[SOLVED] Failure while downloading tar.gz file during yay installation

AutumnWillows · 2025-03-17 18:41:18

I recently installed Arch, but I'm unable to install the yay package (and any other AUR packages) because I keep getting the same error:

$ makepkg -si
==> Making package: yay 12.4.2-1 (Mon 17 Mar 2025 12:34:54 PM CDT)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Downloading yay-12.4.2.tar.gz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (35) TLS connect error: error:0A0000C6:SSL routines::packet length too long
==> ERROR: Failure while downloading https://github.com/Jguer/yay/archive/v12.4.2.tar.gz
    Aborting...

I can't find this curl error anywhere else online, and I'm new to Linux, so I don't really understand what it means. I have the base-devel packages installed, and everything regarding my network seems to be working, but I get this error whenever I try to run makepkg on AUR packages. Trying to install yay-bin gave me the same problem. Does anyone know what might be causing this?

(Also, if it helps diagnose the problem at all, when I was randomly tinkering with the PKGBUILD file, I found that using http:// instead of https:// allowed the file to download, but it was in HTML format despite having the tar.gz suffix.)

Last edited by AutumnWillows (2025-03-24 18:54:57)

mackin_cheese · 2025-03-17 18:50:51

When was the last time you did a full system update and did you restart after the update?

You seem to be having ssl issues

WorMzy · 2025-03-17 18:54:04

Mod note: moving to AUR Issues.

AutumnWillows · 2025-03-17 19:20:49

I did a full system update a few hours before, and I did restart after. For good measure, I just updated and restarted, but the problem is still there.

mithrial · 2025-03-17 19:34:21

Are you probably in a country with a big firewall that does break certain TLS versions?

AutumnWillows · 2025-03-17 19:45:20

I’m in the US, so I don’t think so. Could this be a problem with my router?

Lone_Wolf · 2025-03-18 11:27:13

Does

$ wget https://github.com/Jguer/yay/archive/v12.4.2.tar.gz

work and retrieve the correct file ?

cryptearth · 2025-03-18 14:14:35

funny I get some errors with github myself across several systems with different distributions spread over europe - to me this looks more lije an error on github then on my side:
- distros: arch, debian, opensuse
- different countries: germany, france, uk, poland
- different DNS: Google, Cloudflare, Quad9
- same issue: mostly timeouts
so ... it would be an unreasonable coincident that several vastly different systems using several different infrastructures would fail in the very same way and only affect on specific service - and although I never understood proability properly even to me it looks way more reasonable it's an issue with the remote service as that's the common denominator

@OP
to avoid building yay from source there's also pre-built yay-bin

AutumnWillows · 2025-03-18 22:09:51

This was the result of running the wget command:

$ wget https://github.com/Jguer/yay/archive/v12.4.2.tar.gz
--2025-03-18 17:04:12--  https://github.com/Jguer/yay/archive/v12.4.2.tar.gz
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving github.com (github.com)... 140.82.114.3
Connecting to github.com (github.com)|140.82.114.3|:443... connected.
GnuTLS: An unexpected TLS packet was received.
Unable to establish SSL connection.

@cryptearth I've already tried yay-bin and gotten the same error.

seth · 2025-03-19 06:47:29

I’m in the US, so I don’t think so.

Well… and "yay" certainly sounds suspicially like gay so it would come as absolutely no surprise if some DUI-hire had intructed github to block the access…

@cryptearth, do you also get "SSL routines::packet length too long" or just regular timeouts?

urls works for me™
curl uses libssl, wget gnutls, wget doesn't use libcurl - it's highly unlikely to be a local bug (also w/ cryptearth having problems across systems)

DST!
You posted 18:41 UTC, the output says 12:34:54 PM CDT, but UTC-6 is CST, ie. only in winter, CDT is UTC-5
Did you wait an hour or 5 minutes between the error and the post?
Is there a parallel OS (Windows)?

Otherwise:
Do you use a VPN?
Did you configure jumbo frames?
Local firewall (netfilter/iptables)?

Finally

curl -vL 'https://github.com/' > /dev/null

mithrial · 2025-03-19 07:24:07

Is your date and time correct?

AutumnWillows · 2025-03-19 15:44:53

I did actually wait an hour and five minutes between the error and the post because I was looking online for solutions. My time is properly synced to daylight savings.

I do have Windows on my machine, but it's installed on a separate drive. Is it able to affect Linux when it's in a different drive?

I don't use a VPN. I also never installed a local firewall when setting up Arch.

I hadn't configured jumbo frames before, but the error persisted after I just configured it. Although I'm not sure I configured it properly; I just made a 30-mtu.link file and set MTUBytes to 9000, similarly to the wiki.

This was the output of the curl -vL line:

$ curl -vL 'https://github.com/' > /dev/null
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0* Host github.com:443 was resolved.
* IPv6: (none)
* IPv4: 140.82.112.3
*   Trying 140.82.112.3:443...
* ALPN: curl offers h2,http/1.1
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: none
{ [5 bytes data]
* TLSv1.3 (OUT), TLS alert, record overflow (534):
} [2 bytes data]
* TLS connect error: error:0A0000C6:SSL routines::packet length too long
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
* closing connection #0
curl: (35) TLS connect error: error:0A0000C6:SSL routines::packet length too long

seth · 2025-03-19 16:01:10

Is it able to affect Linux when it's in a different drive?

Yes, the drive doesn't matter at all.

3rd link below. Mandatory.
Disable it (it's NOT the BIOS setting!) and reboot windows and linux twice for voodo reasons.

But I had speculated on that condition borking the system time (because windows keeps it in local time) and apparently that's not that case.
I'm not sure how even a hibernating windows could cause this specific error.

I just made a 30-mtu.link file and set MTUBytes to 9000

Undo that. The concern would have been the same as w/ the VPN - too large a MTU resulting in bad package fragmentation.

Try to add

140.82.121.3 github.com

to your /etc/hosts
You'll no longer be in Kansas but the magical wonderland of Mainhatten.

cryptearth · 2025-03-20 05:13:28

@seth
if I remember correctly I have not got that exact same error - but a few different ones:
- correct dns resolving but failed to connect / timeout
- random timeouts / disconnects while active downloading (via git clone)
- web page not accessible (multiple browsers, also non-chromium based)
- issues across devices: can't access github on phone via mobile connection while also fail to on pc via cable
as mentioned: although I'm aware about the infrastructure behind github to me when issues happen they often happen accross several systems all at once - which to me looks like an issue on githubs end rather than on mine as for me it would be a way too wired coincident that all of my stuff fails at the same time while only github is affected, specifically

@OP
well - my point about yay-bin was not to provide a solution for your issue but rather to point out there's an alternative version which doesn't require to build fron source

seth · 2025-03-20 08:42:50

Ftr, tested and the Kansas mirror works for me.
On a closer look (and more caffeine)

*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: none
{ [5 bytes data]
* TLSv1.3 (OUT), TLS alert, record overflow (534):
} [2 bytes data]

Why is that 7 bytes?

pacman -Qikk ca-certificates-utils

AutumnWillows · 2025-03-21 04:42:51

The output is

$ pacman -Qikk ca-certificates-utils
Name            : ca-certificates-utils
Version         : 20240618-1
Description     : Common CA certificates (utilities)
Architecture    : any
URL             : https://src.fedoraproject.org/rpms/ca-certificates
Licenses        : GPL-2.0-or-later
Groups          : None
Provides        : ca-certificates  ca-certificates-java
Depends On      : bash  coreutils  findutils  p11-kit
Optional Deps   : None
Required By     : ca-certificates-mozilla  curl  qca-qt6
Optional For    : lib32-openssl  openssl  wget
Conflicts With  : ca-certificates-java
Replaces        : ca-certificates-java
Installed Size  : 13.63 KiB
Packager        : Jan Alexander Steffens (heftig) <heftig@archlinux.org>
Build Date      : Tue 18 Jun 2024 01:36:40 PM CDT
Install Date    : Wed 19 Mar 2025 12:19:54 AM CDT
Install Reason  : Installed as a dependency for another package
Install Script  : Yes
Validated By    : Signature
ca-certificates-utils: 33 total files, 0 altered files

Interestingly, while looking more online, I also found this post, which has very similar errors.

seth · 2025-03-21 06:59:35

That thread is down to the OP trying to use https on the http port.
So ca-certificates-utils is fine…

openssl s_client -msg -debug -showcerts -connect github.com:443 < /dev/null

AutumnWillows · 2025-03-21 20:41:01

I got

$ openssl s_client -msg -debug -showcerts -connect github.com:443 < /dev/null
Connecting to 140.82.121.3
CONNECTED(00000003)
>>> TLS 1.0, RecordHeader [length 0005]
    16 03 01 01 3c
>>> TLS 1.3, Handshake [length 013c], ClientHello
    01 00 01 38 03 03 bb 84 e5 82 ca dc 40 87 f0 11
    4f 96 ab 43 de d5 b6 c8 c9 ab f3 6c 82 34 81 d7
    a1 cb 5e 56 3f 73 20 86 57 34 e4 1c 66 c3 96 64
    f2 70 dc 41 6d 59 33 7c b4 bf 46 dc 05 cd 30 05
    5e 79 32 bb 57 f3 29 00 3c 13 02 13 03 13 01 c0
    2c c0 30 00 9f cc a9 cc a8 cc aa c0 2b c0 2f 00
    9e c0 24 c0 28 00 6b c0 23 c0 27 00 67 c0 0a c0
    14 00 39 c0 09 c0 13 00 33 00 9d 00 9c 00 3d 00
    3c 00 35 00 2f 01 00 00 b3 ff 01 00 01 00 00 00
    00 0f 00 0d 00 00 0a 67 69 74 68 75 62 2e 63 6f
    6d 00 0b 00 04 03 00 01 02 00 0a 00 16 00 14 00
    1d 00 17 00 1e 00 19 00 18 01 00 01 01 01 02 01
    03 01 04 00 23 00 00 00 16 00 00 00 17 00 00 00
    0d 00 30 00 2e 04 03 05 03 06 03 08 07 08 08 08
    1a 08 1b 08 1c 08 09 08 0a 08 0b 08 04 08 05 08
    06 04 01 05 01 06 01 03 03 03 01 03 02 04 02 05
    02 06 02 00 2b 00 05 04 03 04 03 03 00 2d 00 02
    01 01 00 33 00 26 00 24 00 1d 00 20 d9 61 87 6d
    d7 61 51 d3 b5 1f fc 01 6d 49 5e 6c c0 72 25 3e
    c5 69 e9 bd ba aa fe ae 22 1e 1c 52
write to 0x5d61697f4a40 [0x5d616980b370] (321 bytes => 321 (0x141))
0000 - 16 03 01 01 3c 01 00 01-38 03 03 bb 84 e5 82 ca   ....<...8.......
0010 - dc 40 87 f0 11 4f 96 ab-43 de d5 b6 c8 c9 ab f3   .@...O..C.......
0020 - 6c 82 34 81 d7 a1 cb 5e-56 3f 73 20 86 57 34 e4   l.4....^V?s .W4.
0030 - 1c 66 c3 96 64 f2 70 dc-41 6d 59 33 7c b4 bf 46   .f..d.p.AmY3|..F
0040 - dc 05 cd 30 05 5e 79 32-bb 57 f3 29 00 3c 13 02   ...0.^y2.W.).<..
0050 - 13 03 13 01 c0 2c c0 30-00 9f cc a9 cc a8 cc aa   .....,.0........
0060 - c0 2b c0 2f 00 9e c0 24-c0 28 00 6b c0 23 c0 27   .+./...$.(.k.#.'
0070 - 00 67 c0 0a c0 14 00 39-c0 09 c0 13 00 33 00 9d   .g.....9.....3..
0080 - 00 9c 00 3d 00 3c 00 35-00 2f 01 00 00 b3 ff 01   ...=.<.5./......
0090 - 00 01 00 00 00 00 0f 00-0d 00 00 0a 67 69 74 68   ............gith
00a0 - 75 62 2e 63 6f 6d 00 0b-00 04 03 00 01 02 00 0a   ub.com..........
00b0 - 00 16 00 14 00 1d 00 17-00 1e 00 19 00 18 01 00   ................
00c0 - 01 01 01 02 01 03 01 04-00 23 00 00 00 16 00 00   .........#......
00d0 - 00 17 00 00 00 0d 00 30-00 2e 04 03 05 03 06 03   .......0........
00e0 - 08 07 08 08 08 1a 08 1b-08 1c 08 09 08 0a 08 0b   ................
00f0 - 08 04 08 05 08 06 04 01-05 01 06 01 03 03 03 01   ................
0100 - 03 02 04 02 05 02 06 02-00 2b 00 05 04 03 04 03   .........+......
0110 - 03 00 2d 00 02 01 01 00-33 00 26 00 24 00 1d 00   ..-.....3.&.$...
0120 - 20 d9 61 87 6d d7 61 51-d3 b5 1f fc 01 6d 49 5e    .a.m.aQ.....mI^
0130 - 6c c0 72 25 3e c5 69 e9-bd ba aa fe ae 22 1e 1c   l.r%>.i......"..
0140 - 52                                                R
read from 0x5d61697f4a40 [0x5d61698108d3] (5 bytes => 5 (0x5))
0000 - 48 54 54 50 2f                                    HTTP/
<<< Not TLS data or unknown version (version=21588, content_type=256) [length 0005]
    48 54 54 50 2f
>>> TLS 1.0, RecordHeader [length 0005]
    15 03 01 00 02
write to 0x5d61697f4a40 [0x5d616980b370] (7 bytes => 7 (0x7))
0000 - 15 03 01 00 02 02 16                              .......
>>> TLS 1.3, Alert [length 0002], fatal record_overflow
    02 16
80DB42151A750000:error:0A0000C6:SSL routines:tls_get_more_records:packet length too long:ssl/record/methods/tls_common.c:662:
80DB42151A750000:error:0A000139:SSL routines::record layer failure:ssl/record/rec_layer_s3.c:688:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 328 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Protocol: TLSv1.3
This TLS version forbids renegotiation.
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
read from 0x5d61697f4a40 [0x5d61696be620] (16384 bytes => 308 (0x134))
0000 - 31 2e 31 20 32 30 30 20-4f 4b 0d 0a 53 65 72 76   1.1 200 OK..Serv
0010 - 65 72 3a 20 4a 65 74 74-79 2f 34 2e 32 2e 78 20   er: Jetty/4.2.x 
0020 - 28 57 69 6e 64 6f 77 73-20 58 50 2f 35 2e 31 20   (Windows XP/5.1 
0030 - 78 38 36 20 6a 61 76 61-2f 31 2e 36 2e 30 5f 31   x86 java/1.6.0_1
0040 - 37 29 0d 0a 43 6f 6e 74-65 6e 74 2d 54 79 70 65   7)..Content-Type
0050 - 3a 20 74 65 78 74 2f 68-74 6d 6c 0d 0a 43 6f 6e   : text/html..Con
0060 - 74 65 6e 74 2d 4c 65 6e-67 74 68 3a 20 31 37 30   tent-Length: 170
0070 - 0d 0a 41 63 63 65 70 74-2d 52 61 6e 67 65 73 3a   ..Accept-Ranges:
0080 - 20 62 79 74 65 73 0d 0a-0d 0a 3c 68 74 6d 6c 3e    bytes....<html>
0090 - 0d 0a 3c 68 65 61 64 3e-0d 0a 3c 6d 65 74 61 20   ..<head>..<meta 
00a0 - 48 54 54 50 2d 45 51 55-49 56 3d 22 52 45 46 52   HTTP-EQUIV="REFR
00b0 - 45 53 48 22 20 63 6f 6e-74 65 6e 74 3d 22 30 3b   ESH" content="0;
00c0 - 20 75 72 6c 3d 68 74 74-70 3a 2f 2f 62 6c 6f 63    url=http://bloc
00d0 - 6b 69 6e 67 2e 61 73 75-73 2e 68 6e 73 2e 74 6d   king.asus.hns.tm
00e0 - 2f 3f 63 61 74 5f 69 64-3d 35 36 26 6d 61 63 3d   /?cat_id=56&mac=
00f0 - 32 43 46 30 35 44 30 38-43 33 38 32 26 64 6f 6d   2CF05D08C382&dom
0100 - 61 69 6e 3d 67 69 74 68-75 62 2e 63 6f 6d 22 3e   ain=github.com">
0110 - 0d 0a 3c 2f 68 65 61 64-3e 0d 0a 3c 62 6f 64 79   ..</head>..<body
0120 - 3e 3c 2f 62 6f 64 79 3e-0d 0a 3c 2f 68 74 6d 6c   ></body>..</html
0130 - 3e 0a 0d 0a                                       >...
read from 0x5d61697f4a40 [0x5d61696be620] (16384 bytes => 0)

seth · 2025-03-21 20:51:10

1.1 200 OK
Server: Jetty/4.2.x (Windows XP/5.1 x86 java/1.6.0_17)
Content-Type: text/html
Content-Length: 170
Accept-Ranges: bytes
<html>
<head>
<meta HTTP-EQUIV="REFRESH" content="0; url=http://blocking.asus.hns.tm/?cat_id=56&mac=2CF05D08C382&domain=github.com">
</head>
<body></body>
</html>

Google suggests that this is "Trend Micro Home Network Security" and it looks like the connection is piped through some security check/"safe browsing" stuff?

loqs · 2025-03-21 22:29:44

Asus routers use Trend Micro in ASUS AiProtection.

AutumnWillows · 2025-03-24 18:52:57

Sorry for the late reply. The problem was ASUS AiProtection. Weirdly, it didn't block github on any other device I used, but everything works now so whatever. Thank you everyone for your help!

Arch Linux

#1 2025-03-17 18:41:18

[SOLVED] Failure while downloading tar.gz file during yay installation

#2 2025-03-17 18:50:51

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#3 2025-03-17 18:54:04

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#4 2025-03-17 19:20:49

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#5 2025-03-17 19:34:21

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#6 2025-03-17 19:45:20

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#7 2025-03-18 11:27:13

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#8 2025-03-18 14:14:35

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#9 2025-03-18 22:09:51

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#10 2025-03-19 06:47:29

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#11 2025-03-19 07:24:07

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#12 2025-03-19 15:44:53

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#13 2025-03-19 16:01:10

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#14 2025-03-20 05:13:28

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#15 2025-03-20 08:42:50

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#16 2025-03-21 04:42:51

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#17 2025-03-21 06:59:35

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#18 2025-03-21 20:41:01

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#19 2025-03-21 20:51:10

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#20 2025-03-21 22:29:44

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

#21 2025-03-24 18:52:57

Re: [SOLVED] Failure while downloading tar.gz file during yay installation

Board footer