geoip zip download fails (bad handshake) sslv3

Started by guest24551, July 02, 2020, 04:25:25 PM

Previous topic - Next topic
Hello all,

I cant download the maxmind geoip database. After entering the URL and apply it, I receive this message in the syslog:

/update_tables.py: geoip update failed : HTTPSConnectionPool(host='download.maxmind.com', port=443): Max retries exceeded with url: /app/geoip_download?edition_id=GeoLite2-Country-CSV&license_key=2sdafwafewa42r3&suffix=zip (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'CONNECT_CR_SRVR_HELLO', 'sslv3 alert handshake failure')])")))

What can I do?

I use the latest opnsense production version with libressl.


I saw that there is an option to uncheck the certificate download for Alias URL's in the Firewall settings. Unfortunately nothing happens. I dont even receive a warning. When I open my browser and paste the URL manually, it's not connecting unless I leave my opnsense network and try it over my ISP's local network.