On 04/11/17 00:25, Gordon Messmer wrote:
On 04/09/2017 11:46 PM, Frédéric Bron wrote:
> First try and apprently maybe a first error (write:errno=104):
OK, errno 104 is ECONNRESET (Connection reset by peer). That might be
because some firewall or router in between your system and the server
is sending a TCP reset packet to disrupt the connection, or it might
be a reset from the server itself.
Either way, I think the possibility of an IPv6 problem is worth
investigating. Close all of your applications, then open two
terminals. In one, run:
$ sudo tcpdump -nn port 443
In the other, run the same s_client command to connect to the python
docs server. Send us the output of tcpdump, describing both a
successful and an unsuccessful connection.
May I suggest that IP address be used instead of the host name?
Suggest the OP does a "host docs.python.org" and then uses the IP
addresses returned.
For example I get this....
docs.python.org is an alias for
python.map.fastly.net.
python.map.fastly.net has address 151.101.0.223
python.map.fastly.net has address 151.101.64.223
python.map.fastly.net has address 151.101.128.223
python.map.fastly.net has address 151.101.192.223
python.map.fastly.net has IPv6 address 2a04:4e42::223
python.map.fastly.net has IPv6 address 2a04:4e42:200::223
python.map.fastly.net has IPv6 address 2a04:4e42:400::223
python.map.fastly.net has IPv6 address 2a04:4e42:600::223
For IPv4 it would be sufficient to use....
openssl s_client -connect 151.101.0.223:443
But for IPv6 the IP address must be enclosed in [ ] brackets like so...
openssl s_client -connect [2a04:4e42::223]:443
This way you can be assured of what address type is being used for testing.
--
Fedora Users List - The place to go to get others to do the work for you