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB 8wDxAHcA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAF02oPpyAAA BAMASDBGAiEArg/ruTBvWubivrxwRytv8VGCpA3yVHTaKFiObDBcHrcCIQCFzUvP ib7qJGqbLP5IWY11D6sxJvv/ZvIopE0SZW6CrAB2AFzcQ5L+5qtFRLFemtRW5hA3 +9X6R9yhc5SyXub2xw7KAAABdNqD6hoAAAQDAEcwRQIhAMgXNU82IlkTHbOUc/7L ToliVL6Jin00+mc1isj0q6wiAiBsVKEdXbfCsLJZGb74Lkx1axdiMtDZWVSUJdTJ 7DtzJTANBgkqhkiG9w0BAQsFAAOCAQEAW84GOYCg3n2dfoKtNl1s20kkvbItnvSr ysmVrCjG+DfvW+Z71Z9m0sukZOY0Aweky+DgvHZUkbPgZBoJ5L915hC8uKlgbk6K 0TjM7aKZkbtj8x68s3lOC0BiFC05WQxV82AxJkx5wygfGmavS703TPrGDb3XXcho 8cg409X9vcWnfVLohO/RAwwlhh8sYC8o46lGgC2k6F2S7Okgqxwsj+RgJ0d777J8 x7VVGTruzaUz8laEcs4jnuPrGw6OWT2v7YiEq3bIlz5hbYa/c6AGvJ44QUr+uEFW okZVHOUC/rI3HN8rsApSNQRIVH6VCs1Zbz298lDhoBELMapBQEl9RA== -----END CERTIFICATE----- subject=businessCategory = Private Organization, jurisdictionC = US, jurisdictionST = Delaware, serialNumber = 3359300, C = US, ST = Oregon, L = Beaverton, O = Python Software Foundation, CN = www.python.org

issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 Extended Validation Server CA

No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits

SSL handshake has read 3831 bytes and written 380 bytes Verification: OK

New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok)

Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384 Session-ID: DB5F10BE761023E0411BB01510A4C54DB8F564A0C0AA1E247CF5845A940DB47F Session-ID-ctx: Resumption PSK: A96FE8FECC261B276B91B806D61FBB26AF647740BF293F12AF3463F2B58DEDEE6A09A1E8763D57B82BAFAC54EF518ED0 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 604800 (seconds) TLS session ticket: 0000 - 17 05 41 18 04 8f 57 3d-0a 79 74 2c 38 0f d1 34 ..A...W=.yt,8..4 0010 - 89 3f 88 6f 15 22 e5 e3-6d cb 76 d5 a7 8e f6 e6 .?.o."..m.v..... 0020 - f1 69 8a c8 b8 d6 90 e6-c6 c6 cf e2 cc 03 4d ae .i............M. 0030 - 62 28 1c c1 e7 99 3d d5-a3 92 61 d4 0e ca 34 ca b(....=...a...4. 0040 - 6b 3f 53 98 09 6e c9 62-6b 5d 29 d5 ef 6b 90 58 k?S..n.bk])..k.X 0050 - 46 4e 5c a2 a0 38 be f9-80 91 88 65 c4 90 23 83 FN..8.....e..#. 0060 - 0b 00 9a 71 97 8c 24 da-33 2d f3 0d f8 92 e1 78 ...q..$.3-.....x 0070 - ff 1c cf 01 4f 35 0d dd-c8 40 d5 7e 84 ec 28 6f ....O5...@.~..(o 0080 - e5 b3 69 59 ff 3b 5d a5-30 05 91 89 54 a9 d9 f9 ..iY.;].0...T... 0090 - f5 d6 c4 cc 7b f1 de c5-1d 7c ed 8d cf 06 7a 45 ....{....|....zE

Start Time: 1615926572
Timeout   : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
Max Early Data: 0

read R BLOCK DONE

$ echo -n | openssl s_client -4 -connect files.pythonhosted.org:443

CONNECTED(00000003) depth=2 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA verify return:1 depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign CloudSSL CA - SHA256 - G3 verify return:1 depth=0 C = US, ST = California, L = San Francisco, O = "Fastly, Inc", CN = r.ssl.fastly.net verify return:1

Certificate chain 0 s:C = US, ST = California, L = San Francisco, O = "Fastly, Inc", CN = r.ssl.fastly.net i:C = BE, O = GlobalSign nv-sa, CN = GlobalSign CloudSSL CA - SHA256 - G3 1 s:C = BE, O = GlobalSign nv-sa, CN = GlobalSign CloudSSL CA - SHA256 - G3 i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA

Server certificate -----BEGIN CERTIFICATE----- MIIJGjCCCAKgAwIBAgIME07/33vqXUwb79wTMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMjAxMTEyMTgz NDEwWhcNMjEwNDI4MTkyMDI1WjBrMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEUMBIGA1UECgwLRmFzdGx5 LCBJbmMxGTAXBgNVBAMMEHIuc3NsLmZhc3RseS5uZXQwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDTciJwVUeYpeFv0YzWACjrrAg7Qy2yWqLNrGXTJu0m 0bWfeB9kA3gY3gny66LF6W/hYVXtf+oCneDWIpm7eO8DogP+k9H2uwOkCnEXOGog Jj1QfWnlqYQSpK0HRZ8idm6EglJANXBqK/G+Nbnqb0P68MsdaTKLo1zHyRcEncbZ OnWAgYkZ1s5CyNQmNhn741JrkXuEcLjuRi5oFP252w8qhcxLAzI9T7pfym9ERcvM kwZUXUIv9z0qrU3HikASfL6TC2O1qfHwVd4RvR74WOdDHkS02AQWx3NpVbfBLI53 GM/f59vocj3z6cV5TmUcbgrvYt2Lm215mjIOefyzxqlxAgMBAAGjggXQMIIFzDAO BgNVHQ8BAf8EBAMCBaAwgYoGCCsGAQUFBwEBBH4wfDBCBggrBgEFBQcwAoY2aHR0 cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvY2xvdWRzc2xzaGEyZzMu Y3J0MDYGCCsGAQUFBzABhipodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vY2xv dWRzc2xzaGEyZzMwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggrBgEFBQcC ARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EM AQICMAkGA1UdEwQCMAAwggNhBgNVHREEggNYMIIDVIIQci5zc2wuZmFzdGx5Lm5l dIIMKi5hZHdlcnguY29tghAqLmNhdGNocG9pbnQuY29tgggqLmNubi5pb4IVKi5k b2xsYXJzaGF2ZWNsdWIuY29tggsqLmVhdGVyLmNvbYIWKi5mYXN0bHkucGljbW9u a2V5LmNvbYIcKi5maWxlcy5zYXltZWRpYS1jb250ZW50LmNvbYIMKi5maW5uY2Ru Lm5vgggqLmZ0LmNvbYIQKi5ob3VzZWxvZ2ljLmNvbYISKi5tZWV0dXBzdGF0aWMu Y29tgg0qLm5ldHp3ZWx0LmRlggkqLm5mbC5jb22CCioucGFnYXIubWWCDyoucGlj bW9ua2V5LmNvbYIJKi5weXBpLmlvggoqLnB5cGkub3JnghIqLnB5dGhvbmhvc3Rl ZC5vcmeCDioucmVhbHNlbGYuY29tggkqLnJ0YmYuYmWCDiouc2JuYXRpb24uY29t ggsqLnNoYWtyLmNvbYIQKi5zdGF0aWMucnRiZi5iZYIQKi5zdHJlYW1hYmxlLmNv bYIMKi5zdXJmbHkuY29tgg4qLnRoZXZlcmdlLmNvbYIPKi50aHJpbGxpc3QuY29t gg0qLnZveC1jZG4uY29tggkqLnZveC5jb22CDioudm94bWVkaWEuY29tggwqLndl d29yay5jb22CCmFkd2VyeC5jb22CFmFscGhhLmVudHJlcHJlbmV1ci5jb22CCWVh dGVyLmNvbYIQZW50cmVwcmVuZXVyLmNvbYIUZmFzdGx5LnNoaWVraGRldi5jb22C BmZ0LmNvbYIVaDIuaGlwbXVua3N0YWdpbmcuY29tgghpLmdzZS5pb4ILbG9zdG15 Lm5hbWWCDXBpY21vbmtleS5jb22CGHByZXZpZXcuZW50cmVwcmVuZXVyLmNvbYIQ cHl0aG9uaG9zdGVkLm9yZ4IMcmVhbHNlbGYuY29tggdydGJmLmJlghRzdGF0aWMu d2l4c3RhdGljLmNvbYIOc3RyZWFtYWJsZS5jb22CCnN1cmZseS5jb22CDHRoZXZl cmdlLmNvbYILdm94LWNkbi5jb22CB3ZveC5jb22CFHd3dy5lbnRyZXByZW5ldXIu Y29tgg53d3cuam95ZW50LmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwHwYDVR0jBBgwFoAUqSuH4c4kRzsbv8+FNwJVnQ2UWOYwHQYDVR0OBBYEFPFj 5MXMmDDsg32K8stqp2Ux/ea/MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAVYHU whaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAF1vbyVdwAABAMARjBEAiBs 3Xazcp2n19Zh0DaN/MI9XKWjxnRGreOSK5S2lZISwAIgQY/390y3jg8BRVmSfaIT +9/dIJYDQXDm+stl+0pqNzUAdwD2XJQv0XcwIhRUGAgwlFaO400TGTO/3wwvIAvM TvFk4wAAAXW9vJVWAAAEAwBIMEYCIQDbEMB2mXnLmf1dS3CBkOOq8ys98SZcu7kI KtOUbX4/UAIhAMp65/mYzCKEiJ2d/WFh7HqjgL5e/9YMTqRq9f6XBdCWMA0GCSqG SIb3DQEBCwUAA4IBAQBAx+o2KYr5Xiz6kfnuCEqner2oEfii/bqiRkn9YLCMYhjA SlXhwAZyEd6C/yk9QqEMe9N6TcL+KLadeI0rdCttiidK0eCAQPrzeH5x+bOBcp3w DQqoK8G2Dt0Yiyjt4l62/jcUl7Gbjxt2GcS+us3Y+0Cb4PvomrnDoGpVSW52KNbq 0rdVCvitHddn40sVZ+P2yXFAPqM5PyNygq0ricglQy1h00M2PnYyPLFim6ASNz0b sqGsf8BTOXAUkIvJl5I/O9GUJC9zHTucbxgPWHu4Vk3Xf6wuyUQFpRdeeSEE99Cy 8PKOcBm4Sdog2Z0MB5qupIx6ZvdlGs/lAL8VWfYx -----END CERTIFICATE----- subject=C = US, ST = California, L = San Francisco, O = "Fastly, Inc", CN = r.ssl.fastly.net

issuer=C = BE, O = GlobalSign nv-sa, CN = GlobalSign CloudSSL CA - SHA256 - G3

No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits

SSL handshake has read 4165 bytes and written 407 bytes Verification: OK

New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES128-GCM-SHA256 Session-ID: 692EBCAEFF814230D2169C0AF37F6879E96BD042502059DEA4A54992743CD148 Session-ID-ctx: Master-Key: 00AF578FA41B37AA7394BEF976B588524807521CE885266FBF02F788A2B9369621553162DFBF6C49DF9EBC25B1D9EF24 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 7200 (seconds) TLS session ticket: 0000 - 17 05 41 18 04 8f 57 3d-0a 79 74 2c 38 0f d1 34 ..A...W=.yt,8..4 0010 - d9 d2 8d 7e db ce 35 1d-57 63 fd 34 e5 a3 26 a1 ...~..5.Wc.4..&. 0020 - 1b 38 ff f1 e2 b1 1c de-bd e7 cf ff 34 34 5e 13 .8..........44^. 0030 - 5f 24 69 56 76 6e e9 04-ff 96 b2 4d 68 98 fc 7c _$iVvn.....Mh..| 0040 - 1c 2d 0d 85 fe d0 4c 21-69 cf 8e 1a aa c7 a7 ee .-....L!i....... 0050 - 93 fb 48 f0 51 d2 bc f1-13 d9 4e 6e 0c a2 32 14 ..H.Q.....Nn..2. 0060 - 2a 85 bc 1f 88 4c 57 9c-ac 38 41 dd 1b 35 e7 ad *....LW..8A..5.. 0070 - 74 dd 15 bb 49 b6 92 ff-e9 ba 78 01 11 8c 73 29 t...I.....x...s) 0080 - 7d d5 a8 4b 48 0d e1 81-5e 59 a3 8c 8b 00 5b 61 }..KH...^Y....[a 0090 - 9c d5 54 8e 49 be 2c 4b-fd d9 bf 74 06 1d 58 15 ..T.I.,K...t..X. 00a0 - 43 4d ab 3d 80 49 bb 8d-bf 85 9b b7 93 e6 76 c5 CM.=.I........v. 00b0 - 63 34 f8 f2 f4 e7 bd 08-33 5c b8 9a e3 91 cc b4 c4......3......

Start Time: 1615926596
Timeout   : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: yes

DONE

TLS Debug / IPv6 (If available)

$ echo -n | openssl s_client -6 -connect pypi.org:443

140620900681024:error:02002065:system library:connect:Network is unreachable:../crypto/bio/b_sock2.c:110: 140620900681024:error:2008A067:BIO routines:BIO_connect:connect error:../crypto/bio/b_sock2.c:111: 140620900681024:error:02002065:system library:connect:Network is unreachable:../crypto/bio/b_sock2.c:110: 140620900681024:error:2008A067:BIO routines:BIO_connect:connect error:../crypto/bio/b_sock2.c:111: 140620900681024:error:02002065:system library:connect:Network is unreachable:../crypto/bio/b_sock2.c:110: 140620900681024:error:2008A067:BIO routines:BIO_connect:connect error:../crypto/bio/b_sock2.c:111: 140620900681024:error:02002065:system library:connect:Network is unreachable:../crypto/bio/b_sock2.c:110: 140620900681024:error:2008A067:BIO routines:BIO_connect:connect error:../crypto/bio/b_sock2.c:111: connect:errno=101

$ echo -n | openssl s_client -6 -connect files.pythonhosted.org:443

140413217543488:error:02002065:system library:connect:Network is unreachable:../crypto/bio/b_sock2.c:110: 140413217543488:error:2008A067:BIO routines:BIO_connect:connect error:../crypto/bio/b_sock2.c:111: 140413217543488:error:02002065:system library:connect:Network is unreachable:../crypto/bio/b_sock2.c:110: 140413217543488:error:2008A067:BIO routines:BIO_connect:connect error:../crypto/bio/b_sock2.c:111: 140413217543488:error:02002065:system library:connect:Network is unreachable:../crypto/bio/b_sock2.c:110: 140413217543488:error:2008A067:BIO routines:BIO_connect:connect error:../crypto/bio/b_sock2.c:111: 140413217543488:error:02002065:system library:connect:Network is unreachable:../crypto/bio/b_sock2.c:110: 140413217543488:error:2008A067:BIO routines:BIO_connect:connect error:../crypto/bio/b_sock2.c:111: connect:errno=101

Code of Conduct

cooperlees commented 3 years ago

FWIW I tried a handful of your curl and s_client and they all work for me as expected. You positive your IPv6 is functioning well. If so, it must be a provider to Fastly Issue maybe?

royassis commented 3 years ago

Hey cooperlees

I do not know if my ipv6 is functioning well, probably not. The commands above failed when I used ipv6, ipv4 seems to work fine. Is there any way to fix this ? is it a router settings issue ? provider issue ?

p.s when changing networks, i.e using my phone's hotspot issue is resolved.

Thanks Roy

ewdurbin commented 1 year ago

closing as stale.