Bug #83526

Extension Manager not access repository

Added by Hans-Georg Althoff 6 days ago. Updated about 5 hours ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Extension Manager
Target version:
-
Start date:
2018-01-10
Due date:
% Done:

0%

TYPO3 Version:
8
PHP Version:
7.2
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

I have installed test versions of 8.7.9 and as well as for 9.0. With both versions I get the following error message, if I press the update now button in the Extension Manager:

Could not access remote resource https://repositories.typo3.org/mirrors.xml.gz.

Server: Microsoft Server 2012R2
Internet: IIS
PHP: 7.2 FastCGI

On the same physical Server with my production version Typo3 7.6.23 the extension manager is running without any problem.

With firefox I have access to the URL.
The only useful hint I could found was to set [SYS][curlUse] = 1, but this flag I can find in version 7.6.23 ( where it is nit set) but not in 8.7.9 and also not in 9.0.

Typo3-7.png View (162 KB) Hans-Georg Althoff, 2018-01-11 10:58

curl-test.php View (958 Bytes) Nicole Cordes, 2018-01-11 12:53

History

#1 Updated by Nicole Cordes 6 days ago

  • Status changed from New to Needs Feedback

Hi,

Are your installation use the same PHP version? Maybe your PHP version needs to be updated to be able to handle SSL connection properly?

#2 Updated by Hans-Georg Althoff 6 days ago

All the same. All use the same php installation.

The production version is runnig in inetpub\wwwroot and te test version in inetpub\wwwroot\test8 and inetpub\wwwroot\test9.

#3 Updated by Nicole Cordes 6 days ago

Hi,

Sorry to have to ask again, but are you really sure, that your TYPO3 7.6 installation runs on PHP 7.2? I cannot reproduce any errors, so it is hard to investigate here. Normally, either allow_url_fopen or a missing/wrong cacert path is causing problems with https://repositories.typo3.org

#4 Updated by Hans-Georg Althoff 5 days ago

Yes,
I have running 7.6 under Php 7.2.1 (see attachment).
Due to the fact, that the whole invirenment is the same, it must be something different between the Typo3-versions, atleast in my opinion.

But have just figured out something very strange!!!
If I go to https;//typo3.org and press the extension button I come to https://extensions.typo3.org.
If I try to go to https://extensions.typo3.og via your link above, I get a 403 Forbidden message: You don't have permission to access / on this server. The same happend, when typ in the address directly in firefox.
The link from the page https://typo3.org is https://typo3.org/extensions/repository/

But when I type in https://repositories.typo3.org/mirrors.xml.gz I can download a small file mirrors.xml.gz.
It includes

<?xml version="1.0" encoding="utf-8"?>
<mirrors>
  <mirror>
      <title>TYPO3.org Main Repository</title>
      <host>typo3.org</host>
      <path>/fileadmin/ter/</path>
      <country>DEU</country>
      <sponsor>
        <name>punkt.de GmbH</name>
        <link>http://punkt.de/</link>
    <logo>https://repositories.typo3.org/sponsors/logo-punktde.gif</logo>
      </sponsor>
  </mirror>
</mirrors>

But maybe the problem in access https://repositories.typo3.org directly?

#5 Updated by Hans-Georg Althoff 5 days ago

What also confused me, is the complete text on this 403 Forbidden message is tho port 80. https should be port 443!

Forbidden
You don' have permission to access / on this server

Apache Server at repositories.typo3.org Port 80

#6 Updated by Nicole Cordes 5 days ago

Hi,

As I'm not able to test myself, I wrote a small script to test the curl connection from your site. Would you mind to copy that script to your server (within the installation that does not work) and provide its output after calling it?

Thank you very much.

#7 Updated by Nicole Cordes 5 days ago

Hi,

I just re-run the import locally myself and the real data is coming from https://typo3.org/fileadmin/ter/extensions.md5 and https://typo3.org/fileadmin/ter/extensions.xml.gz. Maybe you can check the connection to those resources as well.

#8 Updated by Hans-Georg Althoff 4 days ago

This is the result from Typo3 8.7.9

Array
(
    [url] => https://repositories.typo3.org/mirrors.xml.gz
    [content_type] => 
    [http_code] => 0
    [header_size] => 0
    [request_size] => 0
    [filetime] => -1
    [ssl_verify_result] => 20
    [redirect_count] => 0
    [total_time] => 0.125
    [namelookup_time] => 0.062
    [connect_time] => 0.078
    [pretransfer_time] => 0
    [size_upload] => 0
    [size_download] => 0
    [speed_download] => 0
    [speed_upload] => 0
    [download_content_length] => -1
    [upload_content_length] => -1
    [starttransfer_time] => 0
    [redirect_time] => 0
    [redirect_url] => 
    [primary_ip] => 91.184.35.5
    [certinfo] => Array
        (
        )

    [primary_port] => 443
    [local_ip] => 10.0.0.1
    [local_port] => 24711
)
60SSL certificate problem: unable to get local issuer certificate

Typo3 V9
Array
(
    [url] => https://repositories.typo3.org/mirrors.xml.gz
    [content_type] => 
    [http_code] => 0
    [header_size] => 0
    [request_size] => 0
    [filetime] => -1
    [ssl_verify_result] => 20
    [redirect_count] => 0
    [total_time] => 0.062
    [namelookup_time] => 1.0E-6
    [connect_time] => 0.016
    [pretransfer_time] => 0
    [size_upload] => 0
    [size_download] => 0
    [speed_download] => 0
    [speed_upload] => 0
    [download_content_length] => -1
    [upload_content_length] => -1
    [starttransfer_time] => 0
    [redirect_time] => 0
    [redirect_url] => 
    [primary_ip] => 91.184.35.5
    [certinfo] => Array
        (
        )

    [primary_port] => 443
    [local_ip] => 10.0.0.1
    [local_port] => 24746
)
60SSL certificate problem: unable to get local issuer certificate

Both links are working fine

Thanks

#9 Updated by Nicole Cordes 4 days ago

Hi,

As you can see, your server has issues with the SSL certificate. You should re-check your configuration an make sure there is a current curl.cainfo set to be able to conntect to https://repositories.typo3.org.

#10 Updated by Hans-Georg Althoff about 5 hours ago

Hi Nicole,

the file ..\php\extras\ssl\cacert.pem was missing. After downloaded it from https://curl.haxx.se/docs/caextract.html and filled in the filename under curl.cainfo = <absolute filename> it works fine.

Thanks for your support,
Hans-Georg

#11 Updated by Wouter Wolters about 5 hours ago

  • Status changed from Needs Feedback to Closed

Closed as the problem has been resolved on the reporter side.

Also available in: Atom PDF