FS#22144 - {wiki} stylesheets on the same server?

Attached to Project: Arch Linux
Opened by Kiril Vladimiroff (Vladimiroff) - Sunday, 19 December 2010, 12:47 GMT
Last edited by Pierre Schmitz (Pierre) - Sunday, 08 May 2011, 14:13 GMT
Task Type Bug Report
Category Web Sites
Status Closed
Assigned To Pierre Schmitz (Pierre)
Dan McGee (toofishes)
Architecture All
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
The ArchLinux wiki uses some outsourced stylesheet files from here: https://d11xdyzr0div58.cloudfront.net/wiki-1.16.0/
As it turns this server is not accessible from everywhere. I'm in Bulgaria and I can't access any of these stylesheets:
http://simplest-image-hosting.net/png-0-awcss

Why these css files are not uploaded to the same server, that wiki runs on?
This task depends upon

Closed by  Pierre Schmitz (Pierre)
Sunday, 08 May 2011, 14:13 GMT
Reason for closing:  None
Additional comments about closing:  seems to work; see last comment
Comment by Vacca Muc (vaccaaa) - Wednesday, 20 April 2011, 09:14 GMT
Same problem here in Italy, I cannot access wiki. The only way is to use a proxy by now...
Comment by Dan McGee (toofishes) - Wednesday, 20 April 2011, 13:05 GMT
"In Italy" is overly broad, this isn't some geographic thing, it is either 1) your ISP or 2) your browser settings.

If you go to one of the URLs in question directly [1], what happens? Can you wget/curl it? Are you using a proxy normally? Does the http vs. https scheme work?

[1] https://d11xdyzr0div58.cloudfront.net/wiki-1.16.0/skins/archlinux/main.css?270
Comment by Vacca Muc (vaccaaa) - Wednesday, 20 April 2011, 15:24 GMT
From firefox:

An error occurred during a connection to d11xdyzr0div58.cloudfront.net.

Cannot communicate securely with peer: no common encryption algorithm(s).

(Error code: ssl_error_no_cypher_overlap)

The page you are trying to view can not be shown because the authenticity of the received data could not be verified.
Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.

I think it's an'openDNS failure in giving the right IPs. See here for more information:
http://www.archlinux.it/forum/viewtopic.php?id=11475
No problem at all happens if I use my isp's dns.
Sorry for reporting here, probably I had to report to opendns.
Comment by Dan McGee (toofishes) - Wednesday, 20 April 2011, 15:39 GMT
You didn't also try with with HTTP as asked. If you do, you'll note this has nothing to do with DNS whatsoever and everything to do with sone add-on or setting you tweaked disabling a certain HTTPS SSL cipher Amazon Cloudfront uses. Fix this and all your problems will go away.
Comment by Vacca Muc (vaccaaa) - Wednesday, 20 April 2011, 19:10 GMT
Wget/curl: does not work, neither in https not http (the same happens in the web browser).
I don't use any proxy.
If I activate even more unsecure ciphers the same happens, the wiki does not load. The same happens with other browsers.
If I go on another network or I change my dns (opendns) to anything else (without even activating unsecure ciphers) I can connect to wiki.
This happens because any other dns gives me other IPs corresponding to cloudfront.
ERGO the problem is OpenDNS.
Comment by Dan McGee (toofishes) - Wednesday, 20 April 2011, 19:56 GMT
Sounds like something a tad fishy going on.

By "doesn't work" in HTTP, it would be great to actually have any inclination as to what the error is. `wget -S -O /dev/null <url>` output please for both HTTP and HTTPS.

Know that these URLs are meant to use GeoDNS to get servers close to your location, e.g. you aren't going to see the same IPs to what I see with your ISPs DNS. However, since OpenDNS is not local to you, I wonder if something funky is going on...

$ host d11xdyzr0div58.cloudfront.net
d11xdyzr0div58.cloudfront.net is an alias for d11xdyzr0div58.stl2.cloudfront.net.
d11xdyzr0div58.stl2.cloudfront.net has address 216.137.39.182
d11xdyzr0div58.stl2.cloudfront.net has address 216.137.39.199
d11xdyzr0div58.stl2.cloudfront.net has address 216.137.39.201
d11xdyzr0div58.stl2.cloudfront.net has address 216.137.39.58
d11xdyzr0div58.stl2.cloudfront.net has address 216.137.39.155
d11xdyzr0div58.stl2.cloudfront.net has address 216.137.39.248
d11xdyzr0div58.stl2.cloudfront.net has address 216.137.39.176
d11xdyzr0div58.stl2.cloudfront.net has address 216.137.39.159
Comment by Vacca Muc (vaccaaa) - Wednesday, 20 April 2011, 21:04 GMT
HTTPS:
[vaccaaa@laptop0 ~]$ wget -S -O /dev/null https://d11xdyzr0div58.cloudfront.net/wiki-1.16.0/skins/archlinux/main.css?270
--2011-04-20 22:50:37-- https://d11xdyzr0div58.cloudfront.net/wiki-1.16.0/skins/archlinux/main.css?270
Resolving d11xdyzr0div58.cloudfront.net... 216.137.37.22, 216.137.37.42, 216.137.37.246, ...
Connecting to d11xdyzr0div58.cloudfront.net|216.137.37.22|:443... failed: Connection timed out.
Connecting to d11xdyzr0div58.cloudfront.net|216.137.37.42|:443...

HTTP:
[vaccaaa@laptop0 ~]$ wget -S -O /dev/null http://d11xdyzr0div58.cloudfront.net/wiki-1.16.0/skins/archlinux/main.css?270
--2011-04-20 22:57:37-- http://d11xdyzr0div58.cloudfront.net/wiki-1.16.0/skins/archlinux/main.css?270
Resolving d11xdyzr0div58.cloudfront.net... 216.137.37.248, 216.137.37.228, 216.137.37.125, ...
Connecting to d11xdyzr0div58.cloudfront.net|216.137.37.248|:80... failed: Connection timed out.
Connecting to d11xdyzr0div58.cloudfront.net|216.137.37.228|:80...

This makes me think that these IPs are not accessible from Italy... I'd really like to know WHY :( :(
Comment by Vacca Muc (vaccaaa) - Monday, 25 April 2011, 20:59 GMT
Tested today and everything is working now. OpenDNS gives me the same IPs, so probably the server has now changed his country accessibility settings. Thanks everyone for their support.

Loading...