Re: [leaf-user] some problems with the upgrade script
Am 27.03.2016 um 18:14 schrieb kp kirchdoerfer: > Hi Erich; > ... >>> in /usr/sbin/upgrade solves the problem: >> It looks like sourceforg dropped the redirect support. > > Not shure; as he said the script from the CLI works, as it does on my router. > > > + wget --no-check-certificate -O /tmp/tmp.hXp6Fe > http://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/version?format=raw > + cat /tmp/tmp.hXp6Fe > + VERSION=5.2.4 > > Probably an error only with webconf? Unlikely, but there were some bugs with the return value of upgrade in the past. Unfortunately we only see these one release later. cheers ET -- Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785471=/4140 leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] some problems with the upgrade script
Hi Erich; Am Sonntag, 27. März 2016, 16:17:52 schrieb Erich Titl: > Hi Mark > > Am 27.03.2016 um 06:13 schrieb Mark Berndt: > > No luck with the web interface, > > running ugrgrade from the command line shows: > > > > firewall# upgrade -vvv -c > > upgrade: opening ports 80 and 443 for upgrade > > upgrade: Installed version is 5.2.5-rc2 > > upgrade: retrieve > > http://sourceforge.net/p/leaf/packages/ci/master/tree/stable[1] upgrade: > > retrieve > > http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget > > returned 1 upgrade: retrieve > > http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget > > returned 1 upgrade: retrieve > > http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget > > returned 1 upgrade: retrieve > > http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget > > returned 1 upgrade: retrieve > > http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget > > returned 1 aborting: retrieve > > http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget > > returned 1 upgrade: abort retrieve > > http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget > > returned 1 upgrade: cleaning up > > upgrade: restoring firewall > > > > wget fails: > > > > firewall# wget > > http://sourceforge.net/p/leaf/packages/ci/master/tree/stable > > Connecting to sourceforge.net (216.34.181.60:80) > > wget: can't connect to remote host (216.34.181.60): Connection refused > > This is due to firewall rules, within uprade, these should be modified. > The failure stems probably from a wget version not supporting https. > > > wget with https succeeds: > > > > > > firewall# wget > > https://sourceforge.net/p/leaf/packages/ci/master/tree/stable[2] > > Connecting to sourceforge.net (216.34.181.60:443) > > stable 100% | > > ** > > **| > > 19293 0:00:00 ETA > > firewall# > > > > changing the LEAFURL_STUB=https://sourceforge.net/p/leaf/packages/ci > > > in /usr/sbin/upgrade solves the problem: > It looks like sourceforg dropped the redirect support. Not shure; as he said the script from the CLI works, as it does on my router. + wget --no-check-certificate -O /tmp/tmp.hXp6Fe http://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/version?format=raw + cat /tmp/tmp.hXp6Fe + VERSION=5.2.4 Probably an error only with webconf? > > firewall# upgrade -vvv -c > > upgrade: opening ports 80 and 443 for upgrade > > upgrade: Installed version is 5.2.5-rc2 > > upgrade: retrieve > > https://sourceforge.net/p/leaf/packages/ci/master/tree/stable > > upgrade: stable version is 5.2.4 > > upgrade: check_remote > > https://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/version[3] > > upgrade: retrieve > > https://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/version > > upgrade: stable version is 5.2.4 > > 5.2.4 > > upgrade: retrieve > > https://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/i386/sha1sum.list[4] > > upgrade: fetched sha1sum.list from LEAF repository > > upgrade: cleaning up > > upgrade: restoring firewall > > upgrade: upgrade terminated successfully > > OK so the upgrade version in 5.2.5-rc2 handles the situation correctly. > The situation with sourceforge is really annoying. I have not seen any > announcement for the current behaviour. When I started to write upgrade > everything worke fine using httdp then about five months ago I saw that > some, not all, requests were redirected. Now it appears that http is not > supported anymore. kp -- Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785351=/4140 leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] some problems with the upgrade script
Hi John Am 26.03.2016 um 23:22 schrieb John Sager: The busybox distribution includes two versions of ssl_helper. One uses a library from matrixssl, and the other from wolfssl. However neither will build automatically with busybox. Some work would be needed to integrate a build of ssl_helper and one or other of the ssl libraries into the Bering build environment. For a short term solution I would either use wget.lrp, which now supports ssl or add openssl to the packages. In the mid to long term we may have something a bit lighter. Thanks ET smime.p7s Description: S/MIME Cryptographic Signature -- Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785351=/4140 leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] some problems with the upgrade script
Hi Mark Am 27.03.2016 um 06:13 schrieb Mark Berndt: No luck with the web interface, running ugrgrade from the command line shows: firewall# upgrade -vvv -c upgrade: opening ports 80 and 443 for upgrade upgrade: Installed version is 5.2.5-rc2 upgrade: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable[1] upgrade: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 upgrade: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 upgrade: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 upgrade: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 upgrade: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 aborting: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 upgrade: abort retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 upgrade: cleaning up upgrade: restoring firewall wget fails: firewall# wget http://sourceforge.net/p/leaf/packages/ci/master/tree/stable Connecting to sourceforge.net (216.34.181.60:80) wget: can't connect to remote host (216.34.181.60): Connection refused This is due to firewall rules, within uprade, these should be modified. The failure stems probably from a wget version not supporting https. wget with https succeeds: firewall# wget https://sourceforge.net/p/leaf/packages/ci/master/tree/stable[2] Connecting to sourceforge.net (216.34.181.60:443) stable 100% | ** **| 19293 0:00:00 ETA firewall# changing the LEAFURL_STUB=https://sourceforge.net/p/leaf/packages/ci in /usr/sbin/upgrade solves the problem: It looks like sourceforg dropped the redirect support. firewall# upgrade -vvv -c upgrade: opening ports 80 and 443 for upgrade upgrade: Installed version is 5.2.5-rc2 upgrade: retrieve https://sourceforge.net/p/leaf/packages/ci/master/tree/stable upgrade: stable version is 5.2.4 upgrade: check_remote https://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/version[3] upgrade: retrieve https://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/version upgrade: stable version is 5.2.4 5.2.4 upgrade: retrieve https://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/i386/sha1sum.list[4] upgrade: fetched sha1sum.list from LEAF repository upgrade: cleaning up upgrade: restoring firewall upgrade: upgrade terminated successfully OK so the upgrade version in 5.2.5-rc2 handles the situation correctly. The situation with sourceforge is really annoying. I have not seen any announcement for the current behaviour. When I started to write upgrade everything worke fine using httdp then about five months ago I saw that some, not all, requests were redirected. Now it appears that http is not supported anymore. Thanks ET smime.p7s Description: S/MIME Cryptographic Signature -- Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785351=/4140 leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] some problems with the upgrade script
No luck with the web interface, running ugrgrade from the command line shows: firewall# upgrade -vvv -c upgrade: opening ports 80 and 443 for upgrade upgrade: Installed version is 5.2.5-rc2 upgrade: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable[1] upgrade: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 upgrade: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 upgrade: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 upgrade: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 upgrade: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 aborting: retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 upgrade: abort retrieve http://sourceforge.net/p/leaf/packages/ci/master/tree/stable, wget returned 1 upgrade: cleaning up upgrade: restoring firewall wget fails: firewall# wget http://sourceforge.net/p/leaf/packages/ci/master/tree/stable Connecting to sourceforge.net (216.34.181.60:80) wget: can't connect to remote host (216.34.181.60): Connection refused wget with https succeeds: firewall# wget https://sourceforge.net/p/leaf/packages/ci/master/tree/stable[2] Connecting to sourceforge.net (216.34.181.60:443) stable 100% | ** **| 19293 0:00:00 ETA firewall# changing the LEAFURL_STUB=https://sourceforge.net/p/leaf/packages/ci in /usr/sbin/upgrade solves the problem: firewall# upgrade -vvv -c upgrade: opening ports 80 and 443 for upgrade upgrade: Installed version is 5.2.5-rc2 upgrade: retrieve https://sourceforge.net/p/leaf/packages/ci/master/tree/stable upgrade: stable version is 5.2.4 upgrade: check_remote https://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/version[3] upgrade: retrieve https://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/version upgrade: stable version is 5.2.4 5.2.4 upgrade: retrieve https://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/i386/sha1sum.list[4] upgrade: fetched sha1sum.list from LEAF repository upgrade: cleaning up upgrade: restoring firewall upgrade: upgrade terminated successfully On Sun, 27 Mar 2016 02:38:37 PM Mark Berndt wrote: > the script works with 5.2.5-rc2, thanks for the information. > > There are no execute bits on save.cgi & upgrade.cgi > > firewall# cat /etc/issue > Linux 4.1.19-i686 #1 SMP Thu Mar 17 18:57:49 CET 2016 > LEAF Bering-uClibc 5.2.5-rc2 Rev 1 uClibc 0.9.33.2 \n \l > firewall# > > firewall# ls -l *.cgi > -rwxr-xr-x1 root root 1971 Mar 17 19:06 connection-info.cgi > -rwxr-xr-x1 root root 2049 Mar 17 19:06 > connection6-info.cgi -rwxrwxr-x1 root root 10342 Mar 16 > 15:00 dnsmasq.cgi -rwxrwxr-x1 root root 4001 Mar 16 15:00 > dropbear.cgi -rwxr-xr-x1 sh-httpd wheel 4652 Mar 17 19:06 > general-info.cgi -rwxr-xr-x1 sh-httpd nogroup375 Mar 17 19:06 > index.cgi -rwxr-xr-x1 root root 9403 Mar 17 19:06 > interfaces.cgi -rwxrwxr-x1 root root 2264 Mar 16 15:00 > leafcfg.cgi -rwxr-xr-x1 root root 6805 Mar 17 19:06 > logfiles.cgi -rwxr-xr-x1 root root 6606 Mar 17 19:06 > lrcfg.back.cgi -rwxrwxr-x1 root root 5787 Mar 16 15:00 > lrcfg.cgi -rwxr-xr-x1 root root 3765 Mar 17 19:06 ping.cgi > -rwxrwxr-x1 root root 3518 Mar 16 15:00 pppoe.cgi > -rwxr-xr-x1 root root 410 Mar 17 19:06 reboot.cgi > -rw-r--r--1 root root 3372 Mar 17 19:06 save.cgi > -rwxr-xr-x1 root root 2791 Mar 17 19:06 tracert.cgi > -rw-r--r--1 root root 3472 Mar 17 19:06 upgrade.cgi > -rwxr-xr-x1 root root 3957 Mar 17 19:06 vlan.cgi > -rwxr-xr-x1 root root 1926 Mar 17 19:06 wc-passwd.cgi > > > > > -- Transform Data into Opportunity. > Accelerate data analysis in your applications with > Intel Data Analytics Acceleration Library. > Click to learn more. > http://pubads.g.doubleclick.net/gampad/clk?id=278785351=/4140 > > leaf-user mailing list: leaf-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/leaf-user > Support Request -- http://leaf-project.org/ [1] http://sourceforge.net/p/leaf/packages/ci/master/tree/stable [2] https://sourceforge.net/p/leaf/packages/ci/master/tree/stable [3] https://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/version [4] https://sourceforge.net/p/leaf/packages/ci/5.2.4/tree/i386/sha1sum.list -- Transform Data into Opportunity. Accelerate
Re: [leaf-user] some problems with the upgrade script
the script works with 5.2.5-rc2, thanks for the information. There are no execute bits on save.cgi & upgrade.cgi firewall# cat /etc/issue Linux 4.1.19-i686 #1 SMP Thu Mar 17 18:57:49 CET 2016 LEAF Bering-uClibc 5.2.5-rc2 Rev 1 uClibc 0.9.33.2 \n \l firewall# firewall# ls -l *.cgi -rwxr-xr-x1 root root 1971 Mar 17 19:06 connection-info.cgi -rwxr-xr-x1 root root 2049 Mar 17 19:06 connection6-info.cgi -rwxrwxr-x1 root root 10342 Mar 16 15:00 dnsmasq.cgi -rwxrwxr-x1 root root 4001 Mar 16 15:00 dropbear.cgi -rwxr-xr-x1 sh-httpd wheel 4652 Mar 17 19:06 general-info.cgi -rwxr-xr-x1 sh-httpd nogroup375 Mar 17 19:06 index.cgi -rwxr-xr-x1 root root 9403 Mar 17 19:06 interfaces.cgi -rwxrwxr-x1 root root 2264 Mar 16 15:00 leafcfg.cgi -rwxr-xr-x1 root root 6805 Mar 17 19:06 logfiles.cgi -rwxr-xr-x1 root root 6606 Mar 17 19:06 lrcfg.back.cgi -rwxrwxr-x1 root root 5787 Mar 16 15:00 lrcfg.cgi -rwxr-xr-x1 root root 3765 Mar 17 19:06 ping.cgi -rwxrwxr-x1 root root 3518 Mar 16 15:00 pppoe.cgi -rwxr-xr-x1 root root 410 Mar 17 19:06 reboot.cgi -rw-r--r--1 root root 3372 Mar 17 19:06 save.cgi -rwxr-xr-x1 root root 2791 Mar 17 19:06 tracert.cgi -rw-r--r--1 root root 3472 Mar 17 19:06 upgrade.cgi -rwxr-xr-x1 root root 3957 Mar 17 19:06 vlan.cgi -rwxr-xr-x1 root root 1926 Mar 17 19:06 wc-passwd.cgi -- Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785351=/4140 leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] some problems with the upgrade script
The busybox distribution includes two versions of ssl_helper. One uses a library from matrixssl, and the other from wolfssl. However neither will build automatically with busybox. Some work would be needed to integrate a build of ssl_helper and one or other of the ssl libraries into the Bering build environment. regards, John On 26/03/16 17:10, kp kirchdoerfer wrote: > > even the busybox wget provided supports ssl, but it'll require openssl. > I wasn't aware of the auxillary ssl_helper, definitely worth to look at it. > > thx for the detailed and valuable feedback > kp > -- Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785351=/4140 leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] some problems with the upgrade script
Hi John; Am Samstag, 26. März 2016, 15:30:21 schrieb John Sager: > I am using the same version - 5.2.4 Rev 1. I loaded wget.lrp and resolved > its dependencies manually (I don't normally use it), and it's not built with > https support. Downloading the latest wget from sourceforge and resolving > its extra dependencies manually (libcrypto & libssl), it now fails on the > certificate check. wget needs the option > --no-check-certificate. I hacked on /usr/sbin/upgrade to add > 'alias wget="wget --no-check-certificate"' and 'upgrade -c' then works > correctly. You are right. After 5.24. has been released Sourceforge deciced to replace http with https only. Therefor upgrade in version 5.2.4 seems to fail. With 5.25-rc1 upgrade has been updated with the wget option you have mentioned above for a given reason... In addition to wget we have had wget-ssl, since wget without ssl support has been a lot smaller for size-constraint environments. We've removed wget w/o ssl in 5.2.5-rc1 for security reasons, believing that size isn't as important as in the old days of floppy uasage and to have *one* wget package that really works with upgrade. So in short - testing upgrade only makes sense, if one tries to upgrade from 5.2.5-rc1. > I guess the real solution is a version of busybox where its wget supports > https. The latest busybox (1.24.2) does appear to support https but it does > it either via openssl (very heavy on libraries) or via a small auxiliary > program ssl_helper which is statically linked against a small SSL library. even the busybox wget provided supports ssl, but it'll require openssl. I wasn't aware of the auxillary ssl_helper, definitely worth to look at it. thx for the detailed and valuable feedback kp -- Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785351=/4140 leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] some problems with the upgrade script
I am using the same version - 5.2.4 Rev 1. I loaded wget.lrp and resolved its dependencies manually (I don't normally use it), and it's not built with https support. Downloading the latest wget from sourceforge and resolving its extra dependencies manually (libcrypto & libssl), it now fails on the certificate check. wget needs the option --no-check-certificate. I hacked on /usr/sbin/upgrade to add 'alias wget="wget --no-check-certificate"' and 'upgrade -c' then works correctly. I guess the real solution is a version of busybox where its wget supports https. The latest busybox (1.24.2) does appear to support https but it does it either via openssl (very heavy on libraries) or via a small auxiliary program ssl_helper which is statically linked against a small SSL library. regards, John On 26/03/16 13:14, Erich Titl wrote: > Hi Marco > > thank you for the feedback > > Am 26.03.2016 um 12:09 schrieb Mark Berndt: >> Hello, I'm on 5.2.4 rev 1 and trying to use the upgrade script. >> >> I have tried both the busybox wget and also the wget.lrp package, both fail. >> >> Here is the output of the upgrade with wget from wget.lrp: > > Sourceforge has moved to https (for some URL's) so your 5.2.4-rc1 wget > might not support it. In any case, sourceforge will redirect to https. > >> >> firewall# cat /etc/issue >> Linux 4.1.16-i686 #1 SMP Thu Feb 4 18:41:25 CET 2016 >> LEAF Bering-uClibc 5.2.4 Rev 1 uClibc 0.9.33.2 \n \l >> >> firewall# upgrade -c -v --latest >> aborting: retrieve >> http://sourceforge.net/p/leaf/packages/ci/master/tree/latest >> upgrade: abort retrieve >> http://sourceforge.net/p/leaf/packages/ci/master/tree/latest > > Could you use -vvv to have more debug output. Sourceforge appears to > have heavy hickups lately, possibly caused by DDOS. This may be another > reason for the errors you see. > > For diagnostics try to open leaf.sourceforge.net in a browser, > >> >> If I make a shorewall rule for >> HTTP(ACCEPT) fw net > > This should not be necessary, as upgrade is opening the the same > connection temporarily. > ... > >> firewall# upgrade -c -v >> aborting: wget error code 0 >> upgrade: abort wget error code 0 > > So basically, it you are using wget from busybox, you need openssl > installed. I am not sure if wget from 5.2.4-rc1 supports https :-( > >> >> >> Also, the upgrade.cgi was not marked as executable. > > Mhhh... need to verify > > cheers > > ET > > > -- > Transform Data into Opportunity. > Accelerate data analysis in your applications with > Intel Data Analytics Acceleration Library. > Click to learn more. > http://pubads.g.doubleclick.net/gampad/clk?id=278785351=/4140 > > leaf-user mailing list: leaf-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/leaf-user > Support Request -- http://leaf-project.org/ > -- Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785351=/4140 leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] some problems with the upgrade script
Hi Marco thank you for the feedback Am 26.03.2016 um 12:09 schrieb Mark Berndt: > Hello, I'm on 5.2.4 rev 1 and trying to use the upgrade script. > > I have tried both the busybox wget and also the wget.lrp package, both fail. > Here is the output of the upgrade with wget from wget.lrp: Sourceforge has moved to https (for some URL's) so your 5.2.4-rc1 wget might not support it. In any case, sourceforge will redirect to https. > > firewall# cat /etc/issue > Linux 4.1.16-i686 #1 SMP Thu Feb 4 18:41:25 CET 2016 > LEAF Bering-uClibc 5.2.4 Rev 1 uClibc 0.9.33.2 \n \l > > firewall# upgrade -c -v --latest > aborting: retrieve > http://sourceforge.net/p/leaf/packages/ci/master/tree/latest > upgrade: abort retrieve > http://sourceforge.net/p/leaf/packages/ci/master/tree/latest Could you use -vvv to have more debug output. Sourceforge appears to have heavy hickups lately, possibly caused by DDOS. This may be another reason for the errors you see. For diagnostics try to open leaf.sourceforge.net in a browser, > > If I make a shorewall rule for > HTTP(ACCEPT) fw net This should not be necessary, as upgrade is opening the the same connection temporarily. ... > firewall# upgrade -c -v > aborting: wget error code 0 > upgrade: abort wget error code 0 So basically, it you are using wget from busybox, you need openssl installed. I am not sure if wget from 5.2.4-rc1 supports https :-( > > > Also, the upgrade.cgi was not marked as executable. Mhhh... need to verify cheers ET -- Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785351=/4140 leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/