TeX Collection upload from April 6

[Philip Taylor]

Norbert Preining wrote:
> On Thu, 09 Apr 2020, Philip Taylor wrote:
>>> OpenSSL: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol
>>>   version
>>> Unable to establish SSL connection.
> As I said, one of your "special" setups. It is a normal and valid
> Let's Encrypt certificate, like billions others.

There is /nothing/ /whatsoever / to suggest that this has anything to do with my personal preferences for the location of the various TeX-MF directories, which is the only part of the installation that I modify  Everything else is out of the box.
Here is a simple console session which demonstrates that "wget" can access secure sites only if "--no-check-certificate" is specified, which is not one of the options specified in the TLMGR call thereof :

> D:downloading https://texlive.info/tlpretest//tlpkg/texlive.tlpdb.xz using wget
> --user-agent=texlive/wget --tries=4 --timeout=30 -q -O

Is there perhaps a tacit assumption that the users "wgetrc" file will contain "--no-check-certificate" ?

Simple demo of command-line WGET to secure location without and with "--no-check-certificate" —

> D:\temp>wget -r http://tinyurl.com/quick-search/
> SYSTEM_WGETRC = c:/progra~1/wget/etc/wgetrc
> syswgetrc = C:\Program files (x86)\GnuWin32/etc/wgetrc
> --2020-04-10 10:30:09--  http://tinyurl.com/quick-search/
> Resolving tinyurl.com... 104.20.57.30, 104.20.58.30
> Connecting to tinyurl.com|104.20.57.30|:80... connected.
> HTTP request sent, awaiting response... 301 Moved Permanently
> Location: https://cse.google.com/cse?cx=018439384481867961395:wcjja5tdch6 [follo
> wing]
> --2020-04-10 10:30:09-- https://cse.google.com/cse?cx=018439384481867961395:wcj
> ja5tdch6
> Resolving cse.google.com... 172.217.169.46
> Connecting to cse.google.com|172.217.169.46|:443... connected.
> ERROR: cannot verify cse.google.com's certificate, issued by `/C=US/O=Google Tru
> st Services/CN=GTS CA 1O1':
>   Unable to locally verify the issuer's authority.
> To connect to cse.google.com insecurely, use `--no-check-certificate'.
> Unable to establish SSL connection.
>
> D:\temp>D:\temp>wget -r http://tinyurl.com/quick-search/
> SYSTEM_WGETRC = c:/progra~1/wget/etc/wgetrc
> syswgetrc = C:\Program files (x86)\GnuWin32/etc/wgetrc
> --2020-04-10 10:30:09--  http://tinyurl.com/quick-search/
> Resolving tinyurl.com... 104.20.57.30, 104.20.58.30
> Connecting to tinyurl.com|104.20.57.30|:80... connected.
> HTTP request sent, awaiting response... 301 Moved Permanently
> Location: https://cse.google.com/cse?cx=018439384481867961395:wcjja5tdch6 [follo
> wing]
> --2020-04-10 10:30:09-- https://cse.google.com/cse?cx=018439384481867961395:wcj
> ja5tdch6
> Resolving cse.google.com... 172.217.169.46
> Connecting to cse.google.com|172.217.169.46|:443... connected.
> ERROR: cannot verify cse.google.com's certificate, issued by `/C=US/O=Google Tru
> st Services/CN=GTS CA 1O1':
>   Unable to locally verify the issuer's authority.
> To connect to cse.google.com insecurely, use `--no-check-certificate'.
> Unable to establish SSL connection.

>
> D:\temp>wget -r http://tinyurl.com/quick-search/ --no-check-certificate
> SYSTEM_WGETRC = c:/progra~1/wget/etc/wgetrc
> syswgetrc = C:\Program files (x86)\GnuWin32/etc/wgetrc
> --2020-04-10 10:32:08--  http://tinyurl.com/quick-search/
> Resolving tinyurl.com... 104.20.57.30, 104.20.58.30
> Connecting to tinyurl.com|104.20.57.30|:80... connected.
> HTTP request sent, awaiting response... 301 Moved Permanently
> Location: https://cse.google.com/cse?cx=018439384481867961395:wcjja5tdch6 [follo
> wing]
> --2020-04-10 10:32:08-- https://cse.google.com/cse?cx=018439384481867961395:wcj
> ja5tdch6
> Resolving cse.google.com... 172.217.169.46
> Connecting to cse.google.com|172.217.169.46|:443... connected.
> WARNING: cannot verify cse.google.com's certificate, issued by `/C=US/O=Google T
> rust Services/CN=GTS CA 1O1':
>   Unable to locally verify the issuer's authority.
> HTTP request sent, awaiting response... 200 OK
> Length: unspecified [text/html]
> Saving to: `cse.google.com/cse at cx=018439384481867961395%3Awcjja5tdch6'
>
>     [ <=>                                   ] 2,555 --.-K/s   in 0s
>
> 2020-04-10 10:32:09 (10.4 MB/s) - `cse.google.com/cse at cx=018439384481867961395%3
> Awcjja5tdch6' saved [2555]
>
> FINISHED --2020-04-10 10:32:09--
> Downloaded: 1 files, 2.5K in 0s (10.4 MB/s)



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://tug.org/pipermail/tex-live/attachments/20200410/07140a6d/attachment.html>