OPNsense Forum

Archive => 20.7 Legacy Series => Topic started by: guest24551 on July 02, 2020, 04:25:25 PM

Title: geoip zip download fails (bad handshake) sslv3
Post by: guest24551 on July 02, 2020, 04:25:25 PM
Hello all,

I cant download the maxmind geoip database. After entering the URL and apply it, I receive this message in the syslog:

/update_tables.py: geoip update failed : HTTPSConnectionPool(host='download.maxmind.com', port=443): Max retries exceeded with url: /app/geoip_download?edition_id=GeoLite2-Country-CSV&license_key=2sdafwafewa42r3&suffix=zip (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'CONNECT_CR_SRVR_HELLO', 'sslv3 alert handshake failure')])")))

What can I do?

I use the latest opnsense production version with libressl.

Title: Re: geoip zip download fails (bad handshake) sslv3
Post by: guest24551 on July 07, 2020, 03:58:04 PM
I saw that there is an option to uncheck the certificate download for Alias URL's in the Firewall settings. Unfortunately nothing happens. I dont even receive a warning. When I open my browser and paste the URL manually, it's not connecting unless I leave my opnsense network and try it over my ISP's local network.