scurl not for downloading qubes-iso

Hi,

I wanted to download a qubes iso with scurl:

scurl-download https://mirrors.edge.kernel.org/qubes/iso/Qubes-R4.2.1-x86_64.iso

but I get this error:

curl: (35) OpenSSL/3.0.11: error:0A000410:SSL routines::sslv3 alert handshake failure
zsh: exit 35    scurl https://mirrors.edge.kernel.org/qubes/iso/Qubes-R4.2.1-x86_64.iso

Is this a configuration error from qubes?

PS: curl-download https://mirrors.edge.kernel.org/qubes/iso/Qubes-R4.2.1-x86_64.iso
is (obviously) working.

Yes.

Mirror issue: TLS issues. Does not support TLSv3.

https://www.ssllabs.com/ssltest/analyze.html?d=mirrors.edge.kernel.org&s=147.75.199.223&latest

Qubes issue: Using mirrors with TLS issues.

1 Like

Thanks! Following the link I saw only 1.2 is supported, so the best workaround I can do is this:

curl-download --tlsv1.2 --location https://mirrors.edge.kernel.org/qubes/iso/Qubes-R4.2.1-x86_64.iso

right?

Yes. Or find a mirror that supports TLSv3.

2 Likes