This has been going on for about a week now but all of my Linux OS machines get a invalid certificate for download.moodle.org. This fails also for my Linux desktop on all 3 different browsers, wget, curl, etc but I have no problems with my windows machines. It works fine on Windows 10 and 2012.
This is causing a little pickle with my language packs or when I try to check plugins for updates
Moodle Error with check for updates:
"
Unable to fetch available updates data - unexpected cURL error.
"
From a terminal session, what do you get for:
curl -I http://download.moodle.org/
Download is behind CloudFlare (CF) and CF has 'rays' ... like routes in a way although that's not technically correct I don't think. Am in SA, Tx and when I check with above command I see my ray runs through DFW. What does your 'ray' show? That's really a question for research not response.
There's a cookie set in browser ... might clear cookies for download.moodle.org.
'spirit of sharing', Ken
Hi Ken,
I included https as well just in case you meant https instead of http.
local@scratch:~$ curl -l http://download.moodle.org/
<html>
<head><title>302 Found</title></head>
<body bgcolor="white">
<center><h1>302 Moved Temporarily</h1></center>
<hr><center>Umbrella Cloud Security Gateway</center>
</body>
</html>
local@scratch:~$ curl -l https://download.moodle.org/
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
What version of Linux are you running? I can reproduce this on older versions of Linux, but not on Ubuntu Xenial.
Just wow...
Just tested it on a Ubuntu server and it works on:
- Ubuntu 16.04.5 LTS (Xenial Xerus)
But not on other servers/desktops
- Linux Mint 19
- RHEL 6.5 (Santiago)
- RHEL 7.4 (Maipo)
The http:// url would have worked also ... you just get less info ... https:// gets more info.
But I see no html in either test from terminal. It appears you do.
What is "Umbrella Cloud Security Gateway" in your network setup?
Is that: https://umbrella.cisco.com/ ?
One way to test from same physical location ... use your smart phones browser to go to the site. Smart phone needs to connect to carrier upstream .... not the local WiFi. Then connect phone to the local WiFi. Try it again. Error?
'spirit of sharing', Ken
First thought that came to mind was Umbrella Corporation but nope no t-virus. I think that is the Cisco security gateway but I dont think this is specific to our orgs set up.
This is a perfect example for a business use case for using a VPN service.... Gosh wish that wasnt blockedI think it is our orgs security doing this... OpenDNS is the cert. Kinda wish I figured this out before asking for help on the internet.
Issue is fixed now for us.
Download.moodle.org tripped a flag that then started running the traffic through a security proxy.
Congrats! It's a very 'tangled web we weave' these days. :|
Glad you got it sorted.
'spirit of sharing', Ken