Erros com certificados SSL

PRodrigues77 — Wed, 22 Nov 2023 15:05:57 GMT

Bom tarde,

Desde que mudei para um novo tarifario, que venho a notar alguma instabilidade na rede, nomeadamente downloads de ficheiros com tamanho acentuado.

Experimentei em varios equipamentos em casa, e notei este comportamento erroneo, via browser e no servidor que tenho para correr alguns labs ligados á minha profissão.

Precisei de baixar uma imagem do site Docker Hub, com 19Gb de tamanho, e o mesmo falha com a seguinte informação:

84f149b8473e: Download complete
c10a2675e244: Downloading [==================================================>] 4.993GB/4.993GB
555dcf06087a: Download complete
7b598d8ea07e: Download complete
6dd55ea333c2: Download complete
3cec5d3f9905: Download complete
8e61eb7bb401: Download complete
9c331cb4feac: Download complete
local error: tls: bad record MAC

Sabendo que eram problemas com certicidaos de tls e usando o comando docker pull, e este requesita o trafego a ser usado via https, ou seja ligação segura.

Foi entao que começei a realizar algum tipo de troubleshooting, neste caso a fazer o download de uma distribuição linux, para verificar se o erro se mantinha, e sim como podem ver mais abaixo as ligações ficam "perdidas" quando é solicitado via https:

wget -v https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
--2023-11-22 12:41:20-- https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Resolving releases.ubuntu.com (releases.ubuntu.com)... 91.189.91.123, 91.189.91.124, 185.125.190.37, ...
Connecting to releases.ubuntu.com (releases.ubuntu.com)|91.189.91.123|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5037662208 (4.7G) [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso’

ubuntu-22.04.3-desktop-amd64.iso 8%[========> ] 412.97M 11.2MB/s in 39s

2023-11-22 12:41:59 (10.7 MB/s) - Read error at byte 433029120/5037662208 (error:0A000119:SSL routines::decryption failed or bad record mac). Retrying.

--2023-11-22 12:42:00-- (try: 2) https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Connecting to releases.ubuntu.com (releases.ubuntu.com)|91.189.91.123|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5037662208 (4.7G), 4604633088 (4.3G) remaining [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso’

ubuntu-22.04.3-desktop-amd64.iso 9%[+++++++++> ] 458.69M 10.9MB/s in 4.7s

2023-11-22 12:42:05 (9.79 MB/s) - Read error at byte 480968704/5037662208 (error:0A000119:SSL routines::decryption failed or bad record mac). Retrying.

---------------------------------------------//////-------------------------------------------------------------

--2023-11-22 12:46:11-- (try:11) https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Connecting to releases.ubuntu.com (releases.ubuntu.com)|91.189.91.123|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5037662208 (4.7G), 2454904832 (2.3G) remaining [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso’

ubuntu-22.04.3-desktop-amd64.iso 100%[+++++++++++++++++++++++++++++++++++++++++++++++++++++++====================================================>] 4.69G 5.64MB/s in 6m 51s

2023-11-22 12:53:02 (5.70 MB/s) - ‘ubuntu-22.04.3-desktop-amd64.iso’ saved [5037662208/5037662208]

Aqui podem ver que o ficheiro só ao fim de 11 vezes é que foi realizado o download.

Mexendo nas configurações na placa de rede do meu servidor, em alterando a velocidade da mesma, deparei quee, em baixas velocidades, o request de https era mais estavel mas não sei falhar com o mesmos erros acima descritos.

Neste caso com a placa de rede configurada a 10Mb, simplesmente desliga a ligação e volta a tentar:

sudo ethtool -s enp8s0 speed 10 duplex full
wget -v https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
--2023-11-22 13:06:23-- https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Resolving releases.ubuntu.com (releases.ubuntu.com)... 185.125.190.40, 185.125.190.37, 91.189.91.123, ...
Connecting to releases.ubuntu.com (releases.ubuntu.com)|185.125.190.40|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5037662208 (4.7G) [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso.4’

ubuntu-22.04.3-desktop-amd64.iso.4 5%[=====> ] 281.69M 1.04MB/s in 4m 17s

2023-11-22 13:10:41 (1.09 MB/s) - Connection closed at byte 295370752. Retrying.

--2023-11-22 13:10:42-- (try: 2) https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Connecting to releases.ubuntu.com (releases.ubuntu.com)|185.125.190.40|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5037662208 (4.7G), 4742291456 (4.4G) remaining [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso.4’

ubuntu-22.04.3-desktop-amd64.iso.4 14%[++++++========> ] 711.00M 1.05MB/s in 6m 32s

2023-11-22 13:17:14 (1.09 MB/s) - Connection closed at byte 745537536. Retrying.

--2023-11-22 13:17:16-- (try: 3) https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Connecting to releases.ubuntu.com (releases.ubuntu.com)|185.125.190.40|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5037662208 (4.7G), 4292124672 (4.0G) remaining [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso.4’

ubuntu-22.04.3-desktop-amd64.iso.4 46%[+++++++++++++++=================================> ] 2.16G 1.12MB/s in 22m 56s

2023-11-22 13:40:12 (1.09 MB/s) - Connection closed at byte 2323644416. Retrying.

--2023-11-22 13:40:15-- (try: 4) https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Connecting to releases.ubuntu.com (releases.ubuntu.com)|185.125.190.40|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5037662208 (4.7G), 2714017792 (2.5G) remaining [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso.4’

ubuntu-22.04.3-desktop-amd64.iso.4 59%[+++++++++++++++++++++++++++++++++++++++++++++++++==============> ] 2.80G 1.04MB/s in 9m 58s

2023-11-22 13:50:13 (1.09 MB/s) - Connection closed at byte 3009331200. Retrying.

--2023-11-22 13:50:17-- (try: 5) https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Connecting to releases.ubuntu.com (releases.ubuntu.com)|185.125.190.40|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5037662208 (4.7G), 2028331008 (1.9G) remaining [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso.4’

ubuntu-22.04.3-desktop-amd64.iso.4 71%[++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++============> ] 3.35G 1.12MB/s in 8m 32s

2023-11-22 13:58:49 (1.09 MB/s) - Read error at byte 3596337152/5037662208 (error:0A000119:SSL routines::decryption failed or bad record mac). Retrying.

--2023-11-22 13:58:54-- (try: 6) https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Connecting to releases.ubuntu.com (releases.ubuntu.com)|185.125.190.40|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5037662208 (4.7G), 1441325056 (1.3G) remaining [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso.4’

ubuntu-22.04.3-desktop-amd64.iso.4 72%[+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++> ] 3.42G --.-KB/s in 16m 9s

2023-11-22 14:15:03 (80.0 KB/s) - Read error at byte 3675717632/5037662208 (Connection timed out). Retrying.

--2023-11-22 14:15:09-- (try: 7) https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Connecting to releases.ubuntu.com (releases.ubuntu.com)|185.125.190.40|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5037662208 (4.7G), 1361944576 (1.3G) remaining [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso.4’

ubuntu-22.04.3-desktop-amd64.iso.4 88%[++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++================> ] 4.16G 1.12MB/s in 11m 33s

2023-11-22 14:26:42 (1.09 MB/s) - Connection closed at byte 4470571008. Retrying.

--2023-11-22 14:26:49-- (try: 😎 https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Connecting to releases.ubuntu.com (releases.ubuntu.com)|185.125.190.40|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5037662208 (4.7G), 567091200 (541M) remaining [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso.4’

ubuntu-22.04.3-desktop-amd64.iso.4 89%[+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++> ] 4.18G 1.12MB/s in 14s

2023-11-22 14:27:03 (1.10 MB/s) - Connection closed at byte 4486365184. Retrying.

--2023-11-22 14:27:11-- (try: 9) https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Connecting to releases.ubuntu.com (releases.ubuntu.com)|185.125.190.40|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5037662208 (4.7G), 551297024 (526M) remaining [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso.4’

ubuntu-22.04.3-desktop-amd64.iso.4 93%[++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++===> ] 4.37G 1.12MB/s in 3m 1s

2023-11-22 14:30:12 (1.09 MB/s) - Connection closed at byte 4694523904. Retrying.

--2023-11-22 14:30:21-- (try:10) https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Connecting to releases.ubuntu.com (releases.ubuntu.com)|185.125.190.40|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5037662208 (4.7G), 343138304 (327M) remaining [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso.4’

ubuntu-22.04.3-desktop-amd64.iso.4 97%[++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++====> ] 4.58G 1.04MB/s in 3m 16s

2023-11-22 14:33:37 (1.09 MB/s) - Connection closed at byte 4919214080. Retrying.

--2023-11-22 14:33:47-- (try:11) https://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Connecting to releases.ubuntu.com (releases.ubuntu.com)|185.125.190.40|:443... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 5037662208 (4.7G), 118448128 (113M) remaining [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso.4’

ubuntu-22.04.3-desktop-amd64.iso.4 100%[+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++==>] 4.69G 1.04MB/s in 1m 43s

2023-11-22 14:35:31 (1.09 MB/s) - ‘ubuntu-22.04.3-desktop-amd64.iso.4’ saved [5037662208/5037662208]

Fazendo o mesmo pedido de download em http e com a placa 1000Mb, não se nota este tipo de problemas:

sudo ethtool -s enp8s0 speed 1000 duplex full

wget -v http://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
--2023-11-22 12:57:51-- http://releases.ubuntu.com/22.04.3/ubuntu-22.04.3-desktop-amd64.iso
Resolving releases.ubuntu.com (releases.ubuntu.com)... 91.189.91.123, 91.189.91.124, 185.125.190.37, ...
Connecting to releases.ubuntu.com (releases.ubuntu.com)|91.189.91.123|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5037662208 (4.7G) [application/x-iso9660-image]
Saving to: ‘ubuntu-22.04.3-desktop-amd64.iso.2’

ubuntu-22.04.3-desktop-amd64.iso.2 100%[===========================================================================================================>] 4.69G 25.2MB/s in 3m 1s

2023-11-22 13:00:53 (26.5 MB/s) - ‘ubuntu-22.04.3-desktop-amd64.iso.2’ saved [5037662208/5037662208]

Como mencionei, notei este tipo de erros noutros tipos de equipamentos que tenho em casa, afastando a possibilidado de erros ligados a um só equipamento.

Sendo algo que me esta a afetar a minha vida profissional, agradeço que vejam este assunto com a maior brevidade possivel.

Atentamente

Pedro Rodrigues

Re: Erros com certificados SSL

Barb_Vodafone — Wed, 22 Nov 2023 16:24:18 GMT

Olá @PRodrigues77,

Compreendemos a necessidade de ter os serviços a funcionar corretamente, por isso, pedimos que contacte o nosso apoio técnico.

Pedimos que aceda ao Chat Tobi, seguindo os passos abaixo indicados, para efetuar os despistes necessários no sentido de resolver a situação com a maior brevidade possível.

- Aceda a https://tobi.vodafone.pt

- Introduza o seu número de telefone

- Escreva: Dificuldades Fixo

- Valide o seu número de informação fiscal (NIF) e código postal.

- Selecione a sua morada

- Escolha a dificuldade através das opções indicadas pelo TOBi.

Caso a situação não fique resolvida no final da interação com o nosso assistente automático, o Apoio Técnico irá ligar-lhe de imediato de forma gratuita e prioritária.

Como alternativa, poderá entrar em contacto com o nosso apoio técnico através do nosso número 16913 ou 911 691 300 (taxação à tarifa rede móvel Vodafone) todos os dias das 07h às 02h.

Obrigada

Barb_Vodafone

Re: Erros com certificados SSL

PRodrigues77 — Thu, 23 Nov 2023 14:00:23 GMT

Contactei o Tobi, e espero uma resposta das Equipas Tecnicas.

No entanto deixo aqui mais um exemplo:

wget -v https://download.manjaro.org/kde/23.0.4/manjaro-kde-23.0.4-231015-linux65.iso
--2023-11-23 13:48:30-- https://download.manjaro.org/kde/23.0.4/manjaro-kde-23.0.4-231015-linux65.iso
Resolving download.manjaro.org (download.manjaro.org)... 185.76.11.111, 185.76.11.114, 2a02:6ea0:c300::8, ...
Connecting to download.manjaro.org (download.manjaro.org)|185.76.11.111|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3905155072 (3.6G) [application/octet-stream]
Saving to: ‘manjaro-kde-23.0.4-231015-linux65.iso’

manjaro-kde-23.0.4-231015-linux65.iso 20%[=====================> ] 767.08M --.-KB/s eta 34m 23s^C

wget -v http://download.manjaro.org/kde/23.0.4/manjaro-kde-23.0.4-231015-linux65.iso
--2023-11-23 13:57:33-- http://download.manjaro.org/kde/23.0.4/manjaro-kde-23.0.4-231015-linux65.iso
Resolving download.manjaro.org (download.manjaro.org)... 185.76.11.114, 185.76.11.112, 2a02:6ea0:c300::8, ...
Connecting to download.manjaro.org (download.manjaro.org)|185.76.11.114|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3905155072 (3.6G) [application/octet-stream]
Saving to: ‘manjaro-kde-23.0.4-231015-linux65.iso.1’

manjaro-kde-23.0.4-231015-linux65.iso.1 100%[===========================================================================================================>] 3.64G 97.8MB/s in 36s

2023-11-23 13:58:09 (103 MB/s) - ‘manjaro-kde-23.0.4-231015-linux65.iso.1’ saved [3905155072/3905155072]

tópico Re: Erros com certificados SSL na Assistência Técnica

Erros com certificados SSL

Re: Erros com certificados SSL

Re: Erros com certificados SSL