Arch Linux

pierric

Member

Registered: 2021-04-12

Posts: 14

[SOLVED] tlsv1 errors with git, curl and wget

Hi,

I'm in the process of installing Arch again, several years after the last time.

I've installed a number of things successfully but I'm getting issues with the installation of some things via git:
- some mason packages in neovim
- most importantly, yay

Here's what I see trying to install yay:

$ git clone https://aur.archilinux.org/yay-bin.git
Cloning into 'yay-bin'...
fatal: unable to access 'https://aur.archilinux.org/yay-bin.git/': OpenSSL/3.2.1: error:0A000438:SSL routines::tlsv1 alert internal error

Similarly:

$ curl https://aur.archilinux.org/yay-bin.git/
curl: (35) OpenSSL/3.2.1: error:0A000438:SSL routines::tlsv1 alert internal error

$ wget https://aur.archilinux.org/yay-bin.git/
--2024-02-16 17:50:48--  https://aur.archilinux.org/yay-bin.git/
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving aur.archilinux.org (aur.archilinux.org)... 15.197.192.55
Connecting to aur.archilinux.org (aur.archilinux.org)|15.197.192.55|:443... connected.
GnuTLS: A TLS fatal alert has been received.
GnuTLS: received alert [80]: Internal error
Unable to establish SSL connection.

I'm not sure what other information might be useful. openssl is installed in version 3.2.1, and I just ran a

pacman -Syu

to ensure everything is up to date.

What could be wrong?

Note that I've cloned other git repositories successfully, this affects a few of them only it seems (maybe when it's over https? I'm not sure)

Thanks in advance.

Last edited by pierric (2024-02-17 16:21:17)

ectospasm

Member

Registered: 2015-08-28

Posts: 303

Re: [SOLVED] tlsv1 errors with git, curl and wget

Do other AUR packages give you the same error?  This may be  a problem with aurweb.  I just checked one of the packages I maintain on the AUR, and I use ssh as my transport for the aurweb git remote so it wouldn't use TLS.

You can see if it's a problem with the cert if you run this command:

echo | openssl s_client -connect aur.archlinux.org:443

...and see if it gives you the same error.

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 76,030

Re: [SOLVED] tlsv1 errors with git, curl and wget

curl https: //aur.archilinux.org/yay-bin.git/

Last edited by seth (2024-02-17 08:31:49)

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

ectospasm

Member

Registered: 2015-08-28

Posts: 303

Re: [SOLVED] tlsv1 errors with git, curl and wget

curl https: //aur.archilinux.org/yay-bin.git/

Oh, wow!  I didn't even notice the hostname was wrong!  That is the problem (note my proposed openssl command did not use the incorrect aurweb hostname).

pierric

Member

Registered: 2021-04-12

Posts: 14

Re: [SOLVED] tlsv1 errors with git, curl and wget

Oh, how did this happen? I'm an idiot! I must have messed up the script I was running this from. Thank you both for your help! Yay now installs correctly.

I'm still getting errors from github when updating/installing Lazy plugins in astronvim but I'm starting to suspect it's github rejecting too many concurrent connections - the error also mentions OpenSSL but it just says:

        fatal: unable to access 'https://github.com/ggandor/leap.nvim.git/': OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to github.com:443

and the affected plugin seems to change with each attempt...

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 76,030

Re: [SOLVED] tlsv1 errors with git, curl and wget

Do you use any proxy or VPN?

Please always remember to mark resolved threads by editing your initial posts subject - so others will know that there's no task left, but maybe a solution to find.
Thanks.

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

WorMzy

Administrator

From: Scotland

Registered: 2010-06-16

Posts: 13,553

Website

Re: [SOLVED] tlsv1 errors with git, curl and wget

Mod note: Not an installation issue, moving to NC.

---

Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.

pierric

Member

Registered: 2021-04-12

Posts: 14

Re: [SOLVED] tlsv1 errors with git, curl and wget

Do you use any proxy or VPN?

Not at the moment, no.

Please always remember to mark resolved threads by editing your initial posts subject - so others will know that there's no task left, but maybe a solution to find.
Thanks.

By updating the subject, right? will do, thanks for the kind reminder!