From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-yb1-xb29.google.com (mail-yb1-xb29.google.com [IPv6:2607:f8b0:4864:20::b29]) by sourceware.org (Postfix) with ESMTPS id 51BA23858C60 for ; Thu, 10 Feb 2022 14:49:47 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 51BA23858C60 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-yb1-xb29.google.com with SMTP id bt13so16194074ybb.2 for ; Thu, 10 Feb 2022 06:49:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=HjU4OCWpXYDk2UFhuFQspLXZJzUoJgGMNDHLd9lXcWA=; b=auJqNnJi9Q44B5SxlSvI8FdHKdJSdx2deyb3gaRbfm+evrr/QZgH1btEkVTwsa8RUS aSCV2Ci1Zo4M4v8aU9O3mOhHE8GsaALQanflISzD4DKKbfHcygdt4yBxdrdJjef6XkP/ A106nMmd6Lcu1GBYhWnXyYhK3FyZQSE0PZxBDz7MkZBcd7M10dKn9IaWTdQtkj5DuUPP BRv42fYQuDF5nwybluKH+41sS/54OBdlJ+v2SR7qCESBi4z7mkjOr92nEZy6neuKbLiQ ZIzaGQb6zbMltTZg6L0KEjDI15oBvVdFVs3pjIdpv7MHjdqsVvtU/UUacP5KtEsv4rk6 l9Ww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=HjU4OCWpXYDk2UFhuFQspLXZJzUoJgGMNDHLd9lXcWA=; b=Lh6vMKeNEbvyw+pjl6cp2PBn7mCWmR6dJmEILKaIyjMwd4wpgaf+QK6UgRRISTcHbV RGAVAGp0GrhvXrR2TTjOU+3m9FO90YOAbVvwVXn/JbFGQCShSri2fng+/5ObWS1VAgFY 9/Yw7/11+ds5TH2uJRpAnBAOWM72infD+ImyAWAC1ulYHxrYfWW5s5aJWoWUrSj/LP0N 9oDJ+TRayLIfu/uQIr530ETy/SumgZJ41berzeyzt2pgfZRsNjypJZfYfZl2k8/1K9AS yRAxzom1ZQCc+YuhUYOk/pcMNQ11/TJGlyJFvVfeJCDs3wzpLX5wNm24vgQOca0A8HiB LCWg== X-Gm-Message-State: AOAM532G41H3Yncrc9oY3U7Wr0rJUTUXPwh98zD7DQDmGPuoE2e0qkhD D09P5pmNkJfU+8WoWFAmrJd/2xic/HL7LvL2JKI= X-Google-Smtp-Source: ABdhPJzqIbTnlNEVc1VLNv1h91E2qKYOMlPP/iWRgWlxBR//ASyPzZlhV6E0wKcghMUJYg5/bhMxTo9t4Z4HJR2G31Q= X-Received: by 2002:a25:d6c7:: with SMTP id n190mr7681936ybg.399.1644504586863; Thu, 10 Feb 2022 06:49:46 -0800 (PST) MIME-Version: 1.0 References: <904e9b5c-bd3e-9afc-1512-c5e659156dec@dronecode.org.uk> <6188769f-6250-384e-cfac-be2b460c872e@dronecode.org.uk> In-Reply-To: <6188769f-6250-384e-cfac-be2b460c872e@dronecode.org.uk> From: Vanda Vodkamilkevich Date: Thu, 10 Feb 2022 15:49:38 +0100 Message-ID: Subject: Re: Setup 2.917 fails to load mirror list To: Jon Turney Cc: The Cygwin Mailing List X-Spam-Status: No, score=0.5 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Feb 2022 14:49:49 -0000 Le jeu. 10 f=C3=A9vr. 2022 =C3=A0 14:54, Jon Turney a =C3=A9crit : > > Le mer. 9 f=C3=A9vr. 2022 =C3=A0 12:11, Jon Turney a > > =C3=A9crit : > > > >> On 08/02/2022 18:09, Vanda Vodkamilkevich wrote: > >>> Hi, > >>> When behind a (corporate) proxy the mirror list is apparently fetched > >>> without using the proxy configuration. This can only be seen in a fre= sh > >>> install, I tried with 2.908 and it worked then the new version can us= e > >> the > >> > >> Only appearing on a fresh install makes sense, as a failure to fetch t= he > >> mirror list is silent is we have a cached mirror list data. > >> > >>> cached file... > >>> I'll try to add the logs provided by '-v' but it's complicated to get > >> them > >>> out of my corporate network. > >>> I can't debug more precisely as I have to reinstall my complete cygwi= n > >> tree > >>> before :-( > >> > >> This is puzzling, since I don't see any changes which could cause this= . > >> > > On 09/02/2022 15:35, Vanda Vodkamilkevich wrote: > > If it helps, the output log when I saw the issues with setup > > > ########### Try to download with proxy set > [...] > > Cached mirror list unavailable > [...] > > HTTP status 403 fetching https://cygwin.com/mirrors.lst > > > ########### Using 2.908 version: it works > [...] > > Cached mirror list unavailable > [...] > > Fetched URL: http://cygwin.com/mirrors.lst > > > ########### Rerun with new version > [...] > > Loaded cached mirror list > [...]> connection error: 12057 fetching https://cygwin.com/mirrors.lst > > Using cached mirror list > > The significant change seems to be we now fetch the mirror list using > https (since 2.892, but since you are using a self-built setup with > local changes, you don't seem to have picked that up until now) > > 12057 is ERROR_INTERNET_SEC_CERT_REV_FAILED, which leads down quite a > rabbit hole, but apparently this means something like 'certificate > validity isn't checked in the process using wininet, but in a service, > which doesn't have access to the proxy credentials we are using, so > fails trying to fetch any CRL'. > > You don't mention that your proxy actually needs any credentials. > > Why we get a different error code the second time is mysterious. > > How we can then go on to successfully fetch from a https:// mirror if it > presents a CRL doesn't make a lot of sense. > > I'm baffled. > You nailed it... My corporate proxy blocks the https to the mirror list. And my old version of setup was using http. Maybe if https failed you should retry with http? Btw where is this mirror list file saved? I could cheat by fetching it with http before using setup?