NixOS build / autoupgrade failing - curl TLS error

NixOS 26.05 - autoupgrade is failing trying to update Veracrypt due to:

error: Cannot build ‘/nix/store/f2f5rqzy19skzfirkb9v571x8axx7pb8-VeraCrypt_1.26.29_Source.tar.bz2.drv’.
: Reason: builder failed with exit code 1.
: Output paths:
: /nix/store/j7nqhv0xdrix69km9g8ibfzddfh8v7dx-VeraCrypt_1.26.29_Source.tar.bz2
: Last 11 log lines:
: > structuredAttrs is enabled
: >
: > trying https://launchpad.net/veracrypt/trunk/1.26.29/+download/VeraCrypt_1.26.29_Source.tar.bz2
: > curl: (35) TLS connect error: error:0A00010B:SSL routines::wrong version number
: > Warning: Problem (retrying all errors). Retrying in 1 second. 3 retries left.
: > curl: (35) TLS connect error: error:0A00010B:SSL routines::wrong version number
: > Warning: Problem (retrying all errors). Retrying in 2 seconds. 2 retries left.
: > curl: (35) TLS connect error: error:0A00010B:SSL routines::wrong version number
: > Warning: Problem (retrying all errors). Retrying in 4 seconds. 1 retry left.
: > curl: (35) TLS connect error: error:0A00010B:SSL routines::wrong version number
: > error: cannot download VeraCrypt_1.26.29_Source.tar.bz2 from any mirror
: For full logs, run:
: nix-store -l /nix/store/f2f5rqzy19skzfirkb9v571x8axx7pb8-VeraCrypt_1.26.29_Source.tar.bz2.drv
: error: Cannot build ‘/nix/store/3ih38rapggdk4lnms3bc8fip1sj2xbk0-veracrypt-1.26.29.drv’.
: Reason: 1 dependency failed.

Unsure if this is an issue with the curl version, or something else.

I’ve been successfully able to build /nix/store/f2f5rqzy19skzfirkb9v571x8axx7pb8-VeraCrypt_1.26.29_Source.tar.bz2.drv (github:NixOS/nixpkgs/2c71881caa0e3828d81107b9083599c236f9edd4#legacyPackages.x86_64-linux.veracrypt.src).

Can you try running the following command?

curl -v -L https://launchpad.net/veracrypt/trunk/1.26.29/+download/VeraCrypt_1.26.29_Source.tar.bz2 >/dev/null
1 Like

Thanks. I initially experienced the same error when following your test, however the error does not occur if I disconnect from the particular VPN server I was using and either select a different one or if I use no VPN connection.

So the problem is related to a particular Windscribe server and is not a NixOS problem.

Thanks for your kind assistance :slight_smile:

I’m having the same issue, on ivpn:

error: Cannot build '/nix/store/snbjviaf0awi484ymy8lm7kh9g9f9nfc-VeraCrypt_1.26.29_Source.tar.bz2.drv'.
       Reason: builder failed with exit code 1.
       Output paths:
         /nix/store/j7nqhv0xdrix69km9g8ibfzddfh8v7dx-VeraCrypt_1.26.29_Source.tar.bz2
       Last 17 log lines:
       > structuredAttrs is enabled
       >
       > trying https://launchpad.net/veracrypt/trunk/1.26.29/+download/VeraCrypt_1.26.29_Source.tar.bz2
       >   % Total    % Received % Xferd  Average Speed  Time    Time    Time   Current
       >                                  Dload  Upload  Total   Spent   Left   Speed
       >   0      0   0      0   0      0      0      0           00:02              0
       > curl: (7) Failed to connect to launchpadlibrarian.net:443 after 136353 ms: Could not connect to server
       > Warning: Problem (retrying all errors). Retrying in 1 second. 3 retries left.
       >   0      0   0      0   0      0      0      0           00:04              0
       > curl: (28) Failed to connect to launchpadlibrarian.net:443 after 134322 ms: Could not connect to server
       > Warning: Problem : timeout. Retrying in 2 seconds. 2 retries left.
       >   0      0   0      0   0      0      0      0           00:03              0
       > curl: (28) Failed to connect to launchpadlibrarian.net:443 after 133769 ms: Could not connect to server
       > Warning: Problem : timeout. Retrying in 4 seconds. 1 retry left.
       >   0      0   0      0   0      0      0      0           00:19              0
       > curl: (7) Failed to connect to launchpadlibrarian.net:443 after 135626 ms: Could not connect to server
       > error: cannot download VeraCrypt_1.26.29_Source.tar.bz2 from any mirror
       For full logs, run:
         nix log /nix/store/snbjviaf0awi484ymy8lm7kh9g9f9nfcVeraCrypt_1.26.29_Source.tar.bz2.drv

I would have never figured out the cause were it not for this thread, because it’s disguised as a timeout.

The irony of the host of a privacy-focused application like Veracrypt declaring war on privacy-focused VPN users is palpable.