SSL Error on Arch #2278

jsaalfeld · 2018-02-10T10:21:42Z

Background

I seem to be having the same problem as this issue here :
#2253

I tried following directions from there and ran cert-sync /etc/ssl/certs/ca-certificates.crt

CKAN Version: Installed CKAN from the AUR Repository, its version 1.22.6+e8e10ae2e98e

KSP Version: 1.3.1.1891

Operating System: Arch Linux with 4.15.1-2-ARCH kernel

MONO Version:

Mono JIT compiler version 5.4.1 (makepkg/e66d9abbb27 Thu Nov  9 22:28:33 CET 2017)
Copyright (C) 2002-2014 Novell, Inc, Xamarin Inc and Contributors. www.mono-project.com
	TLS:           __thread
	SIGSEGV:       normal
	Notifications: epoll
	Architecture:  amd64
	Disabled:      none
	Misc:          softdebug 
	LLVM:          supported, not enabled.
	GC:            sgen (concurrent by default)

Wine Version:

% wine --version
wine-3.1

Have you made any manual changes to your GameData folder (i.e., not via CKAN)? Nope

Problem

What steps did you take in CKAN? First I ran the mozroots --import --ask-remove command as user and root to get my certificate storage straight. With no success. After that I read about the new cert-sync process for mono, and ran that as sudo and user, but with no sucess either. On their imports however, they added a whole bunch of new certs to my system storages.

What did you expect to happen? Start without any issue and run CKAN correctly

What happened instead? Here is a full trace of a normal start.

% ckan
0031:fixme:gdiplus:GdipGetLineSpacing ignoring style
protocol "ip" not found; You might want to add this to /etc/protocols
4182 [1] ERROR CKAN.AutoUpdate (null) - WebException while accessing https://api.github.com/repos/KSP-CKAN/CKAN/releases/latest: System.Net.WebException: Error: TrustFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: Invalid certificate received from server. Error code: 0xffffffff800b010a
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00037] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x00032] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x0004b] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0007b] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebConnection.CreateStream (System.Net.HttpWebRequest request) [0x00073] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadDataInternal (System.Uri address, System.Net.WebRequest& request) [0x00072] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00020] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadString (System.Uri)
  at CKAN.AutoUpdate.MakeRequest (System.Uri url) [0x0001b] in <07e785b6df9648b6b0c7cbfd202f3386>:0 
4242 [1] ERROR CKAN.ErrorDialog (null) - Error in autoupdate: 
	Error: TrustFailure (The authentication or decryption has failed.)
5734 [1] ERROR CKAN.Main (null) - Error in autoupdate
System.Net.WebException: Error: TrustFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: Invalid certificate received from server. Error code: 0xffffffff800b010a
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00037] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x00032] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x0004b] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0007b] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebConnection.CreateStream (System.Net.HttpWebRequest request) [0x00073] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadDataInternal (System.Uri address, System.Net.WebRequest& request) [0x00072] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00020] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadString (System.Uri)
  at CKAN.AutoUpdate.MakeRequest (System.Uri url) [0x0003d] in <07e785b6df9648b6b0c7cbfd202f3386>:0 
  at CKAN.AutoUpdate.FetchLatestReleaseInfo () [0x00000] in <07e785b6df9648b6b0c7cbfd202f3386>:0 
  at CKAN.Main.OnLoad (System.EventArgs e) [0x00094] in <07e785b6df9648b6b0c7cbfd202f3386>:0 
5886 [1] WARN CKAN.Curl (null) - Curl environment not pre-initialised, performing non-threadsafe init.
5973 [1] WARN CKAN.GameVersionProviders.KspBuildMap (null) - Could not retrieve latest build map from: https://raw.githubusercontent.com/KSP-CKAN/CKAN-meta/master/builds.json
7746 [Threadpool worker] WARN CKAN.Curl (null) - Curl environment not pre-initialised, performing non-threadsafe init.
7746 [Threadpool worker] WARN CKAN.GameVersionProviders.KspBuildMap (null) - Could not retrieve latest build map from: https://raw.githubusercontent.com/KSP-CKAN/CKAN-meta/master/builds.json
8173 [1] ERROR CKAN.ErrorDialog (null) - 
Oh no! Our download failed with a certificate error!

If you're on Linux, try running:
	mozroots --import --ask-remove
on the command-line to update your certificate store, and try again.


^C0044:fixme:console:CONSOLE_DefaultHandler Terminating process 30 on event 0
0044:err:mscoree:expect_no_runtimes Process exited with a Mono runtime loaded.

Side-Note Change the Error from telling the user to run mozroots --import --ask-remove to run the cert-sync process with the location to be determined to their specific system.

The text was updated successfully, but these errors were encountered:

HebaruSan · 2018-02-11T00:10:54Z

Rather than embedding the newer command in the error message, I'm thinking we might want to write up a generic wiki covering this topic for all distros, and then link that instead. That way if the command changes again, we could update the wiki instead of the code (and it would consolidate the currently disparate and redundant distro-specific wiki pages on the topic). And of course "If you're on Linux" shouldn't be necessary because CKAN believes it knows your OS in other places.

As for why it doesn't work on your system, that might require a Mono expert or an Arch expert to determine. But if it was my system, I would wonder whether there were any other files under /etc/ssl/certs/*? Maybe Arch tracks multiple files worth of certs and just one of them isn't enough to trust CKAN's typical download hosts. If you are able to figure this out, please let us know so we can ensure the wiki is updated.

HebaruSan · 2018-02-11T04:05:28Z

OK, all the various wiki sections about this are now merged here, along with an explanation of why the errors happen:

https://github.com/KSP-CKAN/CKAN/wiki/SSL-certificate-errors

Created #2279 to replace the reference to mozroots with a link to this page.

jsaalfeld · 2018-02-11T09:52:11Z

I looked into the issue and stumbled upon this Wiki Entry, which linked to the ca-certificates package and stated, that this package manage the root ca-storage. I took a look at the source files and took a look at update-ca-trust, more specifically

DEST=/etc/ca-certificates/extracted
...
for f in $DEST/cadir/*; do
  ln -fsr -t /etc/ssl/certs "$f"
done

Therefore the certs should all be in /etc/ssl/certs, or at least to be linked in that folder. This should then be the single point of truth for certificates.

jsaalfeld · 2018-02-19T07:13:55Z

This Issue is not resolved.

HebaruSan · 2018-02-19T23:17:44Z

Do you by any chance have a proxy server?

jsaalfeld · 2018-02-20T07:21:44Z

No proxy Server at all.

jsaalfeld · 2018-03-19T14:49:28Z

Just tried it again with the ckan v1.25.0-PRE1

The error still exists.
Wine is also a bit newer: wine-3.4

But the mono version is still the same.

Here the full log:

% ckan
0009:fixme:gdiplus:GdipGetLineSpacing ignoring style
protocol "ip" not found; You might want to add this to /etc/protocols
4298 [1] ERROR CKAN.AutoUpdate (null) - WebException while accessing https://api.github.com/repos/KSP-CKAN/CKAN/releases/latest: System.Net.WebException: Error: SecureChannelFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: The authentication or decryption has failed.
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00037] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x00032] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x0004b] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0007b] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebConnection.CreateStream (System.Net.HttpWebRequest request) [0x00073] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadDataInternal (System.Uri address, System.Net.WebRequest& request) [0x00072] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00020] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadString (System.Uri)
  at CKAN.AutoUpdate.MakeRequest (System.Uri url) [0x0001e] in <4dba8018338b4ae7a71a4551630d0568>:0 
4375 [1] ERROR CKAN.ErrorDialog (null) - Error in auto-update:
	Error: SecureChannelFailure (The authentication or decryption has failed.)
6148 [1] ERROR CKAN.Main (null) - Error in auto-update
System.Net.WebException: Error: SecureChannelFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: The authentication or decryption has failed.
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00037] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x00032] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <8379a859d93c4edda34ffa1ea26c9626>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x0004b] in <8379a859d93c4edda34ffa1ea26c9626>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0007b] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebConnection.CreateStream (System.Net.HttpWebRequest request) [0x00073] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadDataInternal (System.Uri address, System.Net.WebRequest& request) [0x00072] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00020] in <d6e1ee6718364b74ad99576b8fa4c75c>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadString (System.Uri)
  at CKAN.AutoUpdate.MakeRequest (System.Uri url) [0x00043] in <4dba8018338b4ae7a71a4551630d0568>:0 
  at CKAN.AutoUpdate.FetchLatestReleaseInfo () [0x00001] in <4dba8018338b4ae7a71a4551630d0568>:0 
  at CKAN.Main.OnLoad (System.EventArgs e) [0x00101] in <4dba8018338b4ae7a71a4551630d0568>:0 
6398 [1] WARN CKAN.Curl (null) - Curl environment not pre-initialised, performing non-threadsafe init.
6487 [1] WARN CKAN.GameVersionProviders.KspBuildMap (null) - Could not retrieve latest build map from: https://raw.githubusercontent.com/KSP-CKAN/CKAN-meta/master/builds.json
8413 [Threadpool worker] WARN CKAN.Curl (null) - Curl environment not pre-initialised, performing non-threadsafe init.
8414 [Threadpool worker] WARN CKAN.GameVersionProviders.KspBuildMap (null) - Could not retrieve latest build map from: https://raw.githubusercontent.com/KSP-CKAN/CKAN-meta/master/builds.json
8882 [1] ERROR CKAN.ErrorDialog (null) - Oh no! Our download failed with a certificate error

I can curl the https://raw.githubusercontent.com/KSP-CKAN/CKAN-meta/master/builds.json URL just fine, so the certificate has to be in the correct place. Of course i reran the cert-sync with no success that far.

To make sure, that this is not some kind of an issue with the wrong source of the trust-storage for the CA Certificates. I cleared the trust-storage in mono and only imported the certificate with cert-sync, so that just this one is in the trust-storage. The error remains the same.

HebaruSan · 2018-03-19T15:16:17Z

Yeah, I wouldn't expect any recent changes to affect this. As far as I know, we haven't done anything with certificates since #2297.

jsaalfeld · 2018-03-19T15:32:18Z

There was hope, some time to spare and the additional try to fix it, by just importing the responsible CA-Certificate into the mono trust-storage. Unfortunately, without a fix.

And there still is hope, that the updated information may help someone to fix this issue.

Ruedii · 2018-04-12T09:12:59Z

I'm experiencing this issue on Ubuntu as well.

It seems to affect many Linux platforms.

The easiest solution is to just require Windows users to install .Net 4.6 or later like they should.

Honestly we shouldn't be relying on the TLS 1.2 code in .Net 4.5 that Microsoft found of questionable reliability.

diego-treitos · 2018-04-15T18:46:17Z

I am having this problem also on Ubuntu 17.10

2610 [1] ERROR CKAN.AutoUpdate (null) - WebException while accessing https://api.github.com/repos/KSP-CKAN/CKAN/releases/latest: System.Net.WebException: Error: SecureChannelFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: The authentication or decryption has failed.
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00040] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x0003b] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x00057] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x00011] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x00044] in <bd46d4d4f7964dfa9beea098499ab597>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadDataInternal (System.Uri address, System.Net.WebRequest& request) [0x0008a] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00027] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadString (System.Uri)
  at CKAN.AutoUpdate.MakeRequest (System.Uri url) [0x0001b] in <abbe73cfa9954b939d15955cf3cc42de>:0 
2620 [1] ERROR CKAN.ErrorDialog (null) - Error in auto-update:
	Error: SecureChannelFailure (The authentication or decryption has failed.)
4400 [1] ERROR CKAN.Main (null) - Error in auto-update
System.Net.WebException: Error: SecureChannelFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: The authentication or decryption has failed.
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00040] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x0003b] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x00057] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x00011] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x00044] in <bd46d4d4f7964dfa9beea098499ab597>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadDataInternal (System.Uri address, System.Net.WebRequest& request) [0x0008a] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at System.Net.WebClient.DownloadString (System.Uri address) [0x00027] in <bd46d4d4f7964dfa9beea098499ab597>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadString (System.Uri)
  at CKAN.AutoUpdate.MakeRequest (System.Uri url) [0x0001b] in <abbe73cfa9954b939d15955cf3cc42de>:0

novembrea · 2018-07-31T09:03:24Z

Same issue on 18.10.

jsaalfeld · 2018-10-06T09:15:08Z

I just retried it...

It just seem to work... I can download the List and install the mods I want to. It's strange, but I'm happy!

% wine --version
wine-3.17 (Staging)

% mono --version
Mono JIT compiler version 5.14.0 (makepkg/f3a2216b65a Fri Aug 17 18:51:18 CEST 2018)
Copyright (C) 2002-2014 Novell, Inc, Xamarin Inc and Contributors. www.mono-project.com
	TLS:           __thread
	SIGSEGV:       altstack
	Notifications: epoll
	Architecture:  amd64
	Disabled:      none
	Misc:          softdebug 
	Interpreter:   yes
	LLVM:          supported, not enabled.
	GC:            sgen (concurrent by default)

HebaruSan added Support Linux Network labels Feb 10, 2018

HebaruSan mentioned this issue Feb 11, 2018

Point to wiki page about certs on cert errors #2279

Merged

netkan-bot closed this as completed Feb 19, 2018

HebaruSan reopened this Feb 19, 2018

KSP-CKAN deleted a comment from netkan-bot Feb 19, 2018

hetzlefetz mentioned this issue Feb 27, 2018

CKAN Fails to open if AutoUpdates are enabled #2331

Closed

HebaruSan removed the Support label Feb 27, 2018

HebaruSan mentioned this issue Apr 10, 2018

Weird SSL(?) error #2400

Closed

jsaalfeld closed this as completed Oct 6, 2018

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

SSL Error on Arch #2278

SSL Error on Arch #2278

jsaalfeld commented Feb 10, 2018

HebaruSan commented Feb 11, 2018

HebaruSan commented Feb 11, 2018

jsaalfeld commented Feb 11, 2018

jsaalfeld commented Feb 19, 2018

HebaruSan commented Feb 19, 2018

jsaalfeld commented Feb 20, 2018

jsaalfeld commented Mar 19, 2018

HebaruSan commented Mar 19, 2018

jsaalfeld commented Mar 19, 2018

Ruedii commented Apr 12, 2018

diego-treitos commented Apr 15, 2018 •

edited

Loading

novembrea commented Jul 31, 2018

jsaalfeld commented Oct 6, 2018

SSL Error on Arch #2278

SSL Error on Arch #2278

Comments

jsaalfeld commented Feb 10, 2018

Background

Problem

HebaruSan commented Feb 11, 2018

HebaruSan commented Feb 11, 2018

jsaalfeld commented Feb 11, 2018

jsaalfeld commented Feb 19, 2018

HebaruSan commented Feb 19, 2018

jsaalfeld commented Feb 20, 2018

jsaalfeld commented Mar 19, 2018

HebaruSan commented Mar 19, 2018

jsaalfeld commented Mar 19, 2018

Ruedii commented Apr 12, 2018

diego-treitos commented Apr 15, 2018 • edited Loading

novembrea commented Jul 31, 2018

jsaalfeld commented Oct 6, 2018

diego-treitos commented Apr 15, 2018 •

edited

Loading