Curl error 35

[stevewillia]

Trying to reinstall 2.3.90 and in the so setup.log getting the error messages.

[WARNING] (10/10) Could not reach https://repo.saltstack.com/py3/ubuntu/18.04/amd64/archive/3003/SALTSTACK-GPG-KEY.pub, curl error code: 35

[WARNING] (01/10) Could not reach https://packages.wazuh.com/key/GPG-KEY-WAZUH, curl error code: 35

And the preflight fails.

This is not an Airgap installation. Doing a network install

From what I've read, curl error 35 is a SSL connection issue. There is not a proxy

Running curl

curl -v https://packages.wazuh.com

• Rebuilt URL to: https://packages.wazuh.com/
• Trying 13.226.204.18...
• TCP_NODELAY set
• Connected to packages.wazuh.com (13.226.204.18) port 443 (#0)
• ALPN, offering h2
• ALPN, offering http/1.1
• successfully set certificate verify locations:
• CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
• TLSv1.3 (OUT), TLS handshake, Client hello (1):
• OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to packages.wazuh.com:443
• stopped the pause stream!
• Closing connection 0
  curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to packages.wazuh.com:443

Any Ideas
Steve

[presianbg]

Hi,

Looks like a geo location + cloudfront issue or maybe DNS.
From my system packages.wazuh.com is being resolved on completely different set of IPs:

packages.wazuh.com has address 52.85.7.126
packages.wazuh.com has address 52.85.7.39
packages.wazuh.com has address 52.85.7.118
packages.wazuh.com has address 52.85.7.108

Can you try with different DNS server ?

Cheers,
PY

[stevewillia]

I changed the dns to use google 8.8.8.8 and same results.

Thank you. I'll keep looking

[defensivedepth]

Looks like something in-between the SO server and the destination is closing the connection.

Can you confirm that there are no firewalls or content filtering etc that might be blocking the request?

[stevewillia]

Turning off content filer as I write this Thanks

…

On Dec 13, 2021, at 9:05 AM, Josh Brower ***@***.***> wrote: Looks like something in-between the SO server and the destination is closing the connection. Can you confirm that there are no firewalls or content filtering etc that might be blocking the request? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#6516 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ASRTB36KZQJ23KE4V5SV4RTUQYDT7ANCNFSM5JZXWVDQ>. Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.