Zorin 18 suddenly software updater fails with TLS errors

General Help
1

All of sudden Zorn 18 software updater started to just hang and after a while it would return an error.

I removed UFW.
I opened a command windows and run sudo apt update and the following are the errors I'm getting(I can only post 5 of the errors due to new user limitation:

laptop:~$ sudo apt update
[sudo] password for dave:

W: Failed to fetch http://us.archive.ubuntu.com/ubuntu/dists/noble-backports/InRelease Connection failed [IP: 91.189.91.82 80]
W: Failed to fetch https://ppa.launchpadcontent.net/zorinos/apps/ubuntu/dists/noble/InRelease Could not handshake: The TLS connection was non-properly terminated. [IP: 185.125.189.188 443]
W: Failed to fetch https://ppa.launchpadcontent.net/zorinos/drivers/ubuntu/dists/noble/InRelease Could not handshake: The TLS connection was non-properly terminated. [IP: 185.125.189.188 443]
W: Failed to fetch https://ppa.launchpadcontent.net/zorinos/patches/ubuntu/dists/noble/InRelease Could not handshake: The TLS connection was non-properly terminated. [IP: 185.125.189.188 443]
W: Failed to fetch https://ppa.launchpadcontent.net/zorinos/stable/ubuntu/dists/noble/InRelease Could not handshake: The TLS connection was non-properly terminated. [IP: 185.125.189.188 443]
W: Some index files failed to download. They have been ignored, or old ones used instead.

2

Hello and welcome,
Did you try first to reboot and launch an update after ?
Do you have a VPN activated ?

1 Like
3

I think there are still after-shocks from the pro-Iranian hacker group attack on Ubuntu. I've had issues a few times but trying again later has worked every time.

1 Like
4

Nourpon, Good question about VPN. Yes, I do have a VPN running all the time. But with that said, I set my nordvpn to point at a USA server. then I start Software Updater program. It has been failing for the last 2 weeks. I check with Software Updater program to see if it will work correctly about every other day, and it still is failing on the save ip address. The errors always start with Ign:16
so I have to manually run at command prompt the update command. (Note: below I manually changed https to httpx to over ride forum checking).
Ign:16 httpx://ppa.launchpadcontent.net/zorinos/apps/ubuntu noble InRelease
Ign:17 httpx://ppa.launchpadcontent.net/zorinos/drivers/ubuntu noble InRelease
Ign:18 httpx://ppa.launchpadcontent.net/zorinos/patches/ubuntu noble InRelease
Ign:19 httpx://ppa.launchpadcontent.net/zorinos/stable/ubuntu noble InRelease
Ign:16 httpx://ppa.launchpadcontent.net/zorinos/apps/ubuntu noble InRelease
Ign:17 httpx://ppa.launchpadcontent.net/zorinos/drivers/ubuntu noble InRelease
Ign:18 httpx://ppa.launchpadcontent.net/zorinos/patches/ubuntu noble InRelease
Ign:19 httpx://ppa.launchpadcontent.net/zorinos/stable/ubuntu noble InRelease
Ign:16 httpx://ppa.launchpadcontent.net/zorinos/apps/ubuntu noble InRelease
Ign:17 httpx://ppa.launchpadcontent.net/zorinos/drivers/ubuntu noble InRelease
Ign:18 httpx://ppa.launchpadcontent.net/zorinos/patches/ubuntu noble InRelease
Ign:19 httpx://ppa.launchpadcontent.net/zorinos/stable/ubuntu noble InRelease
Err:16 httpx://ppa.launchpadcontent.net/zorinos/apps/ubuntu noble InRelease
Could not handshake: The TLS connection was non-properly terminated. [IP: 185.125.189.188 443]
Err:17 httpx://ppa.launchpadcontent.net/zorinos/drivers/ubuntu noble InRelease
Could not handshake: The TLS connection was non-properly terminated. [IP: 185.125.189.188 443]
Err:18 httpx://ppa.launchpadcontent.net/zorinos/patches/ubuntu noble InRelease
Could not handshake: The TLS connection was non-properly terminated. [IP: 185.125.189.188 443]
Err:19 httpx://ppa.launchpadcontent.net/zorinos/stable/ubuntu noble InRelease
Could not handshake: The TLS connection was non-properly terminated. [IP: 185.125.189.188 443]

5

Recently users here in forum reported that the updates no longer worked with a VPN enabled. After they turned the VPN off, the downloads from ubuntu servers worked. So you could try if it works when the VPN is disabled.

Ubuntu may have tightened its security measures in response to the attacks on its servers, meaning that VPNs that were working for updates until recently no longer work.

2 Likes
6

@Forpli give an interesting info, follow is advice.
You can also try this but I'm not sure it will fix the problem.
Edit this file

sudo nano /etc/systemd/resolved.conf

in [Resolve] section add this

DNSSEC=allow-downgrade
DNSOverTLS=opportunistic
Cache=yes
DNSStubListener=yes

then

sudo systemctl restart systemd-resolved
7

Thank you!!! I've had a few issues, not with the software updater itself, but using the terminal, and I just assumed that it was to do with the attacks. However, my VPN auto-connects to the fastest available location on startup. I'll try disconnecting it and try again.

1 Like
8

@Forpli - success! update and upgrade commands worked as normal with the VPN (Surfshark) disconnected :smile:

2 Likes