[cfarm-users] cfarm439,440 blocked by github (probably)

Luke Yasuda jing at jing.rocks
Wed Mar 25 16:23:32 CET 2026


Hi all,

I bring you the unfortunate news: at least cfarm439,440 (FreeBSD) are 
blocked by github, or the combination of those hosts and specific user 
agents are blocked. I'm not entirely sure. cfarm420..438 may also be 
affected. Symptoms are like this:

user agent: /usr/bin/fetch
and using fetch to download anything under *github.com will just hang, 
has to be killed manually. On the other hand, wget or curl may work 
sometimes. On FreeBSD, fetch is a part of the base system, which can 
cause more than inconvenience when the ports collection trying to 
download tarballs from github (via https). On other machines, github 
seems to even block a "git pull" (via https) sometimes ("remote server 
reset the connection"). Using SSH looks fine.

On another note, a few months ago github also returned a mysterious SSL 
version error at my home and I wasn't able to determine the cause. The 
error message said something like "the server's TLS version is not high 
enough" (????). It affected all OSes. It couldn't be reproduce outside 
my home (e.g. on a VPS). But now the SSL error is gone.

There is probably nothing I can do to solve this, unfortunately.

On a side note, openssl on cfarm440 (big endian) on the base system is 
also broken, nothing works over HTTPS connection. I have not yet filed a 
bug report to FreeBSD. The version of openssl in the ports collection 
still works, freshly built, but pretty much everyone links to the 
openssl in the base system, not the ports collection.

Cheers,

-- 
Luke Yasuda
GPG Fingerprint: 4E09 8D19 00AA 3F72 1899 2614 09B3 316E 13A1 1EFC
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: OpenPGP digital signature
URL: <http://lists.tetaneutral.net/pipermail/cfarm-users/attachments/20260326/8ce2e450/attachment.sig>


More information about the cfarm-users mailing list