Bug 1797256

Summary: spectool suddenly reporting sslv3 alert handshake failure
Product: [Fedora] Fedora Reporter: John Pilkington <johnpilk222>
Component: rpmdevtoolsAssignee: Neal Gompa <ngompa13>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 30CC: bugs.michael, dennis, kevin, ngompa13, redhat-bugzilla, sauchter, twoerner
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-02-07 09:45:14 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
report with the --insecure tag commented out
none
--verbose report with 'active' --insecure tag
none
another attempt, using --verbose --tlsv1.2 --ciphers ecdhe_rsa_aes_128_gcm_sha_256 none

Description John Pilkington 2020-02-01 22:08:02 UTC
Created attachment 1657057 [details]
report with the --insecure tag commented out

Description of problem: spectool with --insecure curlrc fails after 20200130-ish updates


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.run build script using spectool to access github

2.
3.

Actual results: handshake failure 


Expected results: gain insecure access


Additional info:Attachments show --verbose reports with and without the curlrc --insecure setting.

Comment 1 John Pilkington 2020-02-01 22:10:58 UTC
Created attachment 1657058 [details]
--verbose report with 'active' --insecure tag

Comment 3 John Pilkington 2020-02-02 13:12:05 UTC
I have tried putting '--sslv3 --verbose' or '--sslv2 --verbose' into curlrc:

curl: (35) error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure

curl: (4) OpenSSL was built without SSLv2 support

Comment 4 John Pilkington 2020-02-03 14:23:42 UTC
Created attachment 1657355 [details]
another attempt, using --verbose --tlsv1.2 --ciphers ecdhe_rsa_aes_128_gcm_sha_256

Comment 5 John Pilkington 2020-02-04 11:44:36 UTC
http://lists.mythtv.org/pipermail/mythtv-dev/2020-February/078214.html

reports that it works from Australia     Connected to codeload.github.com (3.105.64.153) port 443 (#1)

but from the UK the handshakes fail at   Connected to codeload.github.com (81.130.111.239) port 443 (#1)  

with any of the cypher or security options I have tried.

Browsers object to both addresses.

Comment 6 John Pilkington 2020-02-04 16:48:47 UTC
'whois' showed the connection was to the BT internet service, not to github.  I power-cycled the BT Hub and downloading is going ahead.  Sorry for the noise.