[R-sig-Debian] Fwd: issue

[Luca Braglia]

Dear all,

i contact you for an issue I encountered after a little time I didn't
developed/checked packages at work.

The issue I have is from R CMD check:

 > tools:::.check_packages()
* using log directory ‘/home/l/src/rpkg/lbmisc.Rcheck’
* using R version 3.3.2 (2016-10-31)
* using platform: x86_64-pc-linux-gnu (64-bit)
* using session charset: UTF-8
* using options ‘--no-build-vignettes --as-cran’
* checking for file ‘lbmisc/DESCRIPTION’ ... OK
* this is package ‘lbmisc’ version ‘0.3.0’
* checking CRAN incoming feasibility ...*   Trying 172.23.0.30...
* TCP_NODELAY set
* Connected to (nil) (172.23.0.30) port 8080 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@
STRENGTH
* successfully set certificate verify locations:
*   CAfile: none
   CApath: /etc/ssl/certs
* error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
* Curl_http_done: called premature == 0
* Closing connection 0
*   Trying 172.23.0.30...
* TCP_NODELAY set
* Connected to (nil) (172.23.0.30) port 8080 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@
STRENGTH
* successfully set certificate verify locations:
*   CAfile: none
   CApath: /etc/ssl/certs

... and now it freezes / goes in timeout..

* Operation timed out after 300000 milliseconds with 0 out of 0 bytes
received
* Curl_http_done: called premature == 1
* stopped the pause stream!
* Closing connection 0
*   Trying 172.23.0.30...
* TCP_NODELAY set
* Connected to (nil) (172.23.0.30) port 8080 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@
STRENGTH
* successfully set certificate verify locations:
*   CAfile: none
   CApath: /etc/ssl/certs
* error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
* Curl_http_done: called premature == 0
* Closing connection 0
*   Trying 172.23.0.30...
* TCP_NODELAY set
* Connected to (nil) (172.23.0.30) port 8080 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@
STRENGTH
* successfully set certificate verify locations:
*   CAfile: none
   CApath: /etc/ssl/certs

... timeout again...

In essence R CMD check became somewhat unusable due to network issues..

I think basically there are download troubles above; I googled a bit
the messages and found they're curl-related. I reproduced them with, say

 > download.file('https://cran.r-project.org/manuals.html',
                 destfile = '/tmp/test.html',
                method = 'libcurl')
*   Trying 172.23.0.30...
* TCP_NODELAY set
* Connected to (nil) (172.23.0.30) port 8080 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@
STRENGTH
* successfully set certificate verify locations:
*   CAfile: none
   CApath: /etc/ssl/certs
* error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
* Curl_http_done: called premature == 0
* Closing connection 0
*   Trying 172.23.0.30...
* TCP_NODELAY set
* Connected to (nil) (172.23.0.30) port 8080 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@
STRENGTH
* successfully set certificate verify locations:
*   CAfile: none
   CApath: /etc/ssl/certs

I think it's a certificate problem (eg CAfile is not none at home) but I
have the certs installed

l at m740n:~$ dpkg -l |grep ca-certificates
ii  ca-certificates       20161130             all          Common CA
certificates

l at m740n:~$ head /etc/ssl/certs/ca-certificates.crt
-----BEGIN CERTIFICATE-----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Looking at ?download.file i've tried setting manually

CURL_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt

in .Renviron, but without success

 > tools:::.check_packages()
* using log directory ‘/home/l/src/rpkg/lbmisc.Rcheck’
* using R version 3.3.2 (2016-10-31)
* using platform: x86_64-pc-linux-gnu (64-bit)
* using session charset: UTF-8
* using options ‘--no-build-vignettes --as-cran’
* checking for file ‘lbmisc/DESCRIPTION’ ... OK
* this is package ‘lbmisc’ version ‘0.3.0’
* checking CRAN incoming feasibility ...*   Trying 172.23.0.30...
* TCP_NODELAY set
* Connected to (nil) (172.23.0.30) port 8080 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@
STRENGTH
* successfully set certificate verify locations:
*   CAfile: none
   CApath: /etc/ssl/certs

Finally i'm behind a proxy at work but shouldn't be a proxy config
issue since Sys.getenv('https_proxy') and Sys.getenv('http_proxy') are
set correctly.

So, this goes definitely beyond my troubleshooting abilities; do you
have any hint here?

any thanks, Luca

	[[alternative HTML version deleted]]