Package Control: There are no packages available for installation

[samzhao]

Hi, I just installed a new Windows 7 Ultimate SP1 64 bit, and I'm trying to install packages on Sublime Text 2. I get the following error when I tried to install packages (package control is installed without any errors):

Package Control: There are no packages available for installation

And this in the console:

Package Control: Error downloading channel. URL error _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed downloading https://sublime.wbond.net/repositories.json. error: Package Control: There are no packages available for installation.

Is it a problem with the server, or is there something wrong with my installation?

Thanks

[wbond]

It is a problem with a proxy on your network most likely.

[samzhao]

But I don't use proxy

[wbond]

Then I think something on your network or computer is messing with the connection. I just testing Windows 7 Pro SP1 64bit and had no problems, and everything worked fine.

[samzhao]

I was using it on another Win 7 64 bit OS on the exact machine without any problem. I just think if there's something that's messed up when I was installing it, is there a way to completely uninstall package-control so that I can do a clean install? It's kinda painful without package-control now :p

[wbond]

If you go to Preferences > Browse Packages… and delete the "Package Control" folder, that will remove it. There are also the preferences for Package Control, which are stored in Packages\User.

[samzhao]

argh.... Now I can't seem to able to correctly install it. I do the normal installation where I copy that snippet and copy it into sublime, then restart when it says so. Package control doesn't appear in the Preferences any more and it's also not in the box thing where I go ctrl+shift+p. However, there is a folder package control if I browse the packages

EDIT: the Package Control folder in packages is actually empty, and this appears in the console:

package /C/Users/Sam/AppData/Roaming/Sublime Text 2/Installed Packages/Package Control.sublime-package is newer than the installed version (/C/Users/Sam/AppData/Roaming/Sublime Text 2/Pristine Packages/Package Control.sublime-package), running PackageSetup

[wbond]

Check Preferences > Settings - User and make sure Package Control is not in the list of ignored packages.

[samzhao]

I actually got it re-installed successfully, had to delete a few files from some other folders. Now the error is this in the console:

Package Control: Error submitting usage information. URL error _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed downloading https://sublime.wbond.net/submit?package_control_version=1.5.0&sublime_platform=windows&package=Package+Control&sublime_version=2217&version=1.5.0&operation=install.
Package Control: Error downloading channel. URL error _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed downloading https://sublime.wbond.net/repositories.json.
Package Control: Skipping automatic upgrade, last run at 2012-08-16 16:40:50, next run at 2012-08-16 17:40:50 or after
error: Package Control: There are no packages available for installation.

[ghost]

I found a solution to your original problem, which I too was getting:

Select Package Control: Add Repository, and paste in: http://sublime.wbond.net/repositories.json.

Using plain http will not require a certificate, which seems to be the cause of the problem.

[wbond]

@novalex This also causes you to be vulnerable to MITM attacks where users can run arbitrary python code on your machine via the automatic upgrade mechanism.

[samzhao]

So is turning off SSL verification a better option?

[wbond]

No, because verification is what prevents man-in-the-middle attacks from working.

Really, we need to figure out why a small number of machines don't verify the SSL cert, when the vast majority do.

[samzhao]

github is to blame?

[ghost]

For the record, I have 4 certificates in the certs folder, one of which is the one in the settings file.

I also disabled my antivirus' web protection and filtering, to no avail.

[wbond]

Can you both try installing the testing version (instructions at https://github.com/wbond/sublime_package_control/issues/130#issuecomment-6804195) and see if that helps? I am wondering if it is having trouble loading the ca-bundle file.

[samzhao]

too bad.. same thing.

Package Control: Error submitting usage information. URL error _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed downloading https://sublime.wbond.net/submit?package_control_version=1.5.0.12&sublime_platform=windows&package=Package+Control&sublime_version=2217&version=1.5.0.12&operation=install.
Package Control: Error downloading channel. URL error _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed downloading https://sublime.wbond.net/repositories.json.
Package Control: Error downloading channel. URL error _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed downloading https://sublime.wbond.net/repositories.json.
Package Control: No updated packages
Package Control: Error downloading channel. URL error _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed downloading https://sublime.wbond.net/repositories.json.
error: Package Control: There are no packages available for installation.

[ghost]

Same as @samzhao, except I don't get the first error about submitting usage information. Other than that, same exact errors.

[wbond]

Ok, let's try a different angle.

What files are present in Packages\Package Control\certs\? Can you paste the contents of the ca-bundle.crt file? (Use the three backticks for a fenced code block here in GitHub Flavored Markdown)

[samzhao]

five files with no extension and their file names are random strings + one ca-bundle.crt file

[wbond]

Could you list the actual filenames? I'd like to verify that I have the same environment. Can you also paste the contents of that ca-bundle.crt file?

[samzhao]

Is there a better way for me to send it to you? The ca-bundle.crt file is 1000 lines long.

[wbond]

Sure, you can email it to support@wbond.net.

[emilime]

I have the same error on Windows 7 Pro 64bit. Have you find a solution?

[samzhao]

@emilime, I realize this might have nothing to do with Package Control. It's either that Win7 64bit has some issues with SSL, or it's github. This is extremely annoying because Package Control is like the real meat of Sublime Text. Without it, writing code is such a hassle.

EDIT: and no, the problem still remain unsolved. I can't clone repos from command line or anything related to that because it will just fail the authentication. Also, I have a Ubuntu and Mac Mountain Lion installed in in VMWare and Virtualbox, and I can't do clone repos on those either. So it might be an indication that my network is corrupted. Albeit that, it can also be Win7's fault because it's the host and all those virtual machines are on NAT. Really hope someone can help us figure it out.

[ghost]

@samzhao I agree, this is most likely because of the 64bit version of Win. I installed Package Control on a 32bit Win7 laptop, and it went without a hitch.

[samzhao]

@novalex, for me, it happened only to an installation of Win7 64bit SP1. Another partition on the same computer had Win7 64bit without SP1, and package control worked in that.

[ghost]

@samzhao I think we found the culprit. After all, Package Control had no problems before I formatted and installed the latest version of Win7. I had 64bit before that as well.

@wbond Any idea what security changes are made by SP1 that would cause these problems with SSL and certificates?

[darcyclarke]

Have the same issue, Mac OSX 10.7.4, looking for fixes now.

[samzhao]

Guys, try this if you haven't

http://stackoverflow.com/questions/3777075/https-github-access/4454754#4454754

I tried it, but it didn't work for me. However, I still encourage you guys to try it, since the solution has worked for other people. I guess I'm just out of luck...

[cranic]

Same issue for me, Windos 7 64bits.

[mvmeirose]

@samzhao You just to running certificate, go in C:\Users\User\AppData\Roaming\Sublime Text 2\Packages\Package Control\certs and run ca-bundle.crt > InstallCertificate and just it... It's here working! Wich help you

[samzhao]

@mvmeirose, it's great to hear that you found a working solution, but for me it's still not doing the job. I don't think it's a Sublime specific thing now, as all my virtual machines can't git clone (or curl) content through https. So, there might be something wrong with Windows 7, specifically 64 bit with SP1 that's causing the problem. Anyway, thanks for offering me a solution that sounds promising, although it doesn't work for me.

[cranic]

@samzhao is right, not working here with the same sys configs...

[sleblang]

Tried @mvmeirose suggestion and still getting the error:

Package Control: Error downloading channel. URL error _ssl.c:480: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol downloading https://sublime.wbond.net/repositories.json. error: Package Control: There are no packages available for installation.

I am on Win 7 x64

[cranic]

I'm with @samzhao, I can't even git clone, what could be happening?

[samzhao]

It's not even git, hg doesn't work either. Even crazier, when I use Chromium to visit github or bitbucket, the browser warns me not to continue because of SSL issue, and if I proceed anyway, no styles can be loaded. On Sep 21, 2012 9:25 PM, "cranic" notifications@github.com wrote:

I'm with @samzhao https://github.com/samzhao, I can't even git clone, what could be happening?

— Reply to this email directly or view it on GitHubhttps://github.com/wbond/sublime_package_control/issues/179#issuecomment-8785449.

[samzhao]

Update

My newly installed Ubuntu 12.04.1 LTS virtual machine on Bridge Network works under Windows 7 Host! So my conclusion is:

The problem is caused (and only caused) by Windows 7 64bit SP1

Problem can be inherited by putting the Ubuntu virtual machine on NAT network.

Thank you everyone :D

[Dam-Skippy]

Had this issue to on a Windows Vista OS , and it was to do with my AVG internet security. For some reason it had blocked Sublime. When I allowed Sublime to connect to the Net. Worked no problems :-)

[samzhao]

@Dam-Skippy, did AVG affect git cloning repos via https, too?

[ghost]

It seems @Dam-Skippy came with the solution. Add Sublime to your anti-virus' excluded list, and it should work. I can confirm that it worked for me, using Eset Smart Security.

@wbond Do you think excluding Sublime from protocol filtering will make it susceptible to any kind of "bad things"?

[wbond]

I do know that my Windows 7 x64 Professional SP1 machine has no trouble fetching updates, so I don't think it is strictly that configuration that is the problem. I run without antivirus.

It would be interesting to see reports from users about what antivirus/security solutions they are using, and if whitelisting Sublime Text helps.

Since we are running python code downloaded from repositories on the internet, there is always the risk that a package maintainer will write some code that will try to delete many/most of the files on your hard drive. It is doubtful that an antivirus package would stop such malicious activity, so I'm not sure how much protection it would really give you.

The currently infrastructure of Package Control uses HTTPS and verifies SSL certificates to help and prevent man-in-the-middle attacks. That said, the simplest way to attack users would be to hack the account of a popular package and commit code to do Something Bad™.

[samzhao]

@wbond, I'm using ESET Smart Security 5, and whitelisting Sublime doesn't seem to help at all. And based on my experience, it's not the problem with Sublime because even if I'm not using Sublime, just git or hg or anything for that matter that involves SSL, it failed miserably.

[Dam-Skippy]

@samzhao I've done a bit of digging around and it appears that your security software ESET Smart Security 5 has an SSL protocol scan built into it.

If ESET cannot validate the SSL certificate it blocks the connection, or provides crippled pages.

Ubuntu comes with Firefox as the default browser.

ESET are currently aware of an issue with Firefox, and have an open ticket for a patch/fix.

Information taken from their site is as follows:

"ESET is aware of this issue and is working on a product update that will allow Mozilla Firefox to access websites that use SSL certificates with SSL scanning enabled. As a temporary solution, disable SSL protocol scanning to continue using Mozilla Firefox without interruption.

Disable SSL protocol scanning:

Open the main program window by double-clicking the ESET icon in your Windows notification area or by clicking Start All Programs ESET ESET Smart Security or ESET NOD32 Antivirus.

Press F5 to enter Advanced setup.

Expand Web and email Protocol filtering and then click SSL.

Select Do not scan SSL protocol and click OK. Mozilla Firefox will now be able to access web pages that use SSL certificates without interference."

Details I've provided can be verified at the following link:

http://www.eset.co.uk/Support/Knowledge-Base

by typing into the 'Knowledgebase Search' field, https websites, and selecting the first result.

Can you also try Chromium with the scan disabled?

If the pages are being displayed correctly, you may need to contact ESET directly, to advise of problems with this browser as well.

[samzhao]

@Dam-Skippy, wow! You are absolutely right! For the first time, I finally see package control working on this OS!

I'm not using Firefox very frequently on my Windows 7; my default browser is Chrome. As for my Ubuntu, it's actually a virtual machine installed onto my Windows 7, and since there's no anti-virus installed on my Ubuntu and I'm using bridged connection instead of NAT, there's no problem with SSL on Ubuntu. Sorry for my past posting claiming that Ubuntu virtual machine didn't work. It's actually because I set it on NAT connection.

I hope ESET people don't just address the problem with Firefox, or any particular browsers; this problem is system wide, so doing things like git through SSL in the terminal is affected as well.

Now I have to leave SSL scan off because if I turn it back on, github will display with no styling.

Thanks a lot, @Dam-Skippy!

P.S. The weird thing is that this is not the first time I install ESET 5. I used to have the same version installed on Windows 7 32bit and WIndows 7 64bit without SP1. Not sure why it's causing the problem now. Anyway, it's good to finally discover the root of the problem.

[Dam-Skippy]

@samzhao Cool as, glad all is well :-)

However, it is important to remember, that disabling SSL Scanning will remove a layer of security provided by the ESET Smart Security product, and while their website is advising you to do this. Its probably not best idea to rely on this as a permanent fix for the issues encoutered.

Anti-Virus software is updating all the time, and may have updated the SSL scan to be active if it wasn't set at install, or re-configured the scan with new parameters, this may be why this problem hasn't surfaced before.

It may be worth contacting ESET directly to advise of the problems you have experienced, as they may not be aware of further underlying issues, for their next update/fix.

[samzhao]

@Dam-Skippy, I totally agree with you. I'll just have to wait for their updates or whatever, so my computer can "appear" to be protected again.

[YeFFreY]

Sorry I didn't read the whole discussion, but adding a rule in the windows 7 firewall for sublime text solved the problem for me.

[sleblang]

I am in a corporate environment and haven't had any luck getting it to work. I disabled the anti-virus on my machine and still didn't work. I ran Charles to see if any requests were being sent out and it looks like it's being blocked before it even gets to that point as I didn't see any requests in Charles. Suggestions?

[cranic]

I disabled ESET and everything went fine.

[robrecord]

And for those of us having this issue in Mac OS X....?