Page 1 of 1

[2.0.31] Error checking mod updates "InitializeSecurityContext failed"

Posted: Thu Jan 16, 2025 6:21 pm
by cbtmessageman
What did you do?

I tried accessing the Mod Portal via the "Main menu" > "Mods" > "Explore" and via the "Main menu" > "Mods" > "Updates" options.

What happened?

When I go to the "Explore" tab I get a red box that says "Unable to search the mod portal". If I hover over the text a pop-up box states "API call failed: {path:"api/search", status:520).

When I go to the "Updates" tab I get a red box that says "Unable to check for updates". If I hover over the text a pop-up box states "API call failed: {path:"api/search", status:520).

What did you expect to happen instead? It might be obvious to you, but do it anyway!

For the Explore tab I am expecting to see a list of mods displayed. For the Updates tab I am expecting to see a list of mods that need updating.

Does it happen always, once, or sometimes?

This is happening every time I go to the two tabs in the Mods menu.

Additional information

Everything in the Manage tab appears to be working. I am able to access the mod portal via the webpage, this is only happening on my system from within Factorio. I took a look at my factorio-current.log file, starting on line 136 I am seeing status 520 messages indicating the revocation function is not able to check for revoked certs. I am not sure if this issue started with the 2.0.31 update, as I have not tried accessing the mod portal within the game in the last few weeks.

Re: [2.0.31] Error checking mod updates "InitializeSecurityContext failed"

Posted: Thu Jan 16, 2025 8:42 pm
by eugenekay
HTTP Status code 520 is not a Standard (RFC-defined); it is used by CloudFlare (which Wube Software utilizes) to indicate an unexpected response from the Backend server; in this case for a request "https://mods.factorio.com/api/search" (presumably with some extra parameters). This usually indicates a temporary (server) problem; can you try again later and see if it is still ongoing?

From the Mods Website Certificate you can find "CRL Distribution Point: http://c.pki.goog/we1/_-4iFwfCacM.crl"; this "Certificate Revocation File" is used to check for expired/cancelled certificates as a safety mechanism. Are you able to download this CRL file normally, eg with `curl` or via Firefox?

Re: [2.0.31] Error checking mod updates "InitializeSecurityContext failed"

Posted: Thu Jan 16, 2025 9:53 pm
by cbtmessageman
I tried downloading the CRL, it downloaded fine. Still can't access the mod portal within the game.

I'll try again later tonight, from a different network.

Re: [2.0.31] Error checking mod updates "InitializeSecurityContext failed"

Posted: Fri Jan 17, 2025 4:14 pm
by cbtmessageman
Portal worked from home, at least enough to populate. I didn't think to try downloading a mod.

However, I'm still seeing some weirdness. I'm staring at both my firewall logs as well as active sessions (I'm a network admin, I have full visibility to our network here). I opened up the game client (2.0.31), opened the in-game mod portal, and the activity I originally described happened. I don't see any traffic to the mods.factorio.com URL, or the IP address that my system is trying to reach (104.26.15.88).

For grins I decided to roll back and see if that changed things, and it did. In versions 2.0.30 and 2.0.31 I still can't access the in-game portal. If I roll back to 2.0.28 or 2.0.29 the mod portal is working within the game. So I'm still thinking this is a game bug and not a network block in my system.

Re: [2.0.31] Error checking mod updates "InitializeSecurityContext failed"

Posted: Sat Jan 18, 2025 9:11 am
by Rseding91
One of the recent versions enabled the TLS check and it sounds like that check is failing on your system. Given we aren’t getting wide spread reports of issues, that makes me think the issue is indeed your system or your network.

But I’m unsure how to go about verifying that.

Re: [2.0.31] Error checking mod updates "InitializeSecurityContext failed"

Posted: Tue Jan 21, 2025 2:39 pm
by cbtmessageman
Rseding91 wrote: Sat Jan 18, 2025 9:11 am One of the recent versions enabled the TLS check and it sounds like that check is failing on your system. Given we aren’t getting wide spread reports of issues, that makes me think the issue is indeed your system or your network.

But I’m unsure how to go about verifying that.
That's interesting, I don't think I recall seeing that change listed in a changelog. Can you find out which version of TLS? I assume it would be version 1.3 at this point.

Re: [2.0.31] Error checking mod updates "InitializeSecurityContext failed"

Posted: Tue Jan 21, 2025 7:25 pm
by Muche
cbtmessageman wrote: Tue Jan 21, 2025 2:39 pm That's interesting, I don't think I recall seeing that change listed in a changelog.
It may be related to 125316 Updater does not verify the SSL certificates, which most likely went into v2.0.30.

Re: [2.0.31] Error checking mod updates "InitializeSecurityContext failed"

Posted: Mon Jan 27, 2025 9:09 pm
by cbtmessageman
Rseding91 wrote: Sat Jan 18, 2025 9:11 am One of the recent versions enabled the TLS check and it sounds like that check is failing on your system. Given we aren’t getting wide spread reports of issues, that makes me think the issue is indeed your system or your network.
Please move this one to Not A Bug, I found the issue on my end.

Re: [2.0.31] Error checking mod updates "InitializeSecurityContext failed"

Posted: Mon Jan 27, 2025 9:23 pm
by Rseding91
cbtmessageman wrote: Mon Jan 27, 2025 9:09 pm
Rseding91 wrote: Sat Jan 18, 2025 9:11 am One of the recent versions enabled the TLS check and it sounds like that check is failing on your system. Given we aren’t getting wide spread reports of issues, that makes me think the issue is indeed your system or your network.
Please move this one to Not A Bug, I found the issue on my end.
Could you explain the issue and what you did to fix it? So if other people have the same problem they can get it resolved.

Re: [2.0.31] Error checking mod updates "InitializeSecurityContext failed"

Posted: Tue Jan 28, 2025 5:54 am
by cbtmessageman
Rseding91 wrote: Mon Jan 27, 2025 9:23 pm Could you explain the issue and what you did to fix it? So if other people have the same problem they can get it resolved.
I cannot, due to our internal policies. If other users report this issue please direct them to speak to their network security team.

Re: [2.0.31] Error checking mod updates "InitializeSecurityContext failed"

Posted: Tue Jan 28, 2025 8:51 am
by Sanqui
I guess that Factorio will be running afoul of some very strict corporate firewalls (i.e. those that attempt a MITM attack).