HTTPS downloads failing on all client machines

[bbot]

Last week all of our https downloads have been failing. Switching to force over smb/afp works correctly.

When it downloads the policy, we receive the error "NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9813)
The network connection was interrupted while downloading the package from https://xxxxxxxxxxxxxxx.xxxxx.xxxxxxx.com/Casper/Packages/Google%20Chrome%20v42.dmg. Attempting to reconnect...
Error: Google Chrome v42.dmg is not available on the HTTP server.

-Happens to both dmg and pkg
-smb/afp works
-happens to both 10.10 and 10.11
-I can copy and paste the web link to a browser and download the package with no issues

[bpavlov]

Based on the error, is it a certificate issue perhaps? Is it happening with other packages or just the one? What are the permissions on the package?

[nwiseman]

I've seen those exact errors as well. For the time being, I've disabled HTTPS downloads and reverted back to SMB. would love to get it back up and going, but haven't had the time.

[bbot]

All packages, both dmg and pkg. Most packages have 755.

Is there any documentation for troubleshooting certificates on Windows servers? I looked through the administrators guide but couldn't find anything. Cert appears to still be valid and not expired.

[kirkmshaffer]

What JSS version are you using? Out on a limb here, but when we had https issues it was because of that whole diffe-hellman issue awhile back. If you're browsers are working, that's a bit weird (unless it's older).

Here's a jamf write up on it: https://jamfnation.jamfsoftware.com/article.html?id=384

[bbot]

We're on 9.73 right now. Will be upgrading within the next 1-2 weeks to 9.81.

[colosussbaine]

I had this same issue on a couple of my clients. After checking the JDS and confirmed the packages were available, I removed the frameworkPackage and reinstalled the Jamf binary and it worked.

[kmabe]

We've notice that if the computer loses connection to the network (i.e. shut down in the middle of the download) then we will get this error the next time it checks in. It appears to be creating a partial download file in /Library/Application Support/JAMF/Downloads. By removing the download folder through ARD and flushing the policy, it will then download properly upon next check-in. We are currently on 9.81.

[bbot]

After upgrading our JSS to 9.82, the issue went away. Strange...

[bbot]

And the issue is back on 9.82. Happening to all packages and all machines...