mwg-coordinator.errors.log shows multiple errors while downloading crls

[AlexeyG]

I`m getting errors about http://crl.starfieldtech.com/sfs3-2.crl and http://crl.godaddy.com/gds1-32.crl could not being download. wget from proxy server and downloading with browser via proxy works for this files.

[YashT]

Hello @AlexeyG ,

It seems there is some configuration issue at your environment as you are saying with proper proxy configuration it is getting downloaded.

Could you please let me know what is the error message you are getting while you try to download this file. Also I would suggest to check the Network option while pressing F12, that will give you some error code when you try to download the file.

[AlexeyG]

i`m getting error only when appliance tries to download those crls automatically.

if i "wget" file from appliance via ssh, it downloads, if i use browser to download crl with this appliance being a proxy server, file downloads properly and f12 shows nothing but code 200. during engine updates coordinator logs says:

[UpdateProcessParseResponseHeaderFailed] Failed to parse the response header. Exception: 'CException' error message: 'errno: 104 - 'Connection reset by peer''.
[UpdateProcessParseHeaderResponseFailed] Failed to parse the response header from host because requested url 'http://crl.starfieldtech.com/sfs3-2.crl for file: 05a6db389391df92e0be93fdfa4db1e3cf53903918b8d9d85a9c396cb55df030_0'. [CHTTPUpdateClient::DownloadFile]
[UpdateProcessDownloadFileFailedURL] Failed to download file: 'sfs3-2.crl' from url: 'http://crl.starfieldtech.com/sfs3-2.crl'. [CClusterUpdater::DownloadUpdateFiles]
[UpdateProcessParseResponseHeaderFailed] Failed to parse the response header. Exception: 'CException' error message: 'errno: 104 - 'Connection reset by peer''.
[UpdateProcessParseHeaderResponseFailed] Failed to parse the response header from host because requested url 'http://crl.godaddy.com/gds1-32.crl for file: 09ed6e991fc3273d8fea317d339c02041861973549cfa6e1558f411f11211aa3_0'. [CHTTPUpdateClient::DownloadFile]
[UpdateProcessDownloadFileFailedURL] Failed to download file: 'gds1-32.crl' from url: 'http://crl.godaddy.com/gds1-32.crl'. [CClusterUpdater::DownloadUpdateFiles]
[UpdateProcessFileMissing] File: '05a6db389391df92e0be93fdfa4db1e3cf53903918b8d9d85a9c396cb55df030_0' is missing.   [CUpdateUtils::CreateDirectFilterUpdateMessage]
[UpdateProcessFileMissing] File: '09ed6e991fc3273d8fea317d339c02041861973549cfa6e1558f411f11211aa3_0' is missing.   [CUpdateUtils::CreateDirectFilterUpdateMessage]

all this messages are repeated multiple times. 

[AlexeyG · Accepted solution]

i`ve added 127.0.0.1 as upstream proxy for updates + rule to stopcycle traffic coming from 127.0.0.1 and now appliance can download those crls properly

thats weird, but looks like it works

[YashT]

Hello @AlexeyG ,

I am glad it worked 🙂 .

[ade36]

Hello Alexey , I am having the same issue and i am hoping you can provide some assistance.

Can you please share the steps you did below ?

"I`ve added 127.0.0.1 as upstream proxy for updates + rule to stopcycle traffic coming from 127.0.0.1 and now appliance can download those crls properly"