Menu

#26644 SSL version changed?

closed
nobody
None
PINN
2025-04-02
2025-03-31
procountsf
No

My PINN program uses Linux wget to retrieve files from the sourceforge server.
Recently (past week?) it has been failing to download some files.
To identify the problem, I tried running the same command in the bash terminal of Ubuntu 20.04. The following is a transcript of that transaction.

wget http://sourceforge.net/projects/pinn/files/os/void1/os.json
URL transformed to HTTPS due to an HSTS policy
--2025-03-31 17:14:42--  https://sourceforge.net/projects/pinn/files/os/void1/os.json
Resolving sourceforge.net (sourceforge.net)... 104.18.12.149, 104.18.13.149, 2606:4700::6812:d95, ...
Connecting to sourceforge.net (sourceforge.net)|104.18.12.149|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://sourceforge.net/projects/pinn/files/os/void1/os.json/ [following]
--2025-03-31 17:14:43--  https://sourceforge.net/projects/pinn/files/os/void1/os.json/
Reusing existing connection to sourceforge.net:443.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://sourceforge.net/projects/pinn/files/os/void1/os.json/download [following]
--2025-03-31 17:14:43--  https://sourceforge.net/projects/pinn/files/os/void1/os.json/download
Reusing existing connection to sourceforge.net:443.
HTTP request sent, awaiting response... 302 Found
Location: https://downloads.sourceforge.net/project/pinn/os/void1/os.json?ts=gAAAAABn6r9zerh-aWtMcbGNKwPOTELGpjOZJnWDckEt_peAT80enUBGo87OYQLSR2slB-GZouGSKpA0ppCkDLEDDbbAeI1CeQ%3D%3D&use_mirror=master&r= [following]
--2025-03-31 17:14:43--  https://downloads.sourceforge.net/project/pinn/os/void1/os.json?ts=gAAAAABn6r9zerh-aWtMcbGNKwPOTELGpjOZJnWDckEt_peAT80enUBGo87OYQLSR2slB-GZouGSKpA0ppCkDLEDDbbAeI1CeQ%3D%3D&use_mirror=master&r=
Resolving downloads.sourceforge.net (downloads.sourceforge.net)... 104.18.12.149, 104.18.13.149, 2606:4700::6812:c95, ...
Connecting to downloads.sourceforge.net (downloads.sourceforge.net)|104.18.12.149|:443... connected.
OpenSSL: error:1408F10B:SSL routines:ssl3_get_record:wrong version number
Unable to establish SSL connection.

(Note that I purposefully use a http request and rely on it being converted to https by the sourceforge site, although the same problem occurs if I use https directly).

So there seems to be some problem with the ssl connection.
Has something changed on the sourceforge site? Have you deprecated an older SSL version?
What are now the prerequisites to establish a secure connection?
As far as I can tell, my openssl package in buildroot has the sslv2 and sslv3 options already enabled.

Discussion

  • procountsf

    procountsf - 2025-03-31

    A user suggested it could be due to the change in the clocks to BST...?

     
  • SourceForge Support

    Hello,

    Thank you for reaching out.

    Yes, we’ve made some changes, including deprecating certain ciphers.
    You can refer to SSL Labs for the list of allowed ciphers.

    Here’s the link: https://www.ssllabs.com/ssltest/analyze.html?d=sourceforge.net&s=104.18.13.149

    Sincerely,
    SourceForge Support

     
  • procountsf

    procountsf - 2025-03-31

    "Google" seems to suggest the server is responding with http protocol on port 443. (?)

     
  • SourceForge Support

    Hello,

    Thank you for your feedback,

    We haven't encountered that issue on our end, and everything seems to be working well across various systems.

    Can you elaborate on that?

    Sincerely,
    SourceForge Support

     
  • procountsf

    procountsf - 2025-04-01

    Can you elaboate on that?

    If you are referring to my Google comment, it was posted before I saw your previous reply, so it was just a result of my googling trying to find an answer.

    However, since my original post, I have discovered that PINN can no longer download ANY files from sourceforge. It is now completely broken and I don't know how to fix it.

    I have tried wget from several Linux systems (Ubuntu 20.04 x86. Ubuntu 24.04 arm64, Raspbian OS (Debian) Bullseye and none of them are able to make a secure connection anymore using wget or curl. Browsers seem to work fine, but they are no good for my application.

    PINN is built using buildroot 2014.02, so it is quite old. It uses libssl instead of openssl, so I guess I will have to update it to openssl to get the latest ciphers. However, the other OSes are no more than a couple of years old and still don't work. typing openssl enc -list doesn't seem to list anything remotely like on the webpage I was previously pointed at.

    If you have any advice on how I can fix my program, or how I can download any files using wget from any Linux OS, I would gladly receive it. At the moment all of my users are completely stuck!

     
  • SourceForge Support

    Hello,

    Could you please provide the output of curl --version and wget --version?

    Please also include openssl enc -list and the --version output for it too.

    Sincerely,
    SourceForge Support

     
  • procountsf

    procountsf - 2025-04-01

    PINN

    (no openssl, no curl, just wget using libSSL. Built with buildroot 2014.02).

    Wget

    wget --version
    GNU Wget 1.16.1 built on linux-uclibcgnueabi.

    +digest +https -ipv6 -iri +large-file -nls +ntlm +opie -psl +ssl/openssl

    Wgetrc:
    /etc/wgetrc (system)
    Compile:
    /home/kevin/pi5/buildroot/output/host/usr/bin/ccache
    /home/kevin/pi5/buildroot/output/host/usr/bin/arm-buildroot-linux-uclibcgnue abi-gcc
    -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc"
    -DLOCALEDIR="/usr/share/locale" -I. -I../lib -I../lib
    -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64
    -I/home/kevin/pi5/buildroot/output/host/usr/arm-buildroot-linux-uclibcgnueab i/sysroot/usr/include/uuid
    -I/home/kevin/pi5/buildroot/output/host/usr/arm-buildroot-linux-uclibcgnueab i/sysroot/usr/include
    -DHAVE_LIBSSL
    -I/home/kevin/pi5/buildroot/output/host/usr/arm-buildroot-linux-uclibcgnueab i/sysroot/usr/include
    -DNDEBUG -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE
    -D_FILE_OFFSET_BITS=64 -Os
    Link:
    /home/kevin/pi5/buildroot/output/host/usr/bin/ccache
    /home/kevin/pi5/buildroot/output/host/usr/bin/arm-buildroot-linux-uclibcgnue abi-gcc
    -I/home/kevin/pi5/buildroot/output/host/usr/arm-buildroot-linux-uclibcgnueab i/sysroot/usr/include/uuid
    -I/home/kevin/pi5/buildroot/output/host/usr/arm-buildroot-linux-uclibcgnueab i/sysroot/usr/include
    -DHAVE_LIBSSL
    -I/home/kevin/pi5/buildroot/output/host/usr/arm-buildroot-linux-uclibcgnueab i/sysroot/usr/include
    -DNDEBUG -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE
    -D_FILE_OFFSET_BITS=64 -Os -liconv
    -L/home/kevin/pi5/buildroot/output/host/usr/arm-buildroot-linux-uclibcgnueab i/sysroot/usr/lib
    -luuid -lssl
    -L/home/kevin/pi5/buildroot/output/host/usr/arm-buildroot-linux-uclibcgnueab i/sysroot/usr//lib
    -lcrypto
    -L/home/kevin/pi5/buildroot/output/host/usr/arm-buildroot-linux-uclibcgnueab i/sysroot/usr/lib
    -lz ftp-opie.o openssl.o http-ntlm.o ../lib/libgnu.a

    Copyright (C) 2014 Free Software Foundation, Inc.
    License GPLv3+: GNU GPL version 3 or later
    http://www.gnu.org/licenses/gpl.html.
    This is free software: you are free to change and redistribute it.
    There is NO WARRANTY, to the extent permitted by law.

    Originally written by Hrvoje Niksic hniksic@xemacs.org.
    Please send bug reports and questions to bug-wget@gnu.org.
    root@recovery:~#

     
  • procountsf

    procountsf - 2025-04-01

    Raspbian64_OS_lite (bullseye)

    Linux raspberrypi 6.1.21-v8+ #1642 SMP PREEMPT Mon Apr 3 17:24:16 BST 2023 aarch64 GNU/Linux

    Wget

    wget --version
    GNU Wget 1.21 built on linux-gnu.

    -cares +digest -gpgme +https +ipv6 +iri +large-file -metalink +nls
    +ntlm +opie +psl +ssl/gnutls

    Wgetrc:
    /etc/wgetrc (system)
    Locale:
    /usr/share/locale
    Compile:
    gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc"
    -DLOCALEDIR="/usr/share/locale" -I. -I../../src -I../lib
    -I../../lib -Wdate-time -D_FORTIFY_SOURCE=2
    -I/usr/include/p11-kit-1 -DHAVE_LIBGNUTLS -DNDEBUG -g -O2
    -ffile-prefix-map=/build/wget-1peaRo/wget-1.21=.
    -fstack-protector-strong -Wformat -Werror=format-security
    -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -g -Wall
    Link:
    gcc -I/usr/include/p11-kit-1 -DHAVE_LIBGNUTLS -DNDEBUG -g -O2
    -ffile-prefix-map=/build/wget-1peaRo/wget-1.21=.
    -fstack-protector-strong -Wformat -Werror=format-security
    -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -g -Wall -Wl,-z,relro -Wl,-z,now
    -lpcre2-8 -luuid -lidn2 -lnettle -lgnutls -lz -lpsl ftp-opie.o
    gnutls.o http-ntlm.o ../lib/libgnu.a

    Copyright (C) 2015 Free Software Foundation, Inc.
    License GPLv3+: GNU GPL version 3 or later
    http://www.gnu.org/licenses/gpl.html.
    This is free software: you are free to change and redistribute it.
    There is NO WARRANTY, to the extent permitted by law.

    Originally written by Hrvoje Niksic hniksic@xemacs.org.
    Please send bug reports and questions to bug-wget@gnu.org.

    wget https://sourceforge.net/projects/pinn/files/os/void1/os.json
    --2025-04-01 22:23:38-- https://sourceforge.net/projects/pinn/files/os/void1/os.json
    Resolving sourceforge.net (sourceforge.net)... 104.18.12.149, 104.18.13.149, 2606:4700::6812:c95, ...
    Connecting to sourceforge.net (sourceforge.net)|104.18.12.149|:443... connected.
    HTTP request sent, awaiting response... 301 Moved Permanently
    Location: https://sourceforge.net/projects/pinn/files/os/void1/os.json/ [following]
    --2025-04-01 22:23:38-- https://sourceforge.net/projects/pinn/files/os/void1/os.json/
    Reusing existing connection to sourceforge.net:443.
    HTTP request sent, awaiting response... 301 Moved Permanently
    Location: https://sourceforge.net/projects/pinn/files/os/void1/os.json/download [following]
    --2025-04-01 22:23:39-- https://sourceforge.net/projects/pinn/files/os/void1/os.json/download
    Reusing existing connection to sourceforge.net:443.
    HTTP request sent, awaiting response... 302 Found
    Location: https://downloads.sourceforge.net/project/pinn/os/void1/os.json?ts=gAAAAABn7Flb83DovC6e6rh7KeAigYze-c2omk7xv2DlEwS5A1FyG4d0suri1wvtu8q8if3H-IupwE00hskr9aPOyuv-rOjxMQ%3D%3D&use_mirror=master&r= [following]
    --2025-04-01 22:23:39-- https://downloads.sourceforge.net/project/pinn/os/void1/os.json?ts=gAAAAABn7Flb83DovC6e6rh7KeAigYze-c2omk7xv2DlEwS5A1FyG4d0suri1wvtu8q8if3H-IupwE00hskr9aPOyuv-rOjxMQ%3D%3D&use_mirror=master&r=
    Resolving downloads.sourceforge.net (downloads.sourceforge.net)... 104.18.12.149, 104.18.13.149, 2606:4700::6812:c95, ...
    Connecting to downloads.sourceforge.net (downloads.sourceforge.net)|104.18.12.149|:443... connected.
    GnuTLS: An unexpected TLS packet was received.
    Unable to establish SSL connection.

    CURL

    curl 7.74.0 (aarch64-unknown-linux-gnu) libcurl/7.74.0 OpenSSL/1.1.1w zlib/1.2.11 brotli/1.0.9 libidn2/2.3.0 libpsl/0.21.0 (+libidn2/2.3.0) libssh2/1.9.0 nghttp2/1.43.0 librtmp/2.3
    Release-Date: 2020-12-09, security patched: 7.74.0-1.3+deb11u13
    Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps mqtt pop3 pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp
    Features: alt-svc AsynchDNS brotli GSS-API HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM NTLM_WB PSL SPNEGO SSL TLS-SRP UnixSockets

    curl https://sourceforge.net/projects/pinn/files/os/void1/os.json

    <title>301 Moved Permanently</title>

    301 Moved Permanently

    The resource has been moved to https://sourceforge.net/projects/pinn/files/os/void1/os.json/; you should be redirected automatically.

    openssl version
    OpenSSL 1.1.1w 11 Sep 2023

    openssl enc -list
    Supported ciphers:
    -aes-128-cbc -aes-128-cfb -aes-128-cfb1
    -aes-128-cfb8 -aes-128-ctr -aes-128-ecb
    -aes-128-ofb -aes-192-cbc -aes-192-cfb
    -aes-192-cfb1 -aes-192-cfb8 -aes-192-ctr
    -aes-192-ecb -aes-192-ofb -aes-256-cbc
    -aes-256-cfb -aes-256-cfb1 -aes-256-cfb8
    -aes-256-ctr -aes-256-ecb -aes-256-ofb
    -aes128 -aes128-wrap -aes192
    -aes192-wrap -aes256 -aes256-wrap
    -aria-128-cbc -aria-128-cfb -aria-128-cfb1
    -aria-128-cfb8 -aria-128-ctr -aria-128-ecb
    -aria-128-ofb -aria-192-cbc -aria-192-cfb
    -aria-192-cfb1 -aria-192-cfb8 -aria-192-ctr
    -aria-192-ecb -aria-192-ofb -aria-256-cbc
    -aria-256-cfb -aria-256-cfb1 -aria-256-cfb8
    -aria-256-ctr -aria-256-ecb -aria-256-ofb
    -aria128 -aria192 -aria256
    -bf -bf-cbc -bf-cfb
    -bf-ecb -bf-ofb -blowfish
    -camellia-128-cbc -camellia-128-cfb -camellia-128-cfb1
    -camellia-128-cfb8 -camellia-128-ctr -camellia-128-ecb
    -camellia-128-ofb -camellia-192-cbc -camellia-192-cfb
    -camellia-192-cfb1 -camellia-192-cfb8 -camellia-192-ctr
    -camellia-192-ecb -camellia-192-ofb -camellia-256-cbc
    -camellia-256-cfb -camellia-256-cfb1 -camellia-256-cfb8
    -camellia-256-ctr -camellia-256-ecb -camellia-256-ofb
    -camellia128 -camellia192 -camellia256
    -cast -cast-cbc -cast5-cbc
    -cast5-cfb -cast5-ecb -cast5-ofb
    -chacha20 -des -des-cbc
    -des-cfb -des-cfb1 -des-cfb8
    -des-ecb -des-ede -des-ede-cbc
    -des-ede-cfb -des-ede-ecb -des-ede-ofb
    -des-ede3 -des-ede3-cbc -des-ede3-cfb
    -des-ede3-cfb1 -des-ede3-cfb8 -des-ede3-ecb
    -des-ede3-ofb -des-ofb -des3
    -des3-wrap -desx -desx-cbc
    -id-aes128-wrap -id-aes128-wrap-pad -id-aes192-wrap
    -id-aes192-wrap-pad -id-aes256-wrap -id-aes256-wrap-pad
    -id-smime-alg-CMS3DESwrap -rc2 -rc2-128
    -rc2-40 -rc2-40-cbc -rc2-64
    -rc2-64-cbc -rc2-cbc -rc2-cfb
    -rc2-ecb -rc2-ofb -rc4
    -rc4-40 -seed -seed-cbc
    -seed-cfb -seed-ecb -seed-ofb
    -sm4 -sm4-cbc -sm4-cfb
    -sm4-ctr -sm4-ecb -sm4-ofb

     
  • procountsf

    procountsf - 2025-04-01

    Ubuntu 20.04 x86

    Linux ubuntu 5.15.0-131-generic #141~20.04.1-Ubuntu SMP Thu Jan 16 18:38:51 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

    Wget

    wget --version
    GNU Wget 1.20.3 built on linux-gnu.

    -cares +digest -gpgme +https +ipv6 +iri +large-file -metalink +nls
    +ntlm +opie +psl +ssl/openssl

    Wgetrc:
    /etc/wgetrc (system)
    Locale:
    /usr/share/locale
    Compile:
    gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc"
    -DLOCALEDIR="/usr/share/locale" -I. -I../../src -I../lib
    -I../../lib -Wdate-time -D_FORTIFY_SOURCE=2 -DHAVE_LIBSSL -DNDEBUG
    -g -O2 -fdebug-prefix-map=/build/wget-goaWaw/wget-1.20.3=.
    -fstack-protector-strong -Wformat -Werror=format-security
    -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -g -Wall
    Link:
    gcc -DHAVE_LIBSSL -DNDEBUG -g -O2
    -fdebug-prefix-map=/build/wget-goaWaw/wget-1.20.3=.
    -fstack-protector-strong -Wformat -Werror=format-security
    -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -g -Wall -Wl,-Bsymbolic-functions
    -Wl,-z,relro -Wl,-z,now -lpcre2-8 -luuid -lidn2 -lssl -lcrypto -lz
    -lpsl ftp-opie.o openssl.o http-ntlm.o ../lib/libgnu.a

    Copyright (C) 2015 Free Software Foundation, Inc.
    Licence GPLv3+: GNU GPL version 3 or later
    http://www.gnu.org/licenses/gpl.html.
    This is free software: you are free to change and redistribute it.
    There is NO WARRANTY, to the extent permitted by law.

    Originally written by Hrvoje Niksic hniksic@xemacs.org.
    Please send bug reports and questions to bug-wget@gnu.org.

    wget https://sourceforge.net/projects/pinn/files/os/void1/os.json
    --2025-04-01 22:28:09-- https://sourceforge.net/projects/pinn/files/os/void1/os.json
    Resolving sourceforge.net (sourceforge.net)... 104.18.12.149, 104.18.13.149, 2606:4700::6812:d95, ...
    Connecting to sourceforge.net (sourceforge.net)|104.18.12.149|:443... connected.
    HTTP request sent, awaiting response... 301 Moved Permanently
    Location: https://sourceforge.net/projects/pinn/files/os/void1/os.json/ [following]
    --2025-04-01 22:28:10-- https://sourceforge.net/projects/pinn/files/os/void1/os.json/
    Reusing existing connection to sourceforge.net:443.
    HTTP request sent, awaiting response... 301 Moved Permanently
    Location: https://sourceforge.net/projects/pinn/files/os/void1/os.json/download [following]
    --2025-04-01 22:28:10-- https://sourceforge.net/projects/pinn/files/os/void1/os.json/download
    Reusing existing connection to sourceforge.net:443.
    HTTP request sent, awaiting response... 302 Found
    Location: https://downloads.sourceforge.net/project/pinn/os/void1/os.json?ts=gAAAAABn7FpqssaCnp6JAmMOigMSxSvIei74J8laD3mdlk1yqHVXutI_T_AnAzigBORYwtOqPpVocTwui8Lpx9dgdLK55fz5_g%3D%3D&use_mirror=master&r= [following]
    --2025-04-01 22:28:11-- https://downloads.sourceforge.net/project/pinn/os/void1/os.json?ts=gAAAAABn7FpqssaCnp6JAmMOigMSxSvIei74J8laD3mdlk1yqHVXutI_T_AnAzigBORYwtOqPpVocTwui8Lpx9dgdLK55fz5_g%3D%3D&use_mirror=master&r=
    Resolving downloads.sourceforge.net (downloads.sourceforge.net)... 104.18.13.149, 104.18.12.149, 2606:4700::6812:c95, ...
    Connecting to downloads.sourceforge.net (downloads.sourceforge.net)|104.18.13.149|:443... connected.
    OpenSSL: error:1408F10B:SSL routines:ssl3_get_record:wrong version number
    Unable to establish SSL connection.

    curl --version
    curl 7.68.0 (x86_64-pc-linux-gnu) libcurl/7.68.0 OpenSSL/1.1.1f zlib/1.2.11 brotli/1.0.7 libidn2/2.2.0 libpsl/0.21.0 (+libidn2/2.2.0) libssh/0.9.3/openssl/zlib nghttp2/1.40.0 librtmp/2.3
    Release-Date: 2020-01-08
    Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp
    Features: AsynchDNS brotli GSS-API HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM NTLM_WB PSL SPNEGO SSL TLS-SRP UnixSockets

    curl https://sourceforge.net/projects/pinn/files/os/void1/os.json

    <title>301 Moved Permanently</title>

    301 Moved Permanently

    The resource has been moved to https://sourceforge.net/projects/pinn/files/os/void1/os.json/; you should be redirected automatically.

    openssl version
    OpenSSL 1.1.1f 31 Mar 2020

    openssl enc -list
    Supported ciphers:
    -aes-128-cbc -aes-128-cfb -aes-128-cfb1
    -aes-128-cfb8 -aes-128-ctr -aes-128-ecb
    -aes-128-ofb -aes-192-cbc -aes-192-cfb
    -aes-192-cfb1 -aes-192-cfb8 -aes-192-ctr
    -aes-192-ecb -aes-192-ofb -aes-256-cbc
    -aes-256-cfb -aes-256-cfb1 -aes-256-cfb8
    -aes-256-ctr -aes-256-ecb -aes-256-ofb
    -aes128 -aes128-wrap -aes192
    -aes192-wrap -aes256 -aes256-wrap
    -aria-128-cbc -aria-128-cfb -aria-128-cfb1
    -aria-128-cfb8 -aria-128-ctr -aria-128-ecb
    -aria-128-ofb -aria-192-cbc -aria-192-cfb
    -aria-192-cfb1 -aria-192-cfb8 -aria-192-ctr
    -aria-192-ecb -aria-192-ofb -aria-256-cbc
    -aria-256-cfb -aria-256-cfb1 -aria-256-cfb8
    -aria-256-ctr -aria-256-ecb -aria-256-ofb
    -aria128 -aria192 -aria256
    -bf -bf-cbc -bf-cfb
    -bf-ecb -bf-ofb -blowfish
    -camellia-128-cbc -camellia-128-cfb -camellia-128-cfb1
    -camellia-128-cfb8 -camellia-128-ctr -camellia-128-ecb
    -camellia-128-ofb -camellia-192-cbc -camellia-192-cfb
    -camellia-192-cfb1 -camellia-192-cfb8 -camellia-192-ctr
    -camellia-192-ecb -camellia-192-ofb -camellia-256-cbc
    -camellia-256-cfb -camellia-256-cfb1 -camellia-256-cfb8
    -camellia-256-ctr -camellia-256-ecb -camellia-256-ofb
    -camellia128 -camellia192 -camellia256
    -cast -cast-cbc -cast5-cbc
    -cast5-cfb -cast5-ecb -cast5-ofb
    -chacha20 -des -des-cbc
    -des-cfb -des-cfb1 -des-cfb8
    -des-ecb -des-ede -des-ede-cbc
    -des-ede-cfb -des-ede-ecb -des-ede-ofb
    -des-ede3 -des-ede3-cbc -des-ede3-cfb
    -des-ede3-cfb1 -des-ede3-cfb8 -des-ede3-ecb
    -des-ede3-ofb -des-ofb -des3
    -des3-wrap -desx -desx-cbc
    -id-aes128-wrap -id-aes128-wrap-pad -id-aes192-wrap
    -id-aes192-wrap-pad -id-aes256-wrap -id-aes256-wrap-pad
    -id-smime-alg-CMS3DESwrap -rc2 -rc2-128
    -rc2-40 -rc2-40-cbc -rc2-64
    -rc2-64-cbc -rc2-cbc -rc2-cfb
    -rc2-ecb -rc2-ofb -rc4
    -rc4-40 -seed -seed-cbc
    -seed-cfb -seed-ecb -seed-ofb
    -sm4 -sm4-cbc -sm4-cfb
    -sm4-ctr -sm4-ecb -sm4-ofb

     
  • procountsf

    procountsf - 2025-04-01

    Ubuntu 24.04 (arm64)

    Linux kevin-desktop 6.8.0-1015-raspi #17-Ubuntu SMP PREEMPT_DYNAMIC Mon Nov 11 14:12:16 UTC 2024 aarch64 aarch64 aarch64 GNU/Linux

    wget

    wget --version
    GNU Wget 1.21.4 built on linux-gnu.

    -cares +digest -gpgme +https +ipv6 +iri +large-file -metalink +nls
    +ntlm +opie +psl +ssl/openssl

    Wgetrc:
    /etc/wgetrc (system)
    Locale:
    /usr/share/locale
    Compile:
    gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc"
    -DLOCALEDIR="/usr/share/locale" -I. -I../../src -I../lib
    -I../../lib -Wdate-time -D_FORTIFY_SOURCE=3 -DHAVE_LIBSSL -DNDEBUG
    -g -O2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer
    -ffile-prefix-map=/build/wget-SlgjzS/wget-1.21.4=. -flto=auto
    -ffat-lto-objects -fstack-protector-strong -fstack-clash-protection
    -Wformat -Werror=format-security -mbranch-protection=standard
    -fdebug-prefix-map=/build/wget-SlgjzS/wget-1.21.4=/usr/src/wget-1.21.4-1ubuntu4.1
    -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -g -Wall
    Link:
    gcc -DHAVE_LIBSSL -DNDEBUG -g -O2 -fno-omit-frame-pointer
    -mno-omit-leaf-frame-pointer
    -ffile-prefix-map=/build/wget-SlgjzS/wget-1.21.4=. -flto=auto
    -ffat-lto-objects -fstack-protector-strong -fstack-clash-protection
    -Wformat -Werror=format-security -mbranch-protection=standard
    -fdebug-prefix-map=/build/wget-SlgjzS/wget-1.21.4=/usr/src/wget-1.21.4-1ubuntu4.1
    -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -g -Wall -Wl,-Bsymbolic-functions
    -flto=auto -ffat-lto-objects -Wl,-z,relro -Wl,-z,now -lpcre2-8
    -luuid -lidn2 -lssl -lcrypto -lz -lpsl ../lib/libgnu.a

    Copyright (C) 2015 Free Software Foundation, Inc.
    License GPLv3+: GNU GPL version 3 or later
    http://www.gnu.org/licenses/gpl.html.
    This is free software: you are free to change and redistribute it.
    There is NO WARRANTY, to the extent permitted by law.

    Originally written by Hrvoje Niksic hniksic@xemacs.org.
    Please send bug reports and questions to bug-wget@gnu.org.

    wget https://sourceforge.net/projects/pinn/files/os/void1/os.json
    --2025-04-01 22:35:11-- https://sourceforge.net/projects/pinn/files/os/void1/os.json
    Resolving sourceforge.net (sourceforge.net)... 104.18.13.149, 104.18.12.149, 2606:4700::6812:d95, ...
    Connecting to sourceforge.net (sourceforge.net)|104.18.13.149|:443... connected.
    HTTP request sent, awaiting response... 301 Moved Permanently
    Location: https://sourceforge.net/projects/pinn/files/os/void1/os.json/ [following]
    --2025-04-01 22:35:12-- https://sourceforge.net/projects/pinn/files/os/void1/os.json/
    Reusing existing connection to sourceforge.net:443.
    HTTP request sent, awaiting response... 301 Moved Permanently
    Location: https://sourceforge.net/projects/pinn/files/os/void1/os.json/download [following]
    --2025-04-01 22:35:12-- https://sourceforge.net/projects/pinn/files/os/void1/os.json/download
    Reusing existing connection to sourceforge.net:443.
    HTTP request sent, awaiting response... 302 Found
    Location: https://downloads.sourceforge.net/project/pinn/os/void1/os.json?ts=gAAAAABn7FwQ3TLX-GlhcKehIGMtBWeN-9R8NmP_IshIL08nQLIsbpNACE8fH5-8uMX-9Pe2guCSaqy_d6qiPwUgv-_3UtHs-g%3D%3D&use_mirror=master&r= [following]
    --2025-04-01 22:35:12-- https://downloads.sourceforge.net/project/pinn/os/void1/os.json?ts=gAAAAABn7FwQ3TLX-GlhcKehIGMtBWeN-9R8NmP_IshIL08nQLIsbpNACE8fH5-8uMX-9Pe2guCSaqy_d6qiPwUgv-_3UtHs-g%3D%3D&use_mirror=master&r=
    Resolving downloads.sourceforge.net (downloads.sourceforge.net)... 104.18.13.149, 104.18.12.149, 2606:4700::6812:d95, ...
    Connecting to downloads.sourceforge.net (downloads.sourceforge.net)|104.18.13.149|:443... connected.
    OpenSSL: error:0A00010B:SSL routines::wrong version number
    Unable to establish SSL connection.

    Openssl

    openssl version
    OpenSSL 3.0.13 30 Jan 2024 (Library: OpenSSL 3.0.13 30 Jan 2024)

    openssl enc -list
    Supported ciphers:
    -aes-128-cbc -aes-128-cfb -aes-128-cfb1
    -aes-128-cfb8 -aes-128-ctr -aes-128-ecb
    -aes-128-ofb -aes-192-cbc -aes-192-cfb
    -aes-192-cfb1 -aes-192-cfb8 -aes-192-ctr
    -aes-192-ecb -aes-192-ofb -aes-256-cbc
    -aes-256-cfb -aes-256-cfb1 -aes-256-cfb8
    -aes-256-ctr -aes-256-ecb -aes-256-ofb
    -aes128 -aes128-wrap -aes192
    -aes192-wrap -aes256 -aes256-wrap
    -aria-128-cbc -aria-128-cfb -aria-128-cfb1
    -aria-128-cfb8 -aria-128-ctr -aria-128-ecb
    -aria-128-ofb -aria-192-cbc -aria-192-cfb
    -aria-192-cfb1 -aria-192-cfb8 -aria-192-ctr
    -aria-192-ecb -aria-192-ofb -aria-256-cbc
    -aria-256-cfb -aria-256-cfb1 -aria-256-cfb8
    -aria-256-ctr -aria-256-ecb -aria-256-ofb
    -aria128 -aria192 -aria256
    -bf -bf-cbc -bf-cfb
    -bf-ecb -bf-ofb -blowfish
    -camellia-128-cbc -camellia-128-cfb -camellia-128-cfb1
    -camellia-128-cfb8 -camellia-128-ctr -camellia-128-ecb
    -camellia-128-ofb -camellia-192-cbc -camellia-192-cfb
    -camellia-192-cfb1 -camellia-192-cfb8 -camellia-192-ctr
    -camellia-192-ecb -camellia-192-ofb -camellia-256-cbc
    -camellia-256-cfb -camellia-256-cfb1 -camellia-256-cfb8
    -camellia-256-ctr -camellia-256-ecb -camellia-256-ofb
    -camellia128 -camellia192 -camellia256
    -cast -cast-cbc -cast5-cbc
    -cast5-cfb -cast5-ecb -cast5-ofb
    -chacha20 -des -des-cbc
    -des-cfb -des-cfb1 -des-cfb8
    -des-ecb -des-ede -des-ede-cbc
    -des-ede-cfb -des-ede-ecb -des-ede-ofb
    -des-ede3 -des-ede3-cbc -des-ede3-cfb
    -des-ede3-cfb1 -des-ede3-cfb8 -des-ede3-ecb
    -des-ede3-ofb -des-ofb -des3
    -des3-wrap -desx -desx-cbc
    -id-aes128-wrap -id-aes128-wrap-pad -id-aes192-wrap
    -id-aes192-wrap-pad -id-aes256-wrap -id-aes256-wrap-pad
    -id-smime-alg-CMS3DESwrap -rc2 -rc2-128
    -rc2-40 -rc2-40-cbc -rc2-64
    -rc2-64-cbc -rc2-cbc -rc2-cfb
    -rc2-ecb -rc2-ofb -rc4
    -rc4-40 -seed -seed-cbc
    -seed-cfb -seed-ecb -seed-ofb
    -sm4 -sm4-cbc -sm4-cfb
    -sm4-ctr -sm4-ecb -sm4-ofb

     
  • procountsf

    procountsf - 2025-04-01

    RASPBIAN BOOKWORM arm64

    uname -a
    Linux raspberrypi 6.6.62+rpt-rpi-2712 #1 SMP PREEMPT Debian 1:6.6.62-1+rpt1 (2024-11-25) aarch64 GNU/Linux

    WGET

    wget --version
    GNU Wget 1.21.3 built on linux-gnu.

    -cares +digest -gpgme +https +ipv6 +iri +large-file -metalink +nls
    +ntlm +opie +psl +ssl/gnutls

    Wgetrc:
    /etc/wgetrc (system)
    Locale:
    /usr/share/locale
    Compile:
    gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc"
    -DLOCALEDIR="/usr/share/locale" -I. -I../../src -I../lib
    -I../../lib -Wdate-time -D_FORTIFY_SOURCE=2
    -I/usr/include/p11-kit-1 -DHAVE_LIBGNUTLS -DNDEBUG -g -O2
    -ffile-prefix-map=/build/wget-sh3yHv/wget-1.21.3=.
    -fstack-protector-strong -Wformat -Werror=format-security
    -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -g -Wall
    Link:
    gcc -I/usr/include/p11-kit-1 -DHAVE_LIBGNUTLS -DNDEBUG -g -O2
    -ffile-prefix-map=/build/wget-sh3yHv/wget-1.21.3=.
    -fstack-protector-strong -Wformat -Werror=format-security
    -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -g -Wall -Wl,-z,relro -Wl,-z,now
    -lpcre2-8 -luuid -lidn2 -lnettle -lgnutls -lz -lpsl ../lib/libgnu.a

    Copyright (C) 2015 Free Software Foundation, Inc.
    License GPLv3+: GNU GPL version 3 or later
    http://www.gnu.org/licenses/gpl.html.
    This is free software: you are free to change and redistribute it.
    There is NO WARRANTY, to the extent permitted by law.

    Originally written by Hrvoje Niksic hniksic@xemacs.org.
    Please send bug reports and questions to bug-wget@gnu.org.

    wget https://sourceforge.net/projects/pinn/files/os/void1/os.json
    --2025-04-01 22:44:35-- https://sourceforge.net/projects/pinn/files/os/void1/os.json
    Resolving sourceforge.net (sourceforge.net)... 104.18.12.149, 104.18.13.149, 2606:4700::6812:c95, ...
    Connecting to sourceforge.net (sourceforge.net)|104.18.12.149|:443... connected.
    HTTP request sent, awaiting response... 301 Moved Permanently
    Location: https://sourceforge.net/projects/pinn/files/os/void1/os.json/ [following]
    --2025-04-01 22:44:35-- https://sourceforge.net/projects/pinn/files/os/void1/os.json/
    Reusing existing connection to sourceforge.net:443.
    HTTP request sent, awaiting response... 301 Moved Permanently
    Location: https://sourceforge.net/projects/pinn/files/os/void1/os.json/download [following]
    --2025-04-01 22:44:36-- https://sourceforge.net/projects/pinn/files/os/void1/os.json/download
    Reusing existing connection to sourceforge.net:443.
    HTTP request sent, awaiting response... 302 Found
    Location: https://downloads.sourceforge.net/project/pinn/os/void1/os.json?ts=gAAAAABn7F5E0nGYCb3o-9N4JWq-7CCDoX09RiVUxZ8djtxr_ucCEn4DZQyB6zXgOMOkmsFZRms_iG1p0o-VHMQV_-F_7w-TcQ%3D%3D&use_mirror=master&r= [following]
    --2025-04-01 22:44:36-- https://downloads.sourceforge.net/project/pinn/os/void1/os.json?ts=gAAAAABn7F5E0nGYCb3o-9N4JWq-7CCDoX09RiVUxZ8djtxr_ucCEn4DZQyB6zXgOMOkmsFZRms_iG1p0o-VHMQV_-F_7w-TcQ%3D%3D&use_mirror=master&r=
    Resolving downloads.sourceforge.net (downloads.sourceforge.net)... 104.18.13.149, 104.18.12.149, 2606:4700::6812:d95, ...
    Connecting to downloads.sourceforge.net (downloads.sourceforge.net)|104.18.13.149|:443... connected.
    GnuTLS: An unexpected TLS packet was received.
    Unable to establish SSL connection.

    CURL

    curl --version
    curl 7.88.1 (aarch64-unknown-linux-gnu) libcurl/7.88.1 OpenSSL/3.0.15 zlib/1.2.13 brotli/1.0.9 zstd/1.5.4 libidn2/2.3.3 libpsl/0.21.2 (+libidn2/2.3.3) libssh2/1.10.0 nghttp2/1.52.0 librtmp/2.3 OpenLDAP/2.5.13
    Release-Date: 2023-02-20, security patched: 7.88.1-10+deb12u8
    Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp
    Features: alt-svc AsynchDNS brotli GSS-API HSTS HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM NTLM_WB PSL SPNEGO SSL threadsafe TLS-SRP UnixSockets zstd

    curl https://sourceforge.net/projects/pinn/files/os/void1/os.json

    <title>301 Moved Permanently</title>

    301 Moved Permanently

    The resource has been moved to https://sourceforge.net/projects/pinn/files/os/void1/os.json/; you should be redirected automatically.

    OPENSSL

    openssl version
    OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024)

    openssl enc -list
    Supported ciphers:
    -aes-128-cbc -aes-128-cfb -aes-128-cfb1
    -aes-128-cfb8 -aes-128-ctr -aes-128-ecb
    -aes-128-ofb -aes-192-cbc -aes-192-cfb
    -aes-192-cfb1 -aes-192-cfb8 -aes-192-ctr
    -aes-192-ecb -aes-192-ofb -aes-256-cbc
    -aes-256-cfb -aes-256-cfb1 -aes-256-cfb8
    -aes-256-ctr -aes-256-ecb -aes-256-ofb
    -aes128 -aes128-wrap -aes192
    -aes192-wrap -aes256 -aes256-wrap
    -aria-128-cbc -aria-128-cfb -aria-128-cfb1
    -aria-128-cfb8 -aria-128-ctr -aria-128-ecb
    -aria-128-ofb -aria-192-cbc -aria-192-cfb
    -aria-192-cfb1 -aria-192-cfb8 -aria-192-ctr
    -aria-192-ecb -aria-192-ofb -aria-256-cbc
    -aria-256-cfb -aria-256-cfb1 -aria-256-cfb8
    -aria-256-ctr -aria-256-ecb -aria-256-ofb
    -aria128 -aria192 -aria256
    -bf -bf-cbc -bf-cfb
    -bf-ecb -bf-ofb -blowfish
    -camellia-128-cbc -camellia-128-cfb -camellia-128-cfb1
    -camellia-128-cfb8 -camellia-128-ctr -camellia-128-ecb
    -camellia-128-ofb -camellia-192-cbc -camellia-192-cfb
    -camellia-192-cfb1 -camellia-192-cfb8 -camellia-192-ctr
    -camellia-192-ecb -camellia-192-ofb -camellia-256-cbc
    -camellia-256-cfb -camellia-256-cfb1 -camellia-256-cfb8
    -camellia-256-ctr -camellia-256-ecb -camellia-256-ofb
    -camellia128 -camellia192 -camellia256
    -cast -cast-cbc -cast5-cbc
    -cast5-cfb -cast5-ecb -cast5-ofb
    -chacha20 -des -des-cbc
    -des-cfb -des-cfb1 -des-cfb8
    -des-ecb -des-ede -des-ede-cbc
    -des-ede-cfb -des-ede-ecb -des-ede-ofb
    -des-ede3 -des-ede3-cbc -des-ede3-cfb
    -des-ede3-cfb1 -des-ede3-cfb8 -des-ede3-ecb
    -des-ede3-ofb -des-ofb -des3
    -des3-wrap -desx -desx-cbc
    -id-aes128-wrap -id-aes128-wrap-pad -id-aes192-wrap
    -id-aes192-wrap-pad -id-aes256-wrap -id-aes256-wrap-pad
    -id-smime-alg-CMS3DESwrap -rc2 -rc2-128
    -rc2-40 -rc2-40-cbc -rc2-64
    -rc2-64-cbc -rc2-cbc -rc2-cfb
    -rc2-ecb -rc2-ofb -rc4
    -rc4-40 -seed -seed-cbc
    -seed-cfb -seed-ecb -seed-ofb
    -sm4 -sm4-cbc -sm4-cfb
    -sm4-ctr -sm4-ecb -sm4-ofb

     
  • procountsf

    procountsf - 2025-04-01

    I've posted the outputs for 5 separate Linux Operating Systems as separate posts above.
    You would think at least one of them would have worked, but sadly not.

     
  • SourceForge Support

    Hello,

    Thank you for your feedback.

    We couldn't replicate the issue on our end.
    Could you try checking on a different network?

    Sincerely,
    SourceForge Support

     
  • procountsf

    procountsf - 2025-04-02

    Err, well I'm confused now.

    I normally use 2 routers in a double-NAT configuration, which has never been a problem before. So I tried connecting directly to my ISP router as a first step to trying a different network and SSL worked.

    So then I went back to my original double-NAT configuration to check that again and the few distros I chose have started working again.

    You can see from my previous posts that nothing worked before and I'd had tickets raised by users indicating exactly the same problem. But I've not changed anything here.

    Have you changed anything at your end?

    I shall continue to check the remaining distros but it seems to have miraculously cured itself.

     
  • SourceForge Support

    • status: open --> closed
     
  • SourceForge Support

    Hello,

    Thank you for your feedback.

    We didn't make any changes on our end, but it's possible that switching to a different network helped reset or resolve the issue.

    It's great to hear it's working now, even after going back to your router.
    With the issue resolved, this ticket will be closed.

    If the problem does come up again, feel free to let us know.

    Sincerely,
    SourceForge Support

     

Log in to post a comment.

MongoDB Logo MongoDB