Bug 2231411

Summary: Cannot add Red Hat's flatpak repository
Product: Red Hat Enterprise Linux 9 Reporter: Markus Schibli <mschibli>
Component: flatpakAssignee: Debarshi Ray <debarshir>
Status: CLOSED COMPLETED QA Contact: Petr Schindler <pschindl>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 9.2CC: desktop-qa-list, jkastnin, otaylor
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-08-17 18:59:56 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Markus Schibli 2023-08-11 14:14:14 UTC 
Description of problem:
# flatpak remote-add --if-not-exists rhel https://flatpaks.redhat.io/rhel.flatpakrepo
error: Can't load uri https://flatpaks.redhat.io/rhel.flatpakrepo: Peer failed to perform TLS handshake: The TLS connection was non-properly terminated.

Version-Release number of selected component (if applicable):
flatpak-1.12.7-2.el9.x86_64                                 Wed Jan  4 18:44:10 2023
flatpak-builder-1.2.2-1.el9.x86_64                          Mon Oct  3 15:57:40 2022
flatpak-libs-1.12.7-2.el9.x86_64                            Wed Jan  4 18:44:12 2023
flatpak-selinux-1.12.7-2.el9.noarch                         Wed Jan  4 18:40:06 2023
flatpak-session-helper-1.12.7-2.el9.x86_64                  Wed Jan  4 18:44:10 2023


How reproducible:
try to add flatpak repository, as described in the official document: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/administering_the_system_using_the_gnome_desktop_environment/assembly_installing-applications-using-flatpak_administering-the-system-using-the-gnome-desktop-environment#proc_enabling-the-red-hat-flatpak-remote_assembly_installing-applications-using-flatpak

Steps to Reproduce:
Enable the rhel Flatpak remote:

$ flatpak remote-add \
          --if-not-exists \
          rhel \
          https://flatpaks.redhat.io/rhel.flatpakrepo


Actual results:
error: Can't load uri https://flatpaks.redhat.io/rhel.flatpakrepo: Peer failed to perform TLS handshake: The TLS connection was non-properly terminated.


Expected results:
flatpak repository is added

Additional info:
Comment 1 Joerg 2023-08-14 09:07:04 UTC 
Diagnostic information using `curl`:

~~~
$ curl -v https://flatpaks.redhat.io/rhel.flatpakrepo
*   Trying 10.2.111.200:443...
* Connected to flatpaks.redhat.io (10.2.111.200) port 443 (#0)
* ALPN: offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/pki/tls/certs/ca-bundle.crt
*  CApath: none
* OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to flatpaks.redhat.io:443 
* Closing connection 0
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to flatpaks.redhat.io:443
~~~
Comment 2 Owen Taylor 2023-08-17 18:59:56 UTC 
Fixed now, thanks for the report!!

===
$  curl  https://flatpaks.redhat.io/rhel.flatpakrepo
[Flatpak Repo]
Title=Red Hat Enterprise Linux
Url=oci+https://flatpaks.redhat.io/rhel/
AuthenticatorName=org.flatpak.Authenticator.Oci
Homepage=https://catalog.redhat.com/software/containers/explore
Comment=Red Hat Enterprise Linux Flatpak applications and runtimes
Description=This repository contains Flatpaks of applications built for Red Hat Enterprise Linux, along with the Red Hat Flatpak Runtime and SDK.
Icon=https://www.redhat.com/misc/favicon.ico
===