conan: [question] Unable to connect to conancenter=https://center.conan.io

For any other previous version older than 1.40.3, the new certificate can be installed with:

$ conan config install https://github.com/conan-io/conanclientcert.git

Congrats to the release!

Successfully installed conan-1.40.3

while true; do pip3 install conan==1.40.3 && break; done

If you want your PC to tell you conan 1.40.3 is released:

WSL:
while true; do pip3 install conan==1.40.3 && powershell.exe '[console]::beep(500,10000)' && break; done
old Linux:
while true; do pip3 install conan==1.40.3 && eval 'speaker-test -Dplug:front -c2' && break; done

minutes

Thanks, @haroal. The pem to be appended is at: https://letsencrypt.org/certs/isrgrootx1.pem We are releasing 1.40.3 ASAP containing that root certificate.

Same problem:

conan version : 1.58.0

ConanCenter seems back to normal, please check.

What’s the cause of the 502 happening today? conan 1.45.0.

Command: conan search boost -r conancenter

UPDATE 14:00 CET: Seems to work again now.

https://status.conan.io says everything is operational, but I’m getting the errors at home, at the office and at azure build machines.

conan search boost -r conancenter ERROR: HTTPSConnectionPool(host='center.conan.io', port=443): Max retries exceeded with url: /v1/ping (Caused by ResponseError('too many 502 error responses')). [Remote: conancenter]

Edit: added conan command used to trigger the error

Shouldn’t conan rely on system installed certs in addition to their own ones?

System installed ones were really problematic in some systems (OSX) and also with older Python versions (2.7), so they couldn’t be used at the time, and had to be replaced to keep moving. It has been working without issues till today, but certainly this will be fixed in next releases.

Hi,

This seems to be due to Let’s encrypt root authority server shutdown on September 30th : (cf https://docs.certifytheweb.com/docs/kb/kb-202109-letsencrypt/#:~:text=From Sept 30th 2021 Let’s,the ones for your website.)

I fixed it by adding their new root authority ISRG Root X1 certificate in ~/.conan/cacert.pem.

Edit: ISRG Root X1 certificate can be downloaded from Let’s encrypt website : https://letsencrypt.org/certificates/

I have the same issue as @radumotrescu, on Conan 1.6:

======== Computing necessary packages ======== ERROR: HTTPSConnectionPool(host=‘center.conan.io’, port=443): Max retries exceeded with url: /v1/ping (Caused by SSLError(SSLEOFError(8, ‘[SSL: UNEXPECTED_EOF_WHILE_READING] EOF occurred in violation of protocol (_ssl.c:1006)’)))

Unable to connect to conancenter=https://center.conan.io

1. Make sure the remote is reachable or,
2. Disable it by using conan remote disable, Then try again.

I have the same issue as @FunnyBoyZD, on Conan 2.0.13:

======== Computing necessary packages ========
ERROR: HTTPSConnectionPool(host='center.conan.io', port=443): Max retries exceeded with url: /v1/ping (Caused by SSLError(SSLEOFError(8, '[SSL: UNEXPECTED_EOF_WHILE_READING] EOF occurred in violation of protocol (_ssl.c:1006)')))

Unable to connect to conancenter=https://center.conan.io
1. Make sure the remote is reachable or,
2. Disable it by using conan remote disable,
Then try again.

Disabling SSL verification for the conancenter remote doesn’t fix the problem, so at the moment we can’t compile our projects.

Hello @memsharded I am having trouble with connection to https://center.conan.io:

Everything been working fine about 20 minutes ago, please help me resolving the issue

Thanks for reporting @Kidsunbo

Yes, this 502 is a NEW, different error that is happening today (20-january-2022), due to some server upgrades. Team is working on that: https://status.conan.io/

Does this mean every version of conan older than 1.40.3 is broken now unless people take this additional manual step of installing the certificate?

Yes. Many teams that already manage their configuration with conan config install (very recommended) will fix it simply by adding it to their config, no extra steps. But it doesn’t seem feasible to backport to 40 previous Conan releases, that is a huge amount of work (and also requires upgrading clients)

Shouldn’t conan rely on system installed certs in addition to their own ones?

Getting this also, sounds like their certificate has expired! Get #LetsEncrypt on it 😆

@anders-wind I just opened a PR to Conda feedstock: https://github.com/conda-forge/conan-feedstock/pull/143

UPDATE:

They have a bot, which opened a new PR too: https://github.com/conda-forge/conan-feedstock/pull/144

I’ll close mine.

shutdown VPN

Thanks for reporting. There was a migration this morning, and apparently there is a problem with the SSL certificate, the team is checking.

The incident seems to be resolved. Please try again and let us know.

Seems ConanCenter is down, team is investigating.

We have a problem with several machines running different operating systems and in different locations. It is impossible to connect to https://center.conan.io, even on a fresh venv with Conan 1.50.0:

ERROR: HTTPSConnectionPool(host=‘center.conan.io’, port=443): Max retries exceeded with url: /v1/ping (Caused by ReadTimeoutError(“HTTPSConnectionPool(host=‘center.conan.io’, port=443): Read timed out. (read timeout=60.0)”)) Unable to connect to conancenter=https://center.conan.io/

1. Make sure the remote is reachable or,
2. Disable it by using conan remote disable, Then try again.

Interestingly, ping shows a possible routing problem: PING center.conan.io (34.107.244.196) 56(84) bytes of data. 64 bytes from 196.244.107.34.bc.googleusercontent.com (34.107.244.196): icmp_seq=1 ttl=108 time=1.82 ms 64 bytes from 196.244.107.34.bc.googleusercontent.com (34.107.244.196): icmp_seq=2 ttl=108 time=1.34 ms 64 bytes from 196.244.107.34.bc.googleusercontent.com (34.107.244.196): icmp_seq=3 ttl=108 time=1.36 ms 64 bytes from 196.244.107.34.bc.googleusercontent.com (34.107.244.196): icmp_seq=4 ttl=108 time=1.34 ms 64 bytes from 196.244.107.34.bc.googleusercontent.com (34.107.244.196): icmp_seq=5 ttl=108 time=1.34 ms 64 bytes from 196.244.107.34.bc.googleusercontent.com (34.107.244.196): icmp_seq=6 ttl=108 time=1.38 ms

i update conan to 1.44.1 and conan config install https://github.com/conan-io/conanclientcert.git, but i still face this problem and error log is: ERROR: Failed requirement ‘android-toolchain/r20@bashbug/stable’ from ‘lz4/1.9.1@bashbug/stable’ ERROR: HTTPSConnectionPool(host=‘conan.bintray.com’, port=443): Max retries exceeded with url: /v1/ping (Caused by SSLError(SSLError(1, ‘[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)’),)) Unable to connect to conan-center=https://conan.bintray.com

1. Make sure the remote is reachable or,
2. Disable it by using conan remote disable, Then try again.

Hi @brucemioo, The problem is you are using https://conan.bintray.com as a remote and that does not work any more, please check: https://docs.conan.io/en/latest/uploading_packages/remotes.html#conancenter

Thanks czoido. I try to change conancenter as https://center.conan.io and check again.

i update conan to 1.44.1 and conan config install https://github.com/conan-io/conanclientcert.git, but i still face this problem and error log is: ERROR: Failed requirement ‘android-toolchain/r20@bashbug/stable’ from ‘lz4/1.9.1@bashbug/stable’ ERROR: HTTPSConnectionPool(host=‘conan.bintray.com’, port=443): Max retries exceeded with url: /v1/ping (Caused by SSLError(SSLError(1, ‘[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)’),))

Unable to connect to conan-center=https://conan.bintray.com

1. Make sure the remote is reachable or,
2. Disable it by using conan remote disable, Then try again.

Hi @brucemioo, The problem is you are using https://conan.bintray.com as a remote and that does not work any more, please check: https://docs.conan.io/en/latest/uploading_packages/remotes.html#conancenter

I’m investigating the broken conan debian installer and found something that can be useful, it is kind of a trick but it works, @uilianries @SSE4:

rm /etc/ssl/certs/DST_Root_CA_X3.pem

https://superuser.com/questions/1679204/curl-on-ubuntu-14-all-lets-encrypt-certificates-are-expired-error-60

conan@9a54bf478845:~$ openssl version OpenSSL 1.0.1f 6 Jan 2014

That one is to old - have no security patches and won’t work with new let’s encrypt certificates. Consider upgrading.

pip has 1.40.3 now. chocolatey is still waiting on 1.40.2 https://community.chocolatey.org/packages/conan#versionhistory

Yeah thew pip one has nothing to do with that, and my connection issues started days / weeks ago. Everything is unrelated. And the thing is, the pipelines in our gitlab repos are constantly building with conan and they install one small library which is missing locally from the conan center, they never failed once (because of that lol). So I think for now everything works

Tnks @Eric-Bwr that works to bypass the center.conan.io. Still facing the SSL issue while trying to install conan 1.*

@Freyenn nano ~/.conan2/remotes.json
“verify_ssl”

Oh good point, I have the work VPN setup across 3 Operating Systems and 2 Computers, so basically everywhere. Its the openvpn feature from Ubuntu 20.04 and 22.04 im using. But I have it turned off almost all the time. I had it on, as I said prev., when I created the screenshot above. But I had the connection issues on my other Computer aswell (they all have the vpn “setup” but not running). When it comes up again I will try to remove the VPN entirely and check if things change. Thank you!

Thank you for the feedback.

It’s working well now.

Amiad

From: James @.> Sent: Wednesday, 6 December 2023 13:33 To: conan-io/conan @.> Cc: Amiad Salton @.>; Comment @.> Subject: Re: [conan-io/conan] [question] Unable to connect to conancenter=https://center.conan.io (#9695)

Hi all, thanks for reporting.

There has been some temporary service disruption due to the CDN, but it is restored now, please try again, and don’t hesitate to report if you still see more issues. Many thanks.

— Reply to this email directly, view it on GitHubhttps://checkpoint.url-protection.com/v1/url?o=https%3A//github.com/conan-io/conan/issues/9695%23issuecomment-1842693532&g=YWI4YTU4MGMwNjE1YzNjZA==&h=ODViNmYwNThiYjNkMjBiMGQ1N2Q4ZGUxMTQ1MmI3ZWQxM2NhMTA1NDFiZjI3MTNlZGQzNTdmZmRiYzRlM2VjZA==&p=Y3AxOmludWl0aXZldGVjaDpjOm86OGRiMDM4NjgzZjQyMmNlNTA3ZjUyMjg1MzZiMjMzOWI6djE6aDpU, or unsubscribehttps://checkpoint.url-protection.com/v1/url?o=https%3A//github.com/notifications/unsubscribe-auth/AILAPVUWRO2Z3TKBAYWI3QTYIBJYFAVCNFSM5FCOOSVKU5DIOJSWCZC7NNSXTN2JONZXKZKDN5WW2ZLOOQ5TCOBUGI3DSMZVGMZA&g=MzUyN2M0ZGRkY2NjYTdmZg==&h=YmYxODE2NmFlYjc5NmIzM2M1OWYyYWNhZGY4NWM0OTU5MzAyMmFhOWJjYTM2OWQyZjEyODU5NDI1NTM4MzRkNg==&p=Y3AxOmludWl0aXZldGVjaDpjOm86OGRiMDM4NjgzZjQyMmNlNTA3ZjUyMjg1MzZiMjMzOWI6djE6aDpU. You are receiving this because you commented.Message ID: @.***>

This email message and any attachments thereto are confidential and/or privileged and/or subject to privacy laws and are intended only for use by the addressee(s) named above. If you are not the intended addressee, you are hereby kindly notified that any dissemination, distribution, copying or use of this email and any attachments thereto is strictly prohibited. If you have received this email in error, kindly delete it from your computer system and notify us at the telephone number or email address appearing above. The writer asserts in respect of this message and attachments all rights for confidentiality, privilege or privacy to the fullest extent permitted by law.

Hi all, thanks for reporting.

There has been some temporary service disruption due to the CDN, but it is restored now, please try again, and don’t hesitate to report if you still see more issues. Many thanks.

Sorry @kiddoneal, is everything working fine? There is no incident in the service at this moment

sorry, What I mean is that if the VPN is on, the dependent library cannot be downloaded. Yes, everything is working fine!

Problem still there:

I’ve been seeing this too for at least an hour.

Problem still there:

The same issue appears during conan install:

ERROR: HTTPSConnectionPool(host='center.conan.io', port=443): Max retries exceeded with url: /v1/ping (Caused by ReadTimeoutError("HTTPSConnectionPool(host='center.conan.io', port=443): Read timed out. (read timeout=60.0)"))

Unable to connect to conancenter=https://center.conan.io
1. Make sure the remote is reachable or,
2. Disable it by using conan remote disable,
Then try again.

Looks like something is broken on server side

$ curl https://center.conan.io/v1/ping   
<html>
<head><title>504 Gateway Time-out</title></head>
<body>
<center><h1>504 Gateway Time-out</h1></center>
<hr><center>nginx/1.21.4</center>
</body>
</html>

It worked a few hours ago

I’ve edited my post to include the command (conan search boost -r conancenter)

Hi @phildue

There are some other tools that could have been affected by the certificate issue, like proxies, VPN, zscaler, etc. It would be great to be able to run without that proxy for a moment, to see if that could be the issue (and talk to your IT if that is it).

Thanks, resolve the problem after VPN close

Hi @phildue

There are some other tools that could have been affected by the certificate issue, like proxies, VPN, zscaler, etc. It would be great to be able to run without that proxy for a moment, to see if that could be the issue (and talk to your IT if that is it).

@Prasaddiwalkar Amazing! Thanks for your feedback!

If anyone is having problems with the deb package certificates, we have just released Conan 1.40.4 that should fix those problems. Please report if the problem persist.

@bbossola thanks for reporting. Verified and created a new issue specifically to track this: https://github.com/conan-io/conan/issues/9714

Something is still wrong with the deb distribution:

root@ci:~# dpkg -i conan-ubuntu-64.deb 
Selecting previously unselected package conan.
(Reading database ... 117219 files and directories currently installed.)
Preparing to unpack conan-ubuntu-64.deb ...
Unpacking conan (1.40.3) ...
Setting up conan (1.40.3) ...

root@ci:~# conan --version
Conan version 1.40.3

root@ci:~# conan search -r=conancenter jsoncpp/*
ERROR: HTTPSConnectionPool(host='center.conan.io', port=443): Max retries exceeded with url: /v1/ping (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)'),))

Unable to connect to conancenter=https://center.conan.io
1. Make sure the remote is reachable or,
2. Disable it by using conan remote disable,
Then try again.

I also tried to install manually the certificates:

root@ci:~# conan config install https://github.com/conan-io/conanclientcert.git
Trying to clone repo: https://github.com/conan-io/conanclientcert.git
Repo cloned!
Copying file LICENSE to /root/.conan/.
Copying file cacert.pem to /root/.conan/.
root@ci:~# conan search -r=conancenter jsoncpp/*
ERROR: HTTPSConnectionPool(host='center.conan.io', port=443): Max retries exceeded with url: /v1/ping (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)'),))

Unable to connect to conancenter=https://center.conan.io
1. Make sure the remote is reachable or,
2. Disable it by using conan remote disable,
Then try again.

Can anybody take a look? Our pipelines are stuck.

For your information, a homebrew formula is just merged.

When can we expect the release on conda?

I see that the dependencies were changed in Conan 1.40. This is solved with conda-forge/conan-feedstock#146

@anders-wind, @uilianries

For any other previous version older than 1.40.3, the new certificate can be installed with:

$ conan config install https://github.com/conan-io/conanclientcert.git

Does this mean every version of conan older than 1.40.3 is broken now unless people take this additional manual step of installing the certificate?