tag:help.appveyor.com,2012-11-13:/discussions/problems/7115-curl-cant-download-files-through-sslAppVeyor: Discussion 2018-10-19T08:18:25Ztag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T00:53:07Z2017-07-20T00:53:07ZCurl can't download files through SSL<div><p>Could you please check if it works when re-built with <code>os: Previous Visual Studio 2015</code> image?</p></div>Feodor Fitsnertag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T03:54:27Z2017-07-20T03:54:29ZCurl can't download files through SSL<div><p>Yes, it helped. Thank you</p></div>Igortag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T06:26:37Z2017-07-20T06:26:38ZCurl can't download files through SSL<div><p>It solved my issue as well.<br>
Will the os issue get fixed by appveyor?</p></div>sagieguraritag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T06:28:25Z2017-07-20T06:28:25ZCurl can't download files through SSL<div><p>@sagiegurari could you drop a link to your build please?</p></div>Feodor Fitsnertag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T07:00:04Z2017-07-20T07:00:08ZCurl can't download files through SSL<div><p>Example Run:<br>
<a href="https://ci.appveyor.com/project/sagiegurari/misc-test/build/1.0.16">https://ci.appveyor.com/project/sagiegurari/misc-test/build/1.0.16</a></p>
<p>The yml file:</p>
<pre>
<code>os: Visual Studio 2015
environment:
matrix:
- channel: stable
target: x86_64-pc-windows-msvc
install:
- appveyor-retry appveyor DownloadFile https://win.rustup.rs/ -FileName rustup-init.exe
- rustup-init.exe -yv --default-host %target%
- set PATH=%PATH%;%USERPROFILE%\.cargo\bin
- rustc -vV
- cargo -vV
build: false
test_script:
- cargo install --verbose --debug cargo-make
- cargo make workspace-ci-flow --no-workspace</code>
</pre></div>sagieguraritag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T16:02:03Z2017-07-20T16:02:03ZCurl can't download files through SSL<div><p>FWIW this isssue I believe is plauging almost all projects in the Rust community right now. It looks like everything's related to libcurl, though! The main way to download Rust, <a href="https://rustup.rs/">rustup</a> uses curl by default, and Rust's package manage, Cargo, also uses curl to download dependencies by default.</p>
<p>We <a href="https://ci.appveyor.com/project/rust-lang/rust/build/1.0.3966/job/1dm4xcqpm7n64mry">first saw these errors</a> yesterday and they all fail with the same error:</p>
<blockquote>
<p>The revocation function was unable to check revocation because the revocation server was offline</p>
</blockquote>
<p>We can <a href="https://github.com/rust-lang-nursery/rand/commit/bb786893bb9b2c0a6f735a1cc15ad494666861d9">work around these issues</a> by instructing rustup to not use the curl backend and telling Cargo to disable revocation checking in libcurl. It looks like command line invocations can also use <code>--ssl-no-revoke</code> with <code>curl</code> to fix this.</p>
<p>I haven't tested with the "Previous Visual Studio 2015" image but if that helps I can provide some more logs!</p></div>acrichtontag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T16:05:41Z2017-07-20T16:05:41ZCurl can't download files through SSL<div><p>Oh and if it helps the hosts we've seen so far that exhibit this revocation failure are:</p>
<ul>
<li>sh.rustup.rs (mentioned in the OP here)</li>
<li>static.rust-lang.org - <a href="https://ci.appveyor.com/project/alexcrichton/curl-rust/build/1.0.405/job/apeydkn43nefall2">https://ci.appveyor.com/project/alexcrichton/curl-rust/build/1.0.40...</a></li>
<li>crates.io - we think, I'm not 100% sure this host is the problem, but it's hit along the road in <a href="https://ci.appveyor.com/project/alexcrichton/backtrace-rs/build/job/6awgncrjl1o3dlo6">https://ci.appveyor.com/project/alexcrichton/backtrace-rs/build/job...</a></li>
</ul></div>acrichtontag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T16:31:47Z2017-07-20T16:31:56ZCurl can't download files through SSL<div><p>Hi Alex,</p>
<p>We are going to investigate this issue. Could you please make a very simple repro build in a public repository?</p></div>Feodor Fitsnertag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T16:36:17Z2017-07-20T16:36:18ZCurl can't download files through SSL<div><p>You can look at this. Look at rust1 branch<br>
<a href="https://github.com/sagiegurari/misc-test/tree/rust1">https://github.com/sagiegurari/misc-test/tree/rust1</a><br>
I used it to test the build issues</p></div>sagieguraritag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T16:44:33Z2017-07-20T16:44:33ZCurl can't download files through SSL<div><p>Sure Feodor! In addition to the repo @sagiegurari posted I've got:</p>
<ul>
<li>Rustup failing to download from static.rust-lang.org - <a href="https://github.com/alexcrichton/bzip2-rs/tree/224edcb0d3729868f00f3eba31e436da02f3afaf">src</a>, <a href="https://ci.appveyor.com/project/alexcrichton/bzip2-rs/build/1.0.416">logs</a></li>
<li>Cargo failing to download from presumably crates.io - <a href="https://github.com/alexcrichton/bzip2-rs/tree/51bfe7d6d85a1838768371457a62fb9e30badfad">src</a>, <a href="https://ci.appveyor.com/project/alexcrichton/bzip2-rs/build/1.0.417">logs</a></li>
</ul>
<p>Note that the latter uses the <code>RUSTUP_USE_HYPER</code> environment variable to succeed where the first build failed. Let me know though if I can help slim those down further!</p></div>acrichtontag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T18:11:52Z2017-07-20T18:11:52ZCurl can't download files through SSL<div><p>Found the issue! Apparently, in the last image update we tied firewall too much!</p>
<p>Disabling <code>Core Networking - Group Policy (LSASS-Out)</code> firewall rule makes builds working again.</p>
<p>Temp workaround:</p>
<pre>
<code>init:
- ps: Disable-NetFirewallRule -DisplayName 'Core Networking - Group Policy (LSASS-Out)'</code>
</pre>
<p>Build results: <a href="https://ci.appveyor.com/project/FeodorFitsner/rust-issue-bzip2-rs/build/1.0.18">https://ci.appveyor.com/project/FeodorFitsner/rust-issue-bzip2-rs/b...</a></p>
<p>We will be updating images later today with the fix. Thank you guys for timely heads up!</p></div>Feodor Fitsnertag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T18:13:12Z2017-07-20T18:13:14ZCurl can't download files through SSL<div><p>Thanks for the quick resolution +1</p></div>sagieguraritag:help.appveyor.com,2012-11-13:Comment/430386332017-07-20T18:19:18Z2017-07-20T18:19:18ZCurl can't download files through SSL<div><p>Awesome thanks Feodor!</p></div>acrichton