From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from re-prd-fep-044.btinternet.com (mailomta5-re.btinternet.com [213.120.69.98]) by sourceware.org (Postfix) with ESMTPS id E3B01385842F for ; Thu, 10 Feb 2022 13:54:34 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org E3B01385842F Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=dronecode.org.uk Authentication-Results: sourceware.org; spf=none smtp.mailfrom=dronecode.org.uk Received: from re-prd-rgout-001.btmx-prd.synchronoss.net ([10.2.54.4]) by re-prd-fep-044.btinternet.com with ESMTP id <20220210135433.IWSS28912.re-prd-fep-044.btinternet.com@re-prd-rgout-001.btmx-prd.synchronoss.net>; Thu, 10 Feb 2022 13:54:33 +0000 Authentication-Results: btinternet.com; auth=pass (PLAIN) smtp.auth=jonturney@btinternet.com; bimi=skipped X-SNCR-Rigid: 613A8CC3140C6C1C X-Originating-IP: [86.144.41.66] X-OWM-Source-IP: 86.144.41.66 (GB) X-OWM-Env-Sender: jonturney@btinternet.com X-VadeSecure-score: verdict=clean score=0/300, class=clean X-RazorGate-Vade: gggruggvucftvghtrhhoucdtuddrgedvvddriedugdehiecutefuodetggdotefrodftvfcurfhrohhfihhlvgemuceutffkvffkuffjvffgnffgvefqofdpqfgfvfenuceurghilhhouhhtmecufedtudenucesvcftvggtihhpihgvnhhtshculddquddttddmnecujfgurhepkfffgggfuffvfhfhjggtgfesthekredttdefjeenucfhrhhomheplfhonhcuvfhurhhnvgihuceojhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukheqnecuggftrfgrthhtvghrnhepveehueeludelieehffeghefhvefgheethfelvdetjeffkefgkeeuteeltdevueeknecuffhomhgrihhnpegthihgfihinhdrtghomhdpmhhirhhrohhrihhfihhtphhrvghsvghnthhsrggtrhhlughovghsnhhtmhgrkhgvrghlohhtohhfshgvnhhsvgdrihhmnecukfhppeekiedrudeggedrgedurdeiieenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhephhgvlhhopegludelvddrudeikedruddruddtfegnpdhinhgvthepkeeirddugeegrdeguddrieeipdhmrghilhhfrhhomhepjhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukhdpnhgspghrtghpthhtohepvddprhgtphhtthhopegthihgfihinhestgihghifihhnrdgtohhmpdhrtghpthhtohepvhgrnhgurgdrvhhoughkrghmihhlkhgvvhhitghhsehgmhgrihhlrdgtohhm X-RazorGate-Vade-Verdict: clean 0 X-RazorGate-Vade-Classification: clean Received: from [192.168.1.103] (86.144.41.66) by re-prd-rgout-001.btmx-prd.synchronoss.net (5.8.716.04) (authenticated as jonturney@btinternet.com) id 613A8CC3140C6C1C; Thu, 10 Feb 2022 13:54:33 +0000 Message-ID: <6188769f-6250-384e-cfac-be2b460c872e@dronecode.org.uk> Date: Thu, 10 Feb 2022 13:54:01 +0000 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.5.1 Subject: Re: Setup 2.917 fails to load mirror list Content-Language: en-GB To: Vanda Vodkamilkevich , The Cygwin Mailing List References: <904e9b5c-bd3e-9afc-1512-c5e659156dec@dronecode.org.uk> From: Jon Turney In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=-3570.7 required=5.0 tests=BAYES_00, FORGED_SPF_HELO, KAM_DMARC_STATUS, KAM_LAZY_DOMAIN_SECURITY, KHOP_HELO_FCRDNS, NICE_REPLY_A, SPF_HELO_PASS, SPF_NONE, TXREP, T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Feb 2022 13:54:36 -0000 > Le mer. 9 févr. 2022 à 12:11, Jon Turney a > écrit : > >> On 08/02/2022 18:09, Vanda Vodkamilkevich wrote: >>> Hi, >>> When behind a (corporate) proxy the mirror list is apparently fetched >>> without using the proxy configuration. This can only be seen in a fresh >>> install, I tried with 2.908 and it worked then the new version can use >> the >> >> Only appearing on a fresh install makes sense, as a failure to fetch the >> mirror list is silent is we have a cached mirror list data. >> >>> cached file... >>> I'll try to add the logs provided by '-v' but it's complicated to get >> them >>> out of my corporate network. >>> I can't debug more precisely as I have to reinstall my complete cygwin >> tree >>> before :-( >> >> This is puzzling, since I don't see any changes which could cause this. >> On 09/02/2022 15:35, Vanda Vodkamilkevich wrote: > If it helps, the output log when I saw the issues with setup > ########### Try to download with proxy set [...] > Cached mirror list unavailable [...] > HTTP status 403 fetching https://cygwin.com/mirrors.lst > ########### Using 2.908 version: it works [...] > Cached mirror list unavailable [...] > Fetched URL: http://cygwin.com/mirrors.lst > ########### Rerun with new version [...] > Loaded cached mirror list [...]> connection error: 12057 fetching https://cygwin.com/mirrors.lst > Using cached mirror list The significant change seems to be we now fetch the mirror list using https (since 2.892, but since you are using a self-built setup with local changes, you don't seem to have picked that up until now) 12057 is ERROR_INTERNET_SEC_CERT_REV_FAILED, which leads down quite a rabbit hole, but apparently this means something like 'certificate validity isn't checked in the process using wininet, but in a service, which doesn't have access to the proxy credentials we are using, so fails trying to fetch any CRL'. You don't mention that your proxy actually needs any credentials. Why we get a different error code the second time is mysterious. How we can then go on to successfully fetch from a https:// mirror if it presents a CRL doesn't make a lot of sense. I'm baffled.