View Issue Details

IDProjectCategoryView StatusLast Update
0000221AlmaLinux-8dnfpublic2022-04-29 08:57
Reporterthony62410 Assigned To 
PriorityhighSeverityblockReproducibilityalways
Status newResolutionopen 
PlatformGoogle cloud plateformOSAlmaLinuxOS Version8.5
Summary0000221: TLS problem when i use DNF
DescriptionHello,

We encounter a problem during a fresh deployment of alma linux with openssl, I specify that we use the image provided on the Google marcketplace, it seems that there is a problem with the ciphers configured on openssl, i have this error when we try to update the server with dnf:

[root@admny1ano01 ssl]# dnf update
AlmaLinux 8 - BaseOS 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'baseos':
  - Curl error (35): SSL connect error for https://mirrors.almalinux.org/mirrorlist/8/baseos [OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to mirrors.almalinux.org:443 ]
Error: Failed to download metadata for repo 'baseos': Cannot prepare internal mirrorlist: Curl error (35): SSL connect error for https://mirrors.almalinux.org/mirrorlist/8/baseos [OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to mirrors.almalinux.org:443 ]

When i try to pass an connection with openssl, i have this error:

SSL_connect:SSLv3/TLS write client hello
read from 0x55ef7f703ea0 [0x55ef7f70e723] (5 bytes => -1 (0xFFFFFFFFFFFFFFFF))
SSL_connect:error in SSLv3/TLS write client hello
write:errno=104



I have also the problem with an other site and curl command(i think that it's du to openssl) :

[root@admny1ano01 ssl]# curl https://rpmfind.net/linux/RPM/centos/8-stream/appstream/x86_64/Packages/bind-utils-9.11.36-3.el8.x86_64.html --output bind-utils-9.11.36-3.el8.x86_64.rpm
  % Total % Received % Xferd Average Speed Time Time Time Current
                                 Dload Upload Total Spent Left Speed
  0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to rpmfind.net:443


Thanks a lot for your time.
Regards

Steps To Reproducednf update or curl command...
Additional Informationnss-3.67.0-7.el8_5.x86_64


[root@admny1ano01 ssl]# curl --version
curl 7.61.1 (x86_64-redhat-linux-gnu) libcurl/7.61.1 OpenSSL/1.1.1k zlib/1.2.11 brotli/1.0.6 libidn2/2.2.0 libpsl/0.20.2 (+libidn2/2.2.0) libssh/0.9.4/openssl/zlib nghttp2/1.33.0


uname -a
Linux admny1ano01.nl.gcp.dktinfra.cloud 4.18.0-348.20.1.el8_5.x86_64 #1 SMP Thu Mar 10 11:31:47 EST 2022 x86_64 x86_64 x86_64 GNU/Linux
Tagscloud, gcp
abrt_hash
URL

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2022-04-26 16:22 thony62410 New Issue
2022-04-29 08:56 elkhan Tag Attached: cloud
2022-04-29 08:57 elkhan Tag Attached: gcp