RSSTextures Fail to Download about ckan HOT 11 CLOSED

Hmm let me see if I can reproduce this.

from ckan.

@techman83 : I don't suppose you can give me the output of ckan version (or if it says it's a dev release, which commit you've built from?)

from ckan.

I can reproduce this. It happens even if I flip the protocol to http, because the site redirects back to https. It definitely looks like an https-related unhappiness, but I'm not yet sure why.

from ckan.

Further testing indicates that we're not even getting to the certificate stage, so I think we're failing during handshake. I would speculate that @NathanKell's server wants to use encryption that isn't supported in Mono 4.0, but that's only speculation at this stage. :)

from ckan.

So, it looks like when I make a request to nabaal.net my browser negotiates a TLS_ECDHE... connection, but it looks like mono doesn't support ECDHE..

https://stackoverflow.com/questions/6927140/monotouch-web-service-request-over-ssl-gets-authentication-or-decryption-has-fa/6956759#6956759

I may have to trace the connection to see what's actually going on underneath.

from ckan.

Traced the connection. Can confirm that nabaal.net is returning a handshake failure. Our client supports only 13 cipher suites, and only supports RSA (TLS_RSA, TLS_RSA_EXPORT, and TLS_RSA_EXPORT1024) for key exchanges.

Running sslscan over nabaal.net reveals it only supports the most discerning of ciphers:

Testing SSL server nabaal.net on port 443

  Supported Server Cipher(s):
    Accepted  TLSv1  256 bits  ECDHE-RSA-AES256-SHA
    Accepted  TLSv1  168 bits  EDH-RSA-DES-CBC3-SHA
    Accepted  TLSv1  128 bits  ECDHE-RSA-AES128-SHA

  Prefered Server Cipher(s):
    TLSv1  256 bits  ECDHE-RSA-AES256-SHA

I think the solution here is likely to involve finding a mirror, or looking at @NathanKell hopefully to provide a non-SSL or RSA friendly download. ;)

from ckan.

You find me a place that will take 2GB of pngs, and have good bandwidth, and even give me shell access (not required, but nice, so I can zip up the textures server-side) and I'll mirror. I'll also poke Majiir about it.

from ckan.

However, there's a fair few mods hosted on that site, most importantly Kethane (which is only there).

from ckan.

I have updated the nabaal.net SSL configuration.

from ckan.

You are all awesome!

leon@bofh-sider:~/git/CKAN$ ./ckan.exe install RSSTextures2048
RSSTextures2048:

    * Downloading RSSTextures2048-1.0.zip...
    * Installing RealSolarSystem

Done!

from ckan.

Hooray! This was a great thing to wake up to. Thank you all! <3

from ckan.