unable to connect to index.crates.io

[R-Goc]

Problem

When attempting to download crates, I get a warning: spurious network error (3 tries remaining): [35] SSL connect error (Recv failure: Connection was reset). After the next tries it causes the install to fail with:
Caused by: [35] SSL connect error (Recv failure: Connection was reset)
This started happening on my new windows 11 machine.

Steps

Clean installation on a new windows 11 system, all updates installed. Attempting to install any crate fails.

Possible Solution(s)

No response

Notes

The toolchain used makes no difference. Already tried setting these options in the global config.toml, based on some previous issues:
[source.crates-io]
index = "https://github.com/rust-lang/crates.io-index" # I set the source to the official github index

[http]
proxy = "" # leaving this as a blank string resets proxy to default
http.check-revoke = false
#check-revoke = false

None of which worked. I am not using Windows defender. I am using Eset antivirus as I was on my previous computer, where I didn't have this problem.

Version

cargo 1.78.0-nightly (fc1d58fd0 2024-02-09)
release: 1.78.0-nightly
commit-hash: fc1d58fd0531a57a6b942a14cdcdbcb82ece16f3
commit-date: 2024-02-09
host: x86_64-pc-windows-msvc
libgit2: 1.7.2 (sys:0.18.2 vendored)
libcurl: 8.6.0-DEV (sys:0.4.71+curl-8.6.0 vendored ssl:Schannel)
os: Windows 10.0.22635 (Windows 11 Core) [64-bit]

[MrMic]

Got the same issue but when I build an image with docker.
The update of index failed due to the same error.
Cannot build Rust App Image anymore ... :(

Any help welcome!
Rgds,

PS: cargo 1.76.0 (c84b367 2024-01-18)

[tusharxoxoxo]

seems to be an similar issue to this one #7096 i guess

[MrMic]

Not at all!
I am on Linux and it is a DNS issue when building an image
with a Rust App. On my host, everything works fine!
It seems that in the Dockerfile, when cargo build is triggered, cargo update
execute first to update the index with crates.io, and it is here I got the issue.
Even more, the initial image is downloaded successfully!

Something is wrong with index.crates.io and their DNS ...

[R-Goc]

For me it turns out that this is caused by curl and not by cargo. Don't know how, but sure.

[CodeDoctorDE]

Got the same issue on my machine.
OS: Windows 11
Installed via rustup-init.exe
Uninstall doesn't help, config values doesn't help

    Updating crates.io index
warning: spurious network error (3 tries remaining): [35] SSL connect error (Recv failure: Connection was reset)
warning: spurious network error (2 tries remaining): [35] SSL connect error (Recv failure: Connection was reset)
warning: spurious network error (1 tries remaining): [35] SSL connect error (Recv failure: Connection was reset)
error: failed to get `ansi_term` as a dependency of package `cargo-leptos v0.2.7`

Caused by:
  download of config.json failed

Caused by:
  failed to download from `https://index.crates.io/config.json`

Caused by:
  [35] SSL connect error (Recv failure: Connection was reset)

When visiting this website using the browser it works.
But when running curl https://index.crates.io/config.json the same issue appears. I have currently no fix but I'm sure it's an issue on the windows/curl site.

> where.exe curl.exe
C:\Windows\System32\curl.exe

But other websites work with curl

> curl https://google.com

The main site crates.io also doesn't work

> curl https://crates.io
curl: (35) Recv failure: Connection was reset

[MrMic]

For me on Linux

$> curl https://crates.io
=> WORKS!

But:
$> curl https://index.crates.io
<Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message><Key>index.html</Key><RequestId>EFEJM9PM6CVJRN9V</RequestId><HostId>iXnil6CJiEMRL4+scgXj AgNJyvrloC3rdfJNc7PU1nzBtflcfKlRSGB5/oDisRBT8N1T7BnNPEM=</HostId></Error>%

is NOT working...

[jdno]

@MrMic The last command works and does exactly what it is supposed to do, namely return HTTP 404 since there is no content hosted at the root of that domain (i.e. /):

$ curl -I https://index.crates.io/
HTTP/2 404

You have to access a specific path to test index.crates.io:

curl -I https://index.crates.io/config.json
HTTP/2 200

The issues you mention with Docker are unrelated to this issue, since your error is Couldn't resolve host name and here it is SSL connect error. I see that you've created rust-lang/rust#121143 and rust-lang/docker-rust#176 to track those.

[jdno]

For the folks with the SSL error, can you run curl with verbose output? That might reveal more details about the kind of SSL error:

curl -Iv https://index.crates.io/config.json

[MrMic]

@jdno You are right about the curl issue; indeed, my DNS issue is still open
and unfortunately not fixed. Something is wrong with the Dockerfile and cargo
build...

[R-Goc]

I located this to the issue being the curl connection, however this only happens on crates.io. It works for every other website.

[jdno]

Can you run curl -Iv https://index.crates.io/config.json to get more details on the SSL error?

[R-Goc]

Sure, here is the output. I'll preface it with saying that using -H"Pragma: no-cache" doesn't really help. The operation succeeds like 1 in 10 or 20.
The output from a failure:

• Trying [2600:9000:25e8:a800:1f:a9f5:69c0:93a1]:443...
• Connected to index.crates.io (2600:9000:25e8:a800:1f:a9f5:69c0:93a1) port 443
• schannel: disabled automatic use of client certificate
• ALPN: curl offers http/1.1
• Recv failure: Connection was reset
• schannel: failed to receive handshake, SSL/TLS connection failed
• Closing connection
• schannel: shutting down SSL/TLS connection with index.crates.io port 443
• Send failure: Connection was reset
• schannel: failed to send close msg: Failed sending data to the peer (bytes written: -1)
  curl: (35) Recv failure: Connection was reset

The output from a success:

• Trying [2600:9000:25e8:a800:1f:a9f5:69c0:93a1]:443...
• Trying 52.222.169.91:443...
• Connected to index.crates.io (52.222.169.91) port 443
• schannel: disabled automatic use of client certificate
• ALPN: curl offers http/1.1
• ALPN: server accepted http/1.1
• using HTTP/1.1

HEAD /config.json HTTP/1.1
Host: index.crates.io
User-Agent: curl/8.4.0
Accept: /

• schannel: remote party requests renegotiation
• schannel: renegotiating SSL/TLS connection
• schannel: SSL/TLS connection renegotiated
  < HTTP/1.1 200 OK
  HTTP/1.1 200 OK
  < Content-Type: application/json
  Content-Type: application/json
  < Content-Length: 76
  Content-Length: 76
  < Connection: keep-alive
  Connection: keep-alive
  < Last-Modified: Mon, 23 May 2022 19:23:53 GMT
  Last-Modified: Mon, 23 May 2022 19:23:53 GMT
  < x-amz-version-id: OLJqOQ3bTJ8rGepGZwmcEkt2gR_Fm1bY
  x-amz-version-id: OLJqOQ3bTJ8rGepGZwmcEkt2gR_Fm1bY
  < Accept-Ranges: bytes
  Accept-Ranges: bytes
  < Server: AmazonS3
  Server: AmazonS3
  < Date: Wed, 21 Feb 2024 19:38:52 GMT
  Date: Wed, 21 Feb 2024 19:38:52 GMT
  < ETag: "7a39851bdb021fcef53172317860f970"
  ETag: "7a39851bdb021fcef53172317860f970"
  < Vary: Accept-Encoding
  Vary: Accept-Encoding
  < X-Cache: Hit from cloudfront
  X-Cache: Hit from cloudfront
  < Via: 1.1 cf82d48fdf484813132bbd9c90904672.cloudfront.net (CloudFront)
  Via: 1.1 cf82d48fdf484813132bbd9c90904672.cloudfront.net (CloudFront)
  < X-Amz-Cf-Pop: CDG52-P2
  X-Amz-Cf-Pop: CDG52-P2
  < X-Amz-Cf-Id: 2VaixxGo5GWVsJaReNE98OmQGBgMVzxMxHuhwUmjeXXkArZejCXOsw==
  X-Amz-Cf-Id: 2VaixxGo5GWVsJaReNE98OmQGBgMVzxMxHuhwUmjeXXkArZejCXOsw==
  < Age: 2222
  Age: 2222

<

• Connection #0 to host index.crates.io left intact