From: Renaud Allard <renaud@allard.it>
Subject: Re: cloudflare.cdn.openbsd.org mirror issues
To: tech@openbsd.org
Date: Tue, 23 Apr 2024 13:35:05 +0200



On 4/23/24 1:18 PM, Stuart Henderson wrote:
> On 2024/04/23 10:05, tux2bsd wrote:
>>
>> https://www.openbsd.org/ftp.html, second on the list:
>>
>> https://cloudflare.cdn.openbsd.org/pub/OpenBSD/
>>
>> But it isn't happy, it's been this way for ~24 hours.
>>
>> Example:
>> ftp https://cloudflare.cdn.openbsd.org/pub/OpenBSD/7.5/amd64/SHA256.sig
>> Trying 104.17.248.92...
>> TLS handshake failure: handshake failed: error:14004410:SSL routines:CONNECT_CR_SRVR_HELLO:sslv3 alert handshake failure
> 
> Confirmed here, and it's not just a libressl issue, same with openssl.
> With plain http I get "Sorry, you have been blocked" .. "Cloudflare Ray
> ID: 878d6de7af616337", not just from Firefox/OpenBSD (which is pretty
> common for cloudflare in general) but also Firefox and Chrome on
> Android (which is not).
> 

On Firefox/Linux, I get:
Error code: SSL_ERROR_NO_CYPHER_OVERLAP

>> Used 3rd party tests to check, they confirm
>>    https://www.isitdownrightnow.com/cloudflare.cdn.openbsd.org.html
>>    https://downforeveryoneorjustme.com/cloudflare.cdn.openbsd.org?proto=https
>>
>> tux2bsd
>>
>