Packages installation issues when using https

Installing and Using OpenWrt
1

Greetings,
Suddenly, when updating the packages using gui or cli, I get the followinbg message:

opkg_download: Failed to download https://downloads.openwrt.org/releases/22.03.0-rc6/packages/mipsel_24kc/routing/Packages.gz, wget returned 5.

I cant even find error 5 when searching....

That happen for all links and result in no packages update and installation (of course).
I notice this post: https://forum.openwrt.org/t/package-download-failed/110219
with this solution from stevennausak:

  1. /etc/opkg/distfeeds.conf- changehttps->http`
  2. from ssh opkg install wget-ssl
  3. from /etc/opkg/distfeeds.conf - change http -> https
  4. from ssh opkg update for test if it work (and it works)

That partially works:
when changing from https to http, I update the router. The wget-ssl was and still is already installed. And I re-installed it.
When I turn http to https and update, I have the same error coming back.
For me, this solution did not help.
Can someone more expert be so kind to suggest me how to permanently solve this issue?
Thank you.
PS
I did not have this problem in the past. Is quite a new issue.. out of the blue really!
Thank you

2

https://www.man7.org/linux/man-pages/man1/wget.1.html

Wget may return one of several error codes if it encounters problems.
0 No problems occurred.
1 Generic error code.
2 Parse error---for instance, when parsing command-lineoptions, the .wgetrc or .netrc...
3 File I/O error.
4 Network failure.
5 SSL verification failure.
6 Username/password authentication failure.
7 Protocol errors.
8 Server issued an error response.

Why not upgrade to a stable version rather than using a release candidate?

2 Likes
3

Hi,
so, after all is an SSL issue.
I cant find the stable release. I follow the site here:

There is a small update again but is still RC
Yet, I dont understand why suddenly SSL verification fails.
I also have 2 other Openwrt router (one is my main router with ISP configuration) and the other is a second dumb AP.
None of them have the issue and all are RC. As I follow the toh openwrt page.
However, maybe I am missing an updated version that is stable?

4

increasing the research I found this site:
https://firmware-selector.openwrt.org/?version=22.03.2&target=ramips%2Fmt7621&id=xiaomi_mi-router-4a-gigabit
by default it gives the latest RC version.
But I noticed I can choose a different version and there are versions NOT rc.
I assume rc6 is the latest.
Would that break SSl verification?

5

Stable version.

1 Like
6

My Bad.. it was under my eyes all along!
Thanks

7

I will install it and will see if the ssl issue will stop.

8

Hi there.
I must say I left this issue alone as had no much priority back than.
I have now installed the stable version but the issue remain.
I even installed the Attended Sysupgrade package (afterf changing the https to http in distfeeds.conf, of course).
Did the upgrade choosing the latest stable (without RC next to the version) 22.03.3
The distfeeds.conf was again with https and therefore my software update list failed again.
Do you or anyone here can have additional way to fix the issue?
Thanks

9

post the whole error message.

is your router using the correct date and time ?

2 Likes
10

That :point_up_2:
If time is not correct, the certificate of the server can be considered invalid and the connection will not be established.

1 Like
11

Now, this is interesting. I rememebr I set NTP servers to have it automatically time and date updates.
Yet, now that you point this out, the all thing is wrong. Now is march 10 2023 13:07. And my system gives:
image
I did not change the default NTP servers and it seems those gives wrong time.
I changed now with ntp.time.nl and the 3 pools from nl.pool.ntp.org and now time is correct and also software update list works.
Thanks a lot people.
Much appreciate

1 Like
12

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.