[2.0.31] Error checking mod updates "InitializeSecurityContext failed"

[cbtmessageman]

What did you do?

I tried accessing the Mod Portal via the "Main menu" > "Mods" > "Explore" and via the "Main menu" > "Mods" > "Updates" options.

What happened?

When I go to the "Explore" tab I get a red box that says "Unable to search the mod portal". If I hover over the text a pop-up box states "API call failed: {path:"api/search", status:520).

When I go to the "Updates" tab I get a red box that says "Unable to check for updates". If I hover over the text a pop-up box states "API call failed: {path:"api/search", status:520).

What did you expect to happen instead? It might be obvious to you, but do it anyway!

For the Explore tab I am expecting to see a list of mods displayed. For the Updates tab I am expecting to see a list of mods that need updating.

Does it happen always, once, or sometimes?

This is happening every time I go to the two tabs in the Mods menu.

Additional information

Everything in the Manage tab appears to be working. I am able to access the mod portal via the webpage, this is only happening on my system from within Factorio. I took a look at my factorio-current.log file, starting on line 136 I am seeing status 520 messages indicating the revocation function is not able to check for revoked certs. I am not sure if this issue started with the 2.0.31 update, as I have not tried accessing the mod portal within the game in the last few weeks.

[eugenekay]

HTTP Status code 520 is not a Standard (RFC-defined); it is used by CloudFlare (which Wube Software utilizes) to indicate an unexpected response from the Backend server; in this case for a request "https://mods.factorio.com/api/search" (presumably with some extra parameters). This usually indicates a temporary (server) problem; can you try again later and see if it is still ongoing?

From the Mods Website Certificate you can find "CRL Distribution Point: http://c.pki.goog/we1/_-4iFwfCacM.crl"; this "Certificate Revocation File" is used to check for expired/cancelled certificates as a safety mechanism. Are you able to download this CRL file normally, eg with `curl` or via Firefox?

[cbtmessageman]

I tried downloading the CRL, it downloaded fine. Still can't access the mod portal within the game.

I'll try again later tonight, from a different network.

[cbtmessageman]

Portal worked from home, at least enough to populate. I didn't think to try downloading a mod.

However, I'm still seeing some weirdness. I'm staring at both my firewall logs as well as active sessions (I'm a network admin, I have full visibility to our network here). I opened up the game client (2.0.31), opened the in-game mod portal, and the activity I originally described happened. I don't see any traffic to the mods.factorio.com URL, or the IP address that my system is trying to reach (104.26.15.88).

For grins I decided to roll back and see if that changed things, and it did. In versions 2.0.30 and 2.0.31 I still can't access the in-game portal. If I roll back to 2.0.28 or 2.0.29 the mod portal is working within the game. So I'm still thinking this is a game bug and not a network block in my system.

[Rseding91]

One of the recent versions enabled the TLS check and it sounds like that check is failing on your system. Given we aren’t getting wide spread reports of issues, that makes me think the issue is indeed your system or your network.

But I’m unsure how to go about verifying that.

[cbtmessageman]

One of the recent versions enabled the TLS check and it sounds like that check is failing on your system. Given we aren’t getting wide spread reports of issues, that makes me think the issue is indeed your system or your network.

But I’m unsure how to go about verifying that.

That's interesting, I don't think I recall seeing that change listed in a changelog. Can you find out which version of TLS? I assume it would be version 1.3 at this point.

[Muche]

That's interesting, I don't think I recall seeing that change listed in a changelog.

It may be related to 125316 Updater does not verify the SSL certificates, which most likely went into v2.0.30.

[cbtmessageman]

One of the recent versions enabled the TLS check and it sounds like that check is failing on your system. Given we aren’t getting wide spread reports of issues, that makes me think the issue is indeed your system or your network.

Please move this one to Not A Bug, I found the issue on my end.

[Rseding91]

One of the recent versions enabled the TLS check and it sounds like that check is failing on your system. Given we aren’t getting wide spread reports of issues, that makes me think the issue is indeed your system or your network.

Please move this one to Not A Bug, I found the issue on my end.

Could you explain the issue and what you did to fix it? So if other people have the same problem they can get it resolved.

[cbtmessageman]

Could you explain the issue and what you did to fix it? So if other people have the same problem they can get it resolved.

I cannot, due to our internal policies. If other users report this issue please direct them to speak to their network security team.

[Sanqui]

I guess that Factorio will be running afoul of some very strict corporate firewalls (i.e. those that attempt a MITM attack).