<html><head></head><body><div class="ydpf67bede8yahoo-style-wrap" style="font-family:verdana, helvetica, sans-serif;font-size:13px;"><div id="ydpf67bede8yiv5940281763"><div><div class="ydpf67bede8yiv5940281763ydpa0074498yahoo-style-wrap" style="font-family:verdana, helvetica, sans-serif;font-size:13px;"><div id="ydpf67bede8yiv5940281763ydpa0074498yiv0626926806"><div><div class="ydpd388f6a2yiv5940281763ydpf55ec590yiv0626926806ydp1463c00dyiv6550403176ydp6cf5dd5fyahoo-style-wrap" style="font-family:verdana, helvetica, sans-serif;font-size:13px;"><div><div dir="ltr" data-setdir="false">I am sharing below the solution I found to correct the problem I was faced with <span> using the Windows 10 OS</span> to <span> download the planet.osm Changesets</span>.</div><div dir="ltr"><br clear="none"></div><div dir="ltr">This <span><b>ssl_error_rx_record_too_long error</b> message arise with https url's while a client application negociate with a TLS server<span><span> to download a file</span></span>. The client is either your navigator or a script with a wget command.</span><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><div><div dir="ltr"><span>While Trying to bypass https and use the http protocol, my file downloaded was corrupted.</span></div></div><div><br clear="none"></div></div><div dir="ltr"><span> <span>ssl_error_rx_record_too_long is an indication of bad hand exchange between the client and server at the beginning of the transaction. </span></span>This is related to how the server or the client are configured and it is possbile to select the protocol for negociation.</div><br clear="none"><div dir="ltr"><div dir="ltr"><div dir="ltr">The Mozilla team suggests if you your navigator have such TLS negociation problem to revise the key <span>security.tls.version.max</span> in about:config from 4 to 3<br clear="none"></div><div dir="ltr"> -> about:config : security.tls.version.max = 3</div><div> https://support.mozilla.org/en-US/questions/1222787<br clear="none"></div><div><br clear="none"></div></div><div dir="ltr">In Windows Powershell, I did force SSL v1.2 with the following instruction.</div></div><div dir="ltr"><div> [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12</div></div><div dir="ltr" data-setdir="false"><span>After Download via the <span><span>wget - Invoke-WebRequest</span></span> instruction, the MD5 checksum was ok. <br clear="none"></span></div><div dir="ltr"><div dir="ltr" data-setdir="false"><span>Also, Test with the pbzip2 -tvv file.osm.bz2 instruction did confirm that the file is ok.</span></div><div dir="ltr" data-setdir="false"><span><br></span></div><div dir="ltr" data-setdir="false"><span>Using the wsl / Ubuntu as an alternative solution, wget error did come yes this time from an agressive firewall.<br></span></div><div><span style="font-style:italic;color:rgb(0, 0, 191);font-weight:bold;"> </span><br clear="none"></div></div><span style="font-style:italic;color:rgb(0, 0, 191);font-weight:bold;"></span><div class="ydpf67bede8yiv5940281763ydpa0074498yiv0626926806ydpc1431f0signature"><span style="font-style:italic;color:rgb(0, 0, 191);font-weight:bold;"><font style="background-color:inherit;" face="garamond, new york, times, serif">Pierre </font><br clear="none"></span></div></div>
<div><br clear="none"><br clear="none"></div>
</div></div></div></div></div></div></div><div class="ydpd388f6a2yiv5940281763yqt6405325945" id="ydpd388f6a2yiv5940281763yqt32126"><div class="ydpd388f6a2yiv5940281763ydpf55ec590yiv0626926806yqt7173172325" id="ydpd388f6a2yiv5940281763ydpf55ec590yiv0626926806yqt43075"><div class="ydpd388f6a2yiv5940281763ydpf55ec590yiv0626926806ydp1463c00dyahoo_quoted" id="ydpd388f6a2yiv5940281763ydpf55ec590yiv0626926806ydp1463c00dyahoo_quoted_1780723175"><div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;"><div><div id="ydpd388f6a2yiv5940281763ydpf55ec590yiv0626926806ydp1463c00dyiv6550403176"><div><div class="ydpd388f6a2yiv5940281763ydpf55ec590yiv0626926806ydp1463c00dyiv6550403176yqt4456149787" id="ydpd388f6a2yiv5940281763ydpf55ec590yiv0626926806ydp1463c00dyiv6550403176yqt66971"><div class="ydpd388f6a2yiv5940281763ydpf55ec590yiv0626926806ydp1463c00dyiv6550403176ydp6cb2168cyahoo_quoted" id="ydpd388f6a2yiv5940281763ydpf55ec590yiv0626926806ydp1463c00dyiv6550403176ydp6cb2168cyahoo_quoted_2585205387">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
Le mardi 26 janvier 2021 03 h 58 min 30 s UTC−5, Stephan Knauss <osm@stephans-server.de> a écrit :
</div>
<div><br clear="none"></div>
<div><br clear="none"></div>
<div><div dir="ltr">Hello Pierre,<br clear="none"><br clear="none">On 26.01.2021 06:05, Pierre Béland via dev wrote:<br clear="none">> I succeed to download changesets-latest.osm.bz2 for 2021-01-01 and 01-22 <br clear="none">> from a Mirror site but the file is not recognized by pbzip2 or python <br clear="none">> bz2file.<br clear="none"><br clear="none">I tried a download and both download and file integrity are fine for me <br clear="none">on this URL:<br clear="none"><a shape="rect" href="https://ftp5.gwdg.de/pub/misc/openstreetmap/planet.openstreetmap.org/planet/changesets-latest.osm.bz2" rel="nofollow" target="_blank">https://ftp5.gwdg.de/pub/misc/openstreetmap/planet.openstreetmap.org/planet/changesets-latest.osm.bz2</a><br clear="none"><br clear="none">Verified with md5:<br clear="none"><a shape="rect" href="https://ftp5.gwdg.de/pub/misc/openstreetmap/planet.openstreetmap.org/planet/changesets-latest.osm.bz2.md5" rel="nofollow" target="_blank">https://ftp5.gwdg.de/pub/misc/openstreetmap/planet.openstreetmap.org/planet/changesets-latest.osm.bz2.md5</a><br clear="none"><br clear="none">ce7a57a2a46c6369f6d286cc385950a5 changesets-latest.osm.bz2<div class="ydpd388f6a2yiv5940281763ydpf55ec590yiv0626926806ydp1463c00dyiv6550403176ydp6cb2168cyqt4960024197" id="ydpd388f6a2yiv5940281763ydpf55ec590yiv0626926806ydp1463c00dyiv6550403176ydp6cb2168cyqtfd40340"><br clear="none"><br clear="none">> Trying to download for 2021-01-22 either with wget or from <br clear="none">> FirefoxxNavigator, the sites below return error code SSL_ERROR_BAD_MAC_READ<br clear="none">> - <br clear="none">> <a shape="rect" href="https://ftp5.gwdg.de/pub/misc/openstreetmap/planet.openstreetmap.org/planet/" rel="nofollow" target="_blank">https://ftp5.gwdg.de/pub/misc/openstreetmap/planet.openstreetmap.org/planet/</a><br clear="none">> - <a shape="rect" href="https://mirror.math.princeton.edu/pub/openstreetmap/planet/" rel="nofollow" target="_blank">https://mirror.math.princeton.edu/pub/openstreetmap/planet/</a><br clear="none">> - <a shape="rect" href="https://ftp.osuosl.org/pub/openstreetmap/planet/" rel="nofollow" target="_blank">https://ftp.osuosl.org/pub/openstreetmap/planet/</a></div><br clear="none"><br clear="none">You indicate that using different software on your end and multiple <br clear="none">servers on the other side it fails including some very unusual SSL <br clear="none">connection problems.<br clear="none"><br clear="none">I think this points towards a problem with your infrastructure.<br clear="none">Could it be that you have an aggressive virus scan intercepting your <br clear="none">network traffic and messing up the file content?<br clear="none"><br clear="none">I don't think this is related to OSM.<br clear="none"><br clear="none">Stephan<br></div></div>
</div>
</div></div></div></div></div>
</div>
</div></div></div></body></html>