Hi,

> There are two different issues that have been brought up.  The installer 
> program is required to use a mirror to download the latest release (4.16.1) 
> per Apache policy.  The installer is failing to fetch the mirror information 
> over HTTPS.  We have asked for help from the original developer of our HTTPS 
> handling code.

I don’t believe this is only an AIR HTTPS issue.

Try:
curl -v 
http://apache.melbourneitmirror.net/flex/4.16.1/binaries/apache-flex-sdk-installer-config.xml

(and you see it works)

But:
curl -v 
https://apache.melbourneitmirror.net/flex/4.16.1/binaries/apache-flex-sdk-installer-config.xml

Will fail with:

*   Trying 202.124.241.168...
* TCP_NODELAY set
* Connected to apache.melbourneitmirror.net (202.124.241.168) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/cert.pem
  CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS alert, Server hello (2):
* error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake 
failure
* stopped the pause stream!
* Closing connection 0
curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert 
handshake failure

So wouldn't the easy fix be just get the config file over http?

Thanks,
Justin

Reply via email to