Bug 1036279

Summary: Error connecting to Fedora mirror site (https://mirrors.fedoraproject.org) using curl/wget... from "some" sources
Product: [Fedora] Fedora Reporter: Hedayat Vatankhah <hedayatv>
Component: nssAssignee: Elio Maldonado Batiz <emaldona>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: emaldona, hedayatv, kdudka, kengert
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-09-03 08:42:05 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Hedayat Vatankhah 2013-11-30 12:16:02 UTC
Description of problem:
Today, I am unable to update my system using yum update. The reason is:

Could not get metalink https://mirrors.fedoraproject.org/metalink?repo=fedora-19&arch=x86_64 error was
14: curl#35 - "Encountered end of file"


Using curl directly to get the link:
[hedayat@hedayat-lap ~]% curl -v "https://mirrors.fedoraproject.org/metalink?repo=updates-released-f19&arch=x86_64"
* About to connect() to mirrors.fedoraproject.org port 443 (#0)
*   Trying 213.175.193.206...
* Connected to mirrors.fedoraproject.org (213.175.193.206) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* NSS error -5938 (PR_END_OF_FILE_ERROR)
* Encountered end of file
* Closing connection 0
curl: (35) Encountered end of file


Trying to download the link using wget results in an error too.

Firefox CAN open the link.

Version-Release number of selected component (if applicable):
nss-3.15.2-2.fc19.x86_64
curl-7.29.0-12.fc19.x86_64

How reproducible:
100%

Comment 1 Elio Maldonado Batiz 2013-11-30 17:08:42 UTC
It works for me:

$ curl -v "https://mirrors.fedoraproject.org/metalink?repo=updates-released-f19&arch=x86_64"
* About to connect() to mirrors.fedoraproject.org port 443 (#0)
*   Trying 140.211.169.197...
* Connected to mirrors.fedoraproject.org (140.211.169.197) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSL connection using SSL_RSA_WITH_RC4_128_SHA
* Server certificate:
* 	subject: CN=*.fedoraproject.org,OU=Fedora Infrastructure,O=Red Hat Inc,L=Raleigh,ST=North Carolina,C=US,serialNumber=GFaoFyCf99PHtAPDHLEBYfFi/1hePcED
* 	start date: Aug 03 14:43:29 2013 GMT
* 	expire date: Nov 06 01:35:11 2015 GMT
* 	common name: *.fedoraproject.org
* 	issuer: CN=GeoTrust SSL CA,O="GeoTrust, Inc.",C=US
> GET /metalink?repo=updates-released-f19&arch=x86_64 HTTP/1.1
> User-Agent: curl/7.29.0
> Host: mirrors.fedoraproject.org
> Accept: */*
> 
< HTTP/1.1 200 OK
< Date: Sat, 30 Nov 2013 16:54:37 GMT
< Server: Apache/2.2.15 (Red Hat)
< cache-control: no-cache
< Content-Length: 20947
< AppTime: D=34251
< AppServer: mirrorlist-phx2.phx2.fedoraproject.org
< Content-Type: application/metalink+xml
< ProxyTime: D=153081
< ProxyServer: proxy06.fedoraproject.org
< 
<?xml version="1.0" encoding="utf-8"?>
<metalink version="3.0" xmlns="http://www.metalinker.org/" type="dynamic" pubdate="Sat, 30 Nov 2013 16:54:38 GMT" generator="mirrormanager" xmlns:mm0="http://fedorahosted.org/mirrormanager">
  <files>
    <file name="repomd.xml">
      <mm0:timestamp>1385706019</mm0:timestamp>
      <size>4762</size>
      <verification>
        <hash type="md5">9ada2a50a1a4fee394acf35036326005</hash>
        <hash type="sha1">051f97bbec866c4ed8718c54f48c76599d4e72e5</hash>
        <hash type="sha256">9b069cace04be27b9b836301606154a9be540940eab66cb20614b62994a44ef6</hash>
        <hash type="sha512">c7202617f21fe10acad304a05b8e90e93eef372c39fcd18bbe47f0320b5141a99158d397a285f0d2b6a2e7838569190edb24710deaa5a4bee75e73f8a19d4156</hash>
      </verification>
      <resources maxconnections="1">
        <url protocol="rsync" type="rsync" location="US" preference="100" >rsync://mirror.anl.gov/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="100" >http://mirror.anl.gov/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="100" >ftp://mirror.anl.gov/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="99" mm0:private="True">http://download-i2.fedoraproject.org/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="98" >http://kdeforge.unl.edu/mirrors/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="97" >http://mirror.oss.ou.edu/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="97" >ftp://mirror.oss.ou.edu/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="97" >rsync://mirror.oss.ou.edu/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="96" >rsync://linux.mirrors.es.net/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="96" >http://linux.mirrors.es.net/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="96" >ftp://linux.mirrors.es.net/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="95" >http://mirror.utexas.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="95" >rsync://mirror.utexas.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="95" >ftp://mirror.utexas.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="94" mm0:private="True">http://mirrors.zimcom.net/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="94" mm0:private="True">ftp://mirrors.zimcom.net/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="93" >rsync://mirror.itc.virginia.edu/fedora-enchilada/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="93" >http://mirror.itc.virginia.edu/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="92" >http://mirror.hmc.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="91" >http://mirrors.usc.edu/pub/linux/distributions/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="91" >ftp://mirrors.usc.edu/pub/linux/distributions/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="90" >http://mirror.ancl.hawaii.edu/linux/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="89" >rsync://mirror.pnl.gov/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="89" >http://mirror.pnl.gov/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="88" >ftp://ftp.uci.edu/mirrors/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="87" >ftp://mirror.umd.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="87" >rsync://mirror.umd.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="87" >http://mirror.umd.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="86" >http://mirror.chpc.utah.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="86" >rsync://mirror.chpc.utah.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="85" >ftp://mirror.cc.vt.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="85" >http://mirror.cc.vt.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="84" >ftp://ftp.usf.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="84" >http://ftp.usf.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="83" mm0:private="True">rsync://mirror.cc.columbia.edu/fedora-linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="83" mm0:private="True">http://mirror.cc.columbia.edu/pub/linux/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="83" mm0:private="True">ftp://mirror.cc.columbia.edu/pub/linux/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="82" mm0:private="True">http://mirrors.nebo.edu/public/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="81" >ftp://mirror.vcu.edu/pub/gnu+linux/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="81" >http://mirror.vcu.edu/pub/gnu+linux/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="80" >http://mirrors.mit.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="80" >rsync://mirrors.mit.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="79" >http://mirror.unl.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="79" >rsync://mirror.unl.edu/fedora-enchilada/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="78" >ftp://mirror.cs.princeton.edu/pub/mirrors/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="77" >http://ftp.linux.ncsu.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="77" >ftp://ftp.linux.ncsu.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="76" >http://mirrors.cat.pdx.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="76" >rsync://mirrors.cat.pdx.edu/fedora-enchilada/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="75" >http://archive.linux.duke.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="75" >ftp://archive.linux.duke.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="75" >rsync://archive.linux.duke.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="74" >http://mirror.seas.harvard.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="73" >http://ftp.ussg.iu.edu/linux/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="73" >ftp://ftp.ussg.iu.edu/pub/linux/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="72" >rsync://mirror.uoregon.edu/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="72" >ftp://mirror.uoregon.edu/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="72" >http://mirror.uoregon.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="71" >http://kdeforge2.unl.edu/mirrors/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="70" >ftp://ftp.gtlib.gatech.edu/pub/fedora.redhat/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="70" >rsync://rsync.gtlib.gatech.edu/fedora-enchilada/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="70" >http://www.gtlib.gatech.edu/pub/fedora.redhat/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="69" >rsync://mirrors.kernel.org/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="69" >ftp://mirrors.kernel.org/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="69" >http://mirrors.kernel.org/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="68" >ftp://mirror.lstn.net/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="68" >rsync://mirror.lstn.net/fedora-enchilada/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="68" >http://fedora.mirror.lstn.net/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="67" >rsync://mirrors.servercentral.net/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="67" >http://mirrors.servercentral.net/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="66" >rsync://mirror.symnds.com/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="66" >ftp://mirror.symnds.com/distributions/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="66" >http://mirror.symnds.com/distributions/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="65" >ftp://ftp.cse.buffalo.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="65" >http://ftp.cse.buffalo.edu/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="64" >http://fedora.mirrors.tds.net/pub/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="64" >ftp://fedora.mirrors.tds.net/pub/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="64" >rsync://fedora.mirrors.tds.net/fedora-enchilada/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="63" >rsync://mirrors.syringanetworks.net/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="63" >ftp://mirrors.syringanetworks.net/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="63" >http://mirrors.syringanetworks.net/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="62" >ftp://mirror.cogentco.com/pub/linux/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="62" >http://mirror.cogentco.com/pub/linux/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="62" >rsync://mirror.cogentco.com/fedora-enchilada/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="61" >ftp://fedora.mirrors.pair.com/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="61" >http://fedora.mirrors.pair.com/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="60" >http://mirror.metrocast.net/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="59" >rsync://mirror.steadfast.net/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="59" >http://mirror.steadfast.net/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="59" >ftp://mirror.steadfast.net/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="58" >http://fedora.mirror.constant.com/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="57" >rsync://mirror.web-ster.com/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="57" >http://mirror.web-ster.com/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="57" >ftp://mirror.web-ster.com/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="56" >ftp://mirror.nexcess.net/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="56" >http://mirror.nexcess.net/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="55" >http://mirror.east.ig2ad.com/Fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="55" >ftp://mirror.east.ig2ad.com/pub/Fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="54" >http://mirrors.tummy.com/pub/fedora.redhat.com/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="54" >rsync://mirrors.tummy.com/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="54" >ftp://mirrors.tummy.com/pub/fedora.redhat.com/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="53" >rsync://mirror.clarkson.edu/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="53" >http://mirror.clarkson.edu/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="52" >http://mirrors.ptd.net/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="US" preference="51" >rsync://ftp.wallawalla.edu/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="51" >ftp://ftp.wallawalla.edu/pub/mirrors/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="50" >http://mirror.west.ig2ad.com/Fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="US" preference="50" >ftp://mirror.west.ig2ad.com/pub/Fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="US" preference="49" >http://dl.fedoraproject.org/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="CA" preference="48" >http://fedora.mirror.nexicom.net/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="CA" preference="48" >ftp://mirror.nexicom.net/pub/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="CA" preference="48" >rsync://mirror.nexicom.net/Fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="CA" preference="47" >http://fedora.mirror.iweb.com/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="CA" preference="47" >ftp://fedora.mirror.iweb.com/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="CA" preference="47" >rsync://fedora.mirror.iweb.com/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="CA" preference="46" >http://fedora.mirror.gtcomm.net/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="CA" preference="46" >ftp://fedora.mirror.gtcomm.net/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="CA" preference="45" >http://mirror.us.as6453.net/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="CR" preference="44" >http://mirrors.ucr.ac.cr/fedora/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="CA" preference="43" >http://fedora.bhs.mirrors.ovh.net/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="CA" preference="43" >rsync://fedora.bhs.mirrors.ovh.net/download.fedora.redhat.com/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="CA" preference="43" >ftp://fedora.bhs.mirrors.ovh.net/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="CA" preference="42" >http://mirror.its.sfu.ca/mirror/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="CA" preference="41" >http://mirror.cpsc.ucalgary.ca/mirror/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="rsync" type="rsync" location="CA" preference="40" >rsync://mirror.csclub.uwaterloo.ca/fedora-enchilada/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="ftp" type="ftp" location="CA" preference="40" >ftp://mirror.csclub.uwaterloo.ca/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
        <url protocol="http" type="http" location="CA" preference="40" >http://mirror.csclub.uwaterloo.ca/fedora/linux/updates/19/x86_64/repodata/repomd.xml</url>
      </resources>
    </file>
  </files>
</metalink>
* Connection #0 to host mirrors.fedoraproject.org left intact

and $ wget "https://mirrors.fedoraproject.org/metalink?repo=updates-released-f19&arch=x86_64" works.

In my f19 system I have:
$ rpm -q curl nspr nss-util nss-softokn nss p11-kit
curl-7.29.0-12.fc19.x86_64
nspr-4.10.1-1.fc19.x86_64
nspr-4.10.1-1.fc19.i686
nss-util-3.15.2-2.fc19.x86_64
nss-util-3.15.2-2.fc19.i686
nss-softokn-3.15.2-2.fc19.x86_64
nss-softokn-3.15.2-2.fc19.i686
nss-3.15.2-2.fc19.x86_64
nss-3.15.2-2.fc19.i686
p11-kit-0.18.7-1.fc19.x86_64
p11-kit-0.18.7-1.fc19.i686

Comment 2 Hedayat Vatankhah 2013-12-01 08:19:06 UTC
Yes, the title says it: it depends on 'where' you do this. (maybe some ISPs have this problem). However, from a single ISP I have this problem with Fedora curl/wget while I don't have this problem with Ubuntu wget. Also, Firefox in Fedora CAN access the link while curl/wget can't. (Maybe wget in Fedora uses a different backend for SSL connections than Ubuntu). 

Anyway, in "MY" network, firefox can access the link while curl/yum/wget can't. If you need any debugging information please tell me. Don't try to reproduce the bug on your side since it doesn't happen in most networks.

Comment 3 Hedayat Vatankhah 2013-12-02 07:13:04 UTC
Additional info: wget https://gmail.com works fine. Maybe mirros.fedoraproject.org uses a special algorithms which is interrupted by some ISPs? But then, why Firefox still works? Does it fallback to weaker algorithms that CURL/Wget doesn't?

Comment 4 Kamil Dudka 2013-12-02 12:35:27 UTC
Thanks for the report!  wget uses OpenSSL whereas curl and Firefox use NSS.  Did you try to connect using SSLv3?

$ curl -v --sslv3 "https://mirrors.fedoraproject.org/metalink?repo=updates-released-f19&arch=x86_64"

Could you please check which cipher-suite Firefox uses on the successful connection?

I am not sure whether Firefox provide such information by default, but the following add-on appeared helpful to me:

https://addons.mozilla.org/en-US/firefox/addon/cipherfox/

Comment 5 Hedayat Vatankhah 2013-12-02 13:12:58 UTC
Thank you for following up the report.

curl with --sslv3 works fine. curl with --sslv2 and --tlsv1 doesn't work. --tlsv1 reports the same error as running curl without any of these 3.


CipherFox shows RC4 128bit , RSA 4098 bit:SHA1

Comment 6 Kamil Dudka 2013-12-02 16:34:33 UTC
curl implements a fallback to SSLv3 based on the error code returned from NSS, but it does not trigger on PR_END_OF_FILE_ERROR:

https://github.com/bagder/curl/commit/571309dc

Elio, why are we getting PR_END_OF_FILE_ERROR from the handshake failure?

Comment 7 Elio Maldonado Batiz 2014-08-18 17:45:39 UTC
Please see https://bugzilla.mozilla.org/show_bug.cgi?id=106865#c32 and subsequent comments.

Comment 8 Kamil Dudka 2014-08-18 18:35:57 UTC
Hedayat, could you please try to reproduce the bug with up2date curl and nss?

Comment 9 Hedayat Vatankhah 2014-09-01 18:39:37 UTC
No, actually the internet connection intervention does not happen anymore and I can no longer check if curl will fallback to sslv3 since TLSV1 works fine now.

Comment 10 Kamil Dudka 2014-09-03 08:42:05 UTC
Thank you for giving it a try!  I am closing the bug as we are not able to trigger it any more.  Feel free to reopen the bug if it occurs again.