[SOLVED] wget: unable to establish SSL connection, while downloading libreoffice from slackbuild

san2ban · 11-11-2018, 03:30 AM

Dear Slackers
On my TEHNOETIC T400 laptop, with libreboot, Dragora2.2 was pre-installed as per my choice. Since Dragora 3 is not yet fully released, and I wanted some applications not in Dragora2.2, I installed Slackware14.2 on this, using DVD, and upgraded it. All OK
I want to install libre office. I am getting below message

Quote:

bash-4.3# wget https://download.documentfoundation....-64_rpm.tar.gz
--2018-11-11 09:38:10-- https://download.documentfoundation....-64_rpm.tar.gz
Resolving download.documentfoundation.org... 2a00:1828:a012:185::1, 89.238.68.185
Connecting to download.documentfoundation.org|2a00:1828:a012:185::1|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://mirrors.estointernet.in/tdf/...-64_rpm.tar.gz [following]
--2018-11-11 09:38:12-- https://mirrors.estointernet.in/tdf/...-64_rpm.tar.gz
Resolving mirrors.estointernet.in... 2404:9d00:0:1::ffff, 2001:df4:a300:1::ffff, 103.11.81.206, ...
Connecting to mirrors.estointernet.in|2404:9d00:0:1::ffff|:443... connected.
Unable to establish SSL connection.

What might be the issue? Pl. guide

Alien Bob · 11-11-2018, 03:47 AM

No problem here, downloading that URL on Slackware 14.2:

Code:

$ wget https://download.documentfoundation.org/libreoffice/stable/6.1.3/rpm/x86_64/LibreOffice_6.1.3_Linux_x86-64_rpm.tar.gz
--2018-11-11 10:44:07--  https://download.documentfoundation.org/libreoffice/stable/6.1.3/rpm/x86_64/LibreOffice_6.1.3_Linux_x86-64_rpm.tar.gz
Resolving download.documentfoundation.org... 89.238.68.185, 2a00:1828:a012:185::1
Connecting to download.documentfoundation.org|89.238.68.185|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://mirror.dkm.cz/tdf/libreoffice/stable/6.1.3/rpm/x86_64/LibreOffice_6.1.3_Linux_x86-64_rpm.tar.gz [following]
--2018-11-11 10:44:07--  http://mirror.dkm.cz/tdf/libreoffice/stable/6.1.3/rpm/x86_64/LibreOffice_6.1.3_Linux_x86-64_rpm.tar.gz
Resolving mirror.dkm.cz... 86.49.49.49, 2a02:8300:8000:3::49
Connecting to mirror.dkm.cz|86.49.49.49|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 227830325 (217M) [application/octet-stream]
Saving to: 'LibreOffice_6.1.3_Linux_x86-64_rpm.tar.gz'

.3_Linux_x86-64_rpm  25%[====>               ]  55.85M  11.0MB/s    eta 15s    ^C

I also tried that that specific download mirror you contacted and it works for me as well, no SSL errors.
Try upgrading all the packages in the Slackware 14.2 /patches directory of any online mirror.

san2ban · 11-11-2018, 04:43 AM

I have installed only XFCE. No KDE. Able to connect to other sites. Only for libreoffice download, this issue persits

abga · 11-11-2018, 05:19 AM

Make sure your time/date is right and update (refresh) the ssl certificates, as root, type:

Code:

/usr/sbin/update-ca-certificates --fresh

Check if you can get the LibreOffice now. If that "Unable to establish SSL connection." is still showing up, then try using the --no-check-certificate option as a workaround:

Code:

wget --no-check-certificate https://download.documentfoundation.org/libreoffice/stable/6.1.3/rpm/x86_64/LibreOffice_6.1.3_Linux_x86-64_rpm.tar.gz

P.S.
Alternatively, you can switch to TLSv1.0 by adding the --secure-protocol=TLSv1 option to wget.

Code:

wget --secure-protocol=TLSv1 https://download.documentfoundation.org/libreoffice/stable/6.1.3/rpm/x86_64/LibreOffice_6.1.3_Linux_x86-64_rpm.tar.gz

The mirror looks to support it:

Code:

/usr/bin/openssl s_client -connect mirrors.estointernet.in:443 -tls1
# ...
# SSL-Session:
# Protocol  : TLSv1
# Cipher    : ECDHE-RSA-AES256-SHA
# ...

More info:
https://superuser.com/questions/1182...ssl-connection

Another alternative, point wget directly to the mirror (take it from AlienBOB's try):

Code:

wget mirror.dkm.cz/tdf/libreoffice/stable/6.1.3/rpm/x86_64/LibreOffice_6.1.3_Linux_x86-64_rpm.tar.gz

san2ban · 11-11-2018, 06:33 AM

Below suggestions did not work

Quote:

Make sure your time/date is right and update (refresh) the ssl certificates, as root, type:
Code:

/usr/sbin/update-ca-certificates --fresh

Check if you can get the LibreOffice now. If that "Unable to establish SSL connection." is still showing up, then try using the --no-check-certificate option as a workaround:
Code:

wget --no-check-certificate https://download.documentfoundation....-64_rpm.tar.gz

Will try further points

ca certificates not being updated. says no such file

san2ban · 11-11-2018, 06:36 AM

Below point also did not work

Quote:

P.S.
Alternatively, you can switch to TLSv1.0 by adding the --secure-protocol=TLSv1 option to wget.
Code:

wget --secure-protocol=TLSv1 https://download.documentfoundation....fice_6.1.3_Lin

san2ban · 11-11-2018, 06:39 AM

last point:

Quote:

bash-4.3# wget http://mirror.dkm.cz/tdf/libreoffice...nux_x86-64_rpm
--2018-11-11 12:55:46-- http://mirror.dkm.cz/tdf/libreoffice...nux_x86-64_rpm
Resolving mirror.dkm.cz... 2a02:8300:8000:3::49, 86.49.49.49
Connecting to mirror.dkm.cz|2a02:8300:8000:3::49|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
2018-11-11 12:55:47 ERROR 404: Not Found.

san2ban · 11-11-2018, 07:00 AM

Could update ca certificates by below command
#update-ca-certificates -f

san2ban · 11-11-2018, 07:01 AM

Problem still unresolved. Internet connection good. Any other suggestions for SSL connection?

bassmadrigal · 11-11-2018, 07:54 AM

Have you fully updated your installation? 14.2 is 2+ years old and has had many patches over that time.

To check your ca-certificates package, what is the output of the following command?

Code:

ls -l /var/log/packages/ca-certificate-*

abga · 11-11-2018, 11:22 AM

Sorry, was busy until now. I was also in a hurry when I added the P.S. to my post #4 and apparently truncated the mirror URL, corrected now:

Code:

wget mirror.dkm.cz/tdf/libreoffice/stable/6.1.3/rpm/x86_64/LibreOffice_6.1.3_Linux_x86-64_rpm.tar.gz

As bassmadrigal suggests, please check if you have the ca-certificates package available.

I haven't considered that because in #1 you described your Slackware installation and upgrade:

Quote:

I installed Slackware14.2 on this, using DVD, and upgraded it.

Just after that, in #5, you stated that you were unsuccessful in updating the certificates, "no such file" might imply that you didn't have the ca-certificates package installed:

Quote:

ca certificates not being updated. says no such file

But then, in #8, you state you were succesful in updating the certificates ...:

Quote:

Could update ca certificates by below command
#update-ca-certificates -f

Until we figure more out about your Slackware setup, you can try downloading LibreOffice, either by using wget or FireFox, from the corrected mirror.dkm.cz URL.

san2ban · 11-12-2018, 08:33 AM

hello abga
You had suggested as below. This did not work

Quote:

/usr/sbin/update-ca-certificates --fresh

The command that I posted, worked.
I will try the url in your last post and report back

abga: Thanks very much. I am able to download the file now. Can this be put into the readme file in slackbuild for libreoffice?

san2ban · 11-12-2018, 09:02 AM

Thanks for the support. Libre-office installed

One small query. SBo page for libreoffice says, this requires avahi, jdk.
I did not download and install both. Yet, libre-office is working. Is this OK?
Or, should i download avahi and jdk? Headache, since other dependencies mentioned for these packages. like a monkey's tail...

san2ban · 11-12-2018, 09:07 AM

Quote:

Originally Posted by bassmadrigal

Have you fully updated your installation? 14.2 is 2+ years old and has had many patches over that time.

To check your ca-certificates package, what is the output of the following command?

Code:

ls -l /var/log/packages/ca-certificate-*

bassmadrigal, pl. see below the output of the command that you mentioned

Quote:

bash-4.3# ls -l /var/log/packages/ca-certificate-*
ls: cannot access '/var/log/packages/ca-certificate-*': No such file or directory

Alien Bob · 11-12-2018, 02:16 PM

I love it when people do incomplete installations.