Error installing on Ubuntu (https://packages.gramineproject.io returns 482 "Idi na khuy")

[wagmiwiz]

I get this error when trying to install on Ubuntu 20. Its the only package url that has this issue.

sudo curl -fsSLo /usr/share/keyrings/gramine-keyring.gpg https://packages.gramineproject.io/gramine-keyring.gpg
curl: (22) The requested URL returned error: 482

Extra verbose output:

sudo curl -v -fsSLo /usr/share/keyrings/gramine-keyring.gpg https://packages.gramineproject.io/gramine-keyring.gpg
*   Trying 2a05:d014:d85:d600:1195:fea4:7adb:3311:443...
* connect to 2a05:d014:d85:d600:1195:fea4:7adb:3311 port 443 failed: Connection refused
*   Trying 3.65.65.67:443...
* Connected to packages.gramineproject.io (3.65.65.67) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* TLSv1.0 (OUT), TLS header, Certificate Status (22):
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.2 (IN), TLS header, Certificate Status (22):
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.2 (IN), TLS header, Finished (20):
{ [5 bytes data]
* TLSv1.2 (IN), TLS header, Supplemental data (23):
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [10 bytes data]
* TLSv1.2 (IN), TLS header, Supplemental data (23):
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [3820 bytes data]
* TLSv1.2 (IN), TLS header, Supplemental data (23):
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [110 bytes data]
* TLSv1.2 (IN), TLS header, Supplemental data (23):
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.2 (OUT), TLS header, Finished (20):
} [5 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS header, Supplemental data (23):
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server did not agree to a protocol
* Server certificate:
*  subject: CN=packages.gramineproject.io
*  start date: Dec 23 23:04:12 2023 GMT
*  expire date: Mar 22 23:04:11 2024 GMT
*  subjectAltName: host "packages.gramineproject.io" matched cert's "packages.gramineproject.io"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* TLSv1.2 (OUT), TLS header, Supplemental data (23):
} [5 bytes data]
> GET /gramine-keyring.gpg HTTP/1.1
> Host: packages.gramineproject.io
> User-Agent: curl/7.81.0
> Accept: */*
> 
* TLSv1.2 (IN), TLS header, Supplemental data (23):
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [57 bytes data]
* TLSv1.2 (IN), TLS header, Supplemental data (23):
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [57 bytes data]
* old SSL session ID is stale, removing
* TLSv1.2 (IN), TLS header, Supplemental data (23):
{ [5 bytes data]
* Mark bundle as not supporting multiuse
< HTTP/1.1 482 Idi na khuy
< cache-control: no-cache
< content-type: text/html
< connection: close
* The requested URL returned error: 482
* Closing connection 0
* TLSv1.2 (IN), TLS header, Supplemental data (23):
{ [5 bytes data]
* TLSv1.3 (IN), TLS alert, close notify (256):
{ [2 bytes data]
* TLSv1.2 (OUT), TLS header, Supplemental data (23):
} [5 bytes data]
* TLSv1.3 (OUT), TLS alert, close notify (256):
} [2 bytes data]
curl: (22) The requested URL returned error: 482

[woju]

482 is founding date of Kiyv (https://en.wikipedia.org/wiki/Kyiv#Founding) and the error is “Іди на х*й”. It's in your extra verbose output:

< HTTP/1.1 482 Idi na [...]

This is the error that people located in Russia or Belarus get when trying to install. People located elsewhere can get an uncensored demo version here: https://packages.gramineproject.io/ru.

To fix this problem, I advise you to relocate, stop paying taxes to the regime and don't fund this genocidal war anymore. If you already did, please post your IP address and why GeoIP is wrong about this particular one. I'll double check. We last updated on 4.02.2024 (3 days ago at the time of writing).

[wagmiwiz]

Thanks for the education @woju. I am however using bare metal cloud provider (OVH) with a server in the UK. A sample address is 57.128.140.216 and it definitely shows up as UK on GeoIP.

[woju]

57.128.140.216 and it definitely shows up as UK on GeoIP.

True, it must have changed between now and last Sunday. I've ran the update manually, please check again. I'm sorry you got caught in false positive.

I'll also update the frequency of updating from once a week to once a day.

[wagmiwiz]

It works now, thank you!