update curl error 16

English Install/Boot/Login
#1

Today I wanted to update Tumbleweed and I received the following message:

**linux-4skc:~ #** zypper dup 
Problem retrieving files from 'openSUSE:Factory'. 
Download (curl) error for 'https://download.opensuse.org/repositories/openSUSE:/Factory/snapshot/repodata/repomd.xml'
: 
Error code: Curl error 16 
Error message:  

Please see the above error message for a hint. 
Warning: Skipping repository 'openSUSE:Factory' because of the above error. 
Problem retrieving files from 'Herbster0815'. 
Download (curl) error for 'https://download.opensuse.org/repositories/home:/Herbster0815/openSUSE_Tumbleweed/repodata
/repomd.xml': 
Error code: Curl error 16 
Error message:  

Please see the above error message for a hint. 
Warning: Skipping repository 'Herbster0815' because of the above error. 
Problem retrieving files from 'Zeronet'. 
Download (curl) error for 'https://download.opensuse.org/repositories/home:/xorcue:/zeronet/openSUSE_Tumbleweed/repod
ata/repomd.xml': 
Error code: Curl error 16 
Error message:  

Please see the above error message for a hint. 
Warning: Skipping repository 'Zeronet' because of the above error. 
Some of the repositories have not been refreshed because of an error. 
Loading repository data...

I could update with the remaining repos which worked but I decided to wait for a while. But approx an hour later I received the same message. I will wait for a while and try again but since the same error is for several repos I wondered what is wrong.

#2

Further I tried:

**linux-4skc:~ #** curl -vvvIL 'https://download.opensuse.org/repositories/openSUSE:/Factory/snapshot/media.1/media' 
*   Trying 2001:67c:2178:8::13:443... 
*   Trying 195.135.221.134:443... 
* Connected to download.opensuse.org (195.135.221.134) port 443 (#0) 
* ALPN, offering h2 
* ALPN, offering http/1.1 
* TLSv1.3 (OUT), TLS handshake, Client hello (1): 
* TLSv1.3 (IN), TLS handshake, Server hello (2): 
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): 
* TLSv1.3 (IN), TLS handshake, Certificate (11): 
* TLSv1.3 (IN), TLS handshake, CERT verify (15): 
* TLSv1.3 (IN), TLS handshake, Finished (20): 
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): 
* TLSv1.3 (OUT), TLS handshake, Finished (20): 
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 
* ALPN, server accepted to use h2 
* Server certificate: 
*  subject: CN=opensuse.org 
*  start date: Oct 29 00:00:05 2021 GMT 
*  expire date: Jan 27 00:00:04 2022 GMT 
*  subjectAltName: host "download.opensuse.org" matched cert's "*.opensuse.org" 
*  issuer: C=US; O=Let's Encrypt; CN=R3 
*  SSL certificate verify ok. 
* Using HTTP2, server supports multiplexing 
* Connection state changed (HTTP/2 confirmed) 
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 
* Using Stream ID: 1 (easy handle 0x55c06be4ce00) 
> HEAD /repositories/openSUSE:/Factory/snapshot/media.1/media HTTP/2 
> Host: download.opensuse.org 
> user-agent: curl/7.80.0 
> accept: */* 
>  
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): 
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): 
* old SSL session ID is stale, removing 
* Empty reply from server 
* Closing connection 0 
* TLSv1.3 (OUT), TLS alert, close notify (256): 
curl: (52) Empty reply from server 
**linux-4skc:~ #**
#3

I see these “curl error 16” errors in Leap 15.3 as well since weeks. Normally repeating “zypper ref” solved these for me. Today no way. Every “zypper ref” shows “curl error 16” for respectively different repos. No chance to refresh all repositories.

The same when doing updates. “curl error 16” all the time when downloading packages. “retry” helped in the past.

Is something broken with curl/libcurl4 or serverside issues?

#4

Yea, I tried a ‘zypper clean’ and a 'zypper ref" without success too

#5

I tried a zypper dup again and this time it is only theHerbster0815 repo which still comes up with the curl error. So I did the update skipping this repo. # times the download stopped with the repo http://download.opensuse.org/tumbleweed/repo/oss [FONT=arial]and I had to select retry. Is it only a bad connection today?
[/FONT]

#6

I don;t know what is going on here, nobody of you knowledgeable guys out there? Still the same the repo Herbster0815 has this curl error. However I can go with the browser into this repository and download files manually. But I cannot manually install - zypper reports the curl error, YAST says it cannot reach the repo and download and using rpm reports dependency problems. I wonder if the servers are effected by a Log4j malware?

#7

Have you tried to open the URL in a browser?

#8

Yes, Sauerland, as I wrote above I opened the URL in a browser and downloaded one of the files in a newer version than the one installed. But as written I couldn’t install/upgrade.

#9

After reading here https://github.com/openSUSE/zypper/issues/399 I did this (as root):

cd /etc/zypp/repos.d
sed -i ‘s|download.opensuse|mirrorcache.opensuse|g’ *.repo

After replacing download.opensuse.org with mirrorcache.opensuse.org the errors are gone.

(Mirrorcache has the advantage that it respects http/https and ipv4/ipv6 when redirecting. As I’m using https everywhere, this might be the reason.)

#10

JFYI, known issue: https://progress.opensuse.org/issues/104193#change-475218

#11

Thank you, httkl and fkrueger for your reply. I am a bit reluctant to change the repos from download to microcache. I am not sure whether it has anything to do with https since I use https only for quite some time and the problem started only with the last update. I have read the links supplied and as far as I understand them (not that I understand all of that) it it does not happen to everyone and there are people working on this problem. Even with my repositories the download.opensuse.org works with the oss and the nonoss repositiry and I don’t want to change that as these are the more important repos. So I wait for now and see how it is going for the next week or two.

#12

Hi
I’ve been using https://mirrorcache-us.opensuse.org for a while now without issue for Main Repository (OSS), Main Update Repository and Hardware SDR. The other is a local repo with rpms I build locally…

#13

thank you, malcolmlewis, after your post I changed the repos as described (but i did a “cp -r repos.d/ repos.d.old” [FONT=arial]before just to be safe. but now I have the followng:

[FONT=monospace]**linux-4skc:~ #** zypper dup 
Retrieving repository 'openSUSE:Factory' metadata ............................................................[error] 
Repository 'openSUSE:Factory' is invalid. 
[https-mirrorcache.opensuse.org-d233bb8b|https://mirrorcache.opensuse.org/repositories/openSUSE:/Factory/snapshot/] V
alid metadata not found at specified URL                                                                              
History:                                                                                                              
 - |] Error trying to read from 'https://mirrorcache.opensuse.org/repositories/openSUSE:/Factory/snapshot/'          
 - Download (curl) error for 'https://mirrorcache.opensuse.org/repositories/openSUSE:/Factory/snapshot/content':      
Error code: Curl error 35                                                                                             
Error message: OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to mirror.firstyear.id.au:443                     
                                                                                                                      
                                                                                                                      
Please check if the URIs defined for this repository are pointing to a valid repository. 
Warning: Skipping repository 'openSUSE:Factory' because of the above error. 
Retrieving repository 'Herbster0815' metadata ................................................................[error] 
Repository 'Herbster0815' is invalid. 
[openSUSE_Tumbleweed_1|https://mirrorcache.opensuse.org/repositories/home:/Herbster0815/openSUSE_Tumbleweed/] Valid m
etadata not found at specified URL                                                                                    
History:                                                                                                              
 - Download (curl) error for 'https://mirrorcache.opensuse.org/repositories/home:/Herbster0815/openSUSE_Tumbleweed/re
podata/611281b9a3ceb86c9bfb4a8b2c779fc7b1d9664cf54901e5f2ea3fad76082acb-primary.xml.gz':                              
Error code: Curl error 35                                                                                             
Error message: OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to mirror.firstyear.id.au:443                     
                                                                                                                      
 - Can't provide ./repodata/611281b9a3ceb86c9bfb4a8b2c779fc7b1d9664cf54901e5f2ea3fad76082acb-primary.xml.gz           
                                                                                                                      
Please check if the URIs defined for this repository are pointing to a valid repository. 
Warning: Skipping repository 'Herbster0815' because of the above error. 
Building repository 'Zeronet' cache ...........................................................................[done] 
Building repository 'openSUSE-Tumbleweed-Non-Oss' cache .......................................................[done] 
Building repository 'openSUSE-Tumbleweed-Oss' cache ...........................................................[done] 
Building repository 'openSUSE-Tumbleweed-Update' cache ........................................................[done] 
Some of the repositories have not been refreshed because of an error. 
Loading repository data... 
Reading installed packages...

As you can see I get another curl error with the factory and the Herbster0815 reos with mirrircache instead of download in the URL This time it is curl error 35

[/FONT]
[/FONT]

#14

Hi
Remove the https://mirrorcache.opensuse.org/repositories/openSUSE:/Factory/snapshot/ repo, that is not required.

https://mirrorcache-us.opensuse.org/tumbleweed/repo/oss/
https://mirrorcache-us.opensuse.org/update/tumbleweed/


zypper -vvv ref -f
zypper -vvv dup
#15

Thanks, malcolmlewis, I deleted the factory snapshot repo (don’t know how it appeared in the repos - maybe with 1 click install) Since the result of the commands is so long I wanted to use susepaste but it says “an error was encountered - are you a spammer” so I just copy it here:

**linux-4skc:~ #** zypper -vvv ref -f 
Verbosity: 3 
Initializing Target 
Specified repositories:  
Forcing raw metadata refresh 
Retrieving: https://mirrorcache.opensuse.org/repositories/home:/Herbster0815/openSUSE_Tumbleweed/media.1/m[not found] 
Retrieving: https://mirrorcache.opensuse.org/repositories/home:/Herbster0815/openSUSE_Tumbleweed/repodata/repom[done] 
Retrieving: https://mirrorcache.opensuse.org/repositories/home:/Herbster0815/openSUSE_Tumbleweed/repodata/repom[done] 
Retrieving: https://mirrorcache.opensuse.org/repositories/home:/Herbster0815/openSUSE_Tumbleweed/repodata/repom[done] 
  Repository:       Herbster0815 
  Key Fingerprint:  29C7 F844 3514 9C42 EE43 8FF0 02BD 4948 C9EC 0F20 
  Key Name:         home:Herbster0815 OBS Project <home:Herbster0815@build.opensuse.org> 
  Key Algorithm:    RSA 2048 
  Key Created:      Thu Jun 25 20:01:54 2020 
  Key Expires:      Sat Sep  3 20:01:54 2022 
  Rpm Name:         gpg-pubkey-c9ec0f20-5ef459f2 
Retrieving: https://mirrorcache.opensuse.org/repositories/home:/Herbster0815/openSUSE_Tumbleweed/r[done (44.0 KiB/s)] 
Retrieving repository 'Herbster0815' metadata .................................................................[done] 
Forcing building of repository cache 
Building repository 'Herbster0815' cache ......................................................................[done] 
Forcing raw metadata refresh 
Retrieving: https://mirrorcache.opensuse.org/repositories/home:/xorcue:/zeronet/openSUSE_Tumbleweed/media.[not found] 
Retrieving: https://mirrorcache.opensuse.org/repositories/home:/xorcue:/zeronet/openSUSE_Tumbleweed/repodata/re[done] 
Retrieving: https://mirrorcache.opensuse.org/repositories/home:/xorcue:/zeronet/openSUSE_Tumbleweed/repodata/re[done] 
Retrieving: https://mirrorcache.opensuse.org/repositories/home:/xorcue:/zeronet/openSUSE_Tumbleweed/repodata/re[done] 
  Repository:       Zeronet 
  Key Fingerprint:  4F27 0F86 E678 459B 9080 2D43 D9C9 F1AA C222 3AE0 
  Key Name:         home:xorcue OBS Project <home:xorcue@build.opensuse.org> 
  Key Algorithm:    RSA 2048 
  Key Created:      Mon May 25 22:36:31 2020 
  Key Expires:      Wed Aug  3 22:36:31 2022 
  Rpm Name:         gpg-pubkey-c2223ae0-5ecb9faf 
....
**linux-4skc:~ #** zypper -vvv dup 
Verbosity: 3 
Initializing Target 
Checking whether to refresh metadata for Herbster0815 
Checking whether to refresh metadata for Zeronet 
Checking whether to refresh metadata for packman 
Checking whether to refresh metadata for openSUSE-Tumbleweed-Non-Oss 
Checking whether to refresh metadata for openSUSE-Tumbleweed-Oss 
Checking whether to refresh metadata for openSUSE-Tumbleweed-Update 
Loading repository data... 
Reading installed packages... 
Warning: You are about to do a distribution upgrade with all enabled repositories. Make sure these repositories are c
ompatible before you continue. See 'man zypper' for more information about this command. 
Computing distribution upgrade... 
Force resolution: No 
Computing upgrade... 

The following 2 packages are going to be upgraded:
  MediathekView-next            
    13.8.2.20211213T125755~2549d484-2.1 -> 13.9.0.20211217T083650~e8c86380-2.1  noarch  Herbster0815 
    obs://build.opensuse.org/home:Herbster0815 
  plasma5-applet-kickoff-legacy 
    1.0.1.20210814T181334~3bcdc46-25.1 -> 1.0.1.20210814T181334~3bcdc46-28.1    x86_64  Herbster0815 
    obs://build.opensuse.org/home:Herbster0815 

2 packages to upgrade. 
Overall download size: 73.3 MiB. Already cached: 0 B. After the operation, 19.0 KiB will be freed. 
**Continue? [y/n/v/...? shows all options] (y): **
committing 
**,,,**

In any case there is after the forcing to build the repository cache the upgrade worked and it downlodaded 2 packages from the herbster0815 repo and completed the update.
What I don’t un derstand are the lines:

Retrieving: https://mirrorcache.opensuse.org/repositories/home:/Herbster0815/openSUSE_Tumbleweed/media.1/m[not found] 
Retrieving: https://mirrorcache.opensuse.org/repositories/home:/Herbster0815/openSUSE_Tumbleweed/repodata/repom[done
....
[FONT=monospace]Retrieving: https://mirrorcache.opensuse.org/repositories/home:/xorcue:/zeronet/openSUSE_Tumbleweed/media.[not found] 
Retrieving: https://mirrorcache.opensuse.org/repositories/home:/xorcue:/zeronet/openSUSE_Tumbleweed/repodata/re[done]
....
Retrieving: ftp://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Tumbleweed/media.1/media ..............[not found] 
Retrieving: ftp://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Tumbleweed/repodata/repomd.xml.asc .........[done]
[/FONT]

Why does it always start looking for the file media before looking for repodata?

#16

Hi
That’s just part of the zypper command, only used on the DVD install and just ignored. As you can see using the -vvv to add some verbosity helps to see what is going on :wink: