Beta Branch add download_cmd function to check for ECDSA SSL based HTTPS download…

add download_cmd function to check for ECDSA SSL based HTTPS download links in 123.09beta01

Centmin Mod tries to speed up downloads via multi-threaded axel download accelerator instead of single threaded wget. However, axel doesn't support HTTPS based download links which use ECC 256bit SSL ECDSA ssl ciphers due to CentOS system OpenSSL 1.0.1e not supporting them. Only OpenSSL 1.0.2+ supports them. However, compiling time for OpenSSL 1.0.2 would outweight the speed benefits of axel vs wget. This problem was discovered in Install - Installation stuck at Download libressl-2.4.3.tar.gz ... | Page 2 | Centmin Mod Community

The workaround for 123.09beta01 and higher is to wrap the download routines in a download_cmd function which checks the download link's verbose curl'd headers for existence of ECDSA connections. ECDSA will be most common for Cloudflare HTTPS free Universal SSL served HTTPS sites but not limited to just Cloudflare. When the curl'd headers find ECDSA connections, the download_cmd function rewrites and redefines the download client via DOWNLOADAPP variable to switch from axel back to wget.

The workaround is needed as in future more sites will use Cloudflare free SSL, which means greater possibility that 3rd party download links that Centmin Mod relies on will be served via ECDSA based connections of which axel doesn't support. CentOS 7.4 is the slated version for native system OpenSSL 1.0.2+ at which time axel will be compiled against OpenSSL 1.0.2+ system version and thus support ECDSA connections hopefully.

Continue reading...

123.09beta01 branch

• Branch: GitHub - centminmod/centminmod at 123.09beta01
• Commit History: Commits · centminmod/centminmod · GitHub

 

example of axel download error when trying to download from a HTTPS site with ECDSA based ssl certificates i.e. Cloudflare

Code (Text):

axel https://centmin.sh/centminmodparts/ccache/ccache-3.3.2.tar.gz
Initializing download: https://centmin.sh/centminmodparts/ccache/ccache-3.3.2.tar.gz
SSL error: tlsv1 alert internal error