Are you getting 403's when downloading? Please read here first

carly.richmond · May 8, 2024, 2:52pm

I'm following up with the team to confirm the state of the maven link you have provided. I'll keep you posted.

Bryji · May 8, 2024, 3:29pm

Thanks for the reply @carly.richmond ! Unfortunately still not working for me:

E: Failed to fetch https://packages.elastic.co/elasticsearch/2.x/debian/dists/stable/InRelease  403  Forbidden [IP: 34.120.127.130 443]
E: The repository 'https://packages.elastic.co/elasticsearch/2.x/debian stable InRelease' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
root@ip-10-32-0-42:~# curl  http://ipinfo.io/  && echo
{
  "ip": "52.11.212.148",
  "hostname": "ec2-52-11-212-148.us-west-2.compute.amazonaws.com",
  "city": "Boardman",
  "region": "Oregon",
  "country": "US",
  "loc": "45.8399,-119.7006",
  "org": "AS16509 Amazon.com, Inc.",
  "postal": "97818",
  "timezone": "America/Los_Angeles",
  "readme": "https://ipinfo.io/missingauth"
}

carly.richmond · May 8, 2024, 3:47pm

Hi all,

I've had an update from the team that there was a 403 issue impacting some of our artifact locations. The fix has now been applied. Please check again and let us know if your issue persists.

If the issue persists please provide:

The command you are running or URL of the artifact you are trying to access.
The IP location you are attempting to access the artefact from in the ipinfo format presented in the root of this topic.

Hope that helps!

Radhika1 · May 8, 2024, 3:51pm

@carly.richmond Yes Thank you so much.

Now our team can able to get it

cold_twilight · May 8, 2024, 5:20pm

Hi, can you unblock me please?

userfailure · May 8, 2024, 5:21pm

Sorry for the delay, wow it's working for us from this morning, next time I will get the IPs but we tried with multiple ways, web sites, curl and Chocolatey.

Thanks for your quick reply.

carly.richmond · May 9, 2024, 9:24am

Hi @cold_twilight,

There was a 403 issue yesterday that has now been resolved that is different to distinct IP blocks. Can you check and confirm if you're still having issues, and if so which artefact URL or command you are receiving the error on?

Thanks!

carly.richmond · May 9, 2024, 12:32pm

Hi @Seryozha2410,

Are you still having issues? I've checked out the ASN that your IP belongs to and it looks to be connected with a country that we cannot unblock, although your IP location is fine. Are you able to try downloading from another IP?

Hope that helps!

Bryji · May 9, 2024, 4:38pm

We seem to be unblocked today, thanks!

msokolov · May 14, 2024, 9:10am

Hello,

It seems that our IP Address is blocked as well. Could you please unblock it? Thank you! The IP Address is 34.120.127.130.

Best Regards,
Metodi Sokolov

msokolov · May 14, 2024, 9:27am

Fyi: msg": "Failed to update apt cache: E:Failed to fetch https://artifacts.elastic.co/packages/5.x/apt/dists/stable/InRelease 403 Forbidden [IP: 34.120.127.130 443], E:The repository 'https://artifacts.elastic.co/packages/5.x/apt stable InRelease' is no longer signed."}

msokolov · May 15, 2024, 8:26am

Hello,

We are still getting forbidden, could we get a reply? Thanks!
Best regards

carly.richmond · May 15, 2024, 8:48am

Hi @msokolov,

Welcome to the community! Thanks for your message. Looking at your IP and ASN info I see you're based in the US and using a Google LLC hosted IP. I've had a look at our config and I believe your ASN is already allowed under our rules.

We have seen issues with blocking on the Google CDN related to IPv6 being enabled before as covered in the further update in the root of this topic. Before I follow up with the team, can you check:

If you have IPv6 enabled? If so can you disable IPv6.
Are you able to install a more current version of the artefact successfully? It looks like you're trying to download an older version (5.x), which is post EOL.

If neither of the above resolve your issue please send on the precise command you are executing and a trace using the steps in this topic.

Hope that helps!

_ahoi · May 15, 2024, 11:15am

I have this issue with:

78.47.95.45
2a01:4f8:c013:37d0::/64

ipinfo 78.47.95.45
{
  "ip": "78.47.95.45",
  "city": "Falkenstein",
  "region": "Saxony",
  "country": "DE",
  "loc": "50.4779,12.3713",
  "org": "AS24940 Hetzner Online GmbH",
  "postal": "08223",
  "timezone": "Europe/Berlin",
  "readme": "https://ipinfo.io/missingauth"
}

ipinfo 2a01:4f8:c013:37d0::
{
  "ip": "2a01:4f8:c013:37d0::",
  "city": "Falkenstein",
  "region": "Saxony",
  "country": "DE",
  "loc": "50.4779,12.3713",
  "org": "AS24940 Hetzner Online GmbH",
  "postal": "08223",
  "timezone": "Europe/Berlin",
  "readme": "https://ipinfo.io/missingauth"
}

Exception:

Exception in thread "main" java.io.IOException: Server returned HTTP response code: 403 for URL: https://artifacts.elastic.co/downloads/elasticsearch-plugins/ingest-attachment/ingest-attachment-7.17.21.zip
	at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1998)
	at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1599)
	at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:223)
	at org.elasticsearch.plugins.cli.InstallPluginAction.downloadZip(InstallPluginAction.java:478)
	at org.elasticsearch.plugins.cli.InstallPluginAction.downloadAndValidate(InstallPluginAction.java:558)
	at org.elasticsearch.plugins.cli.InstallPluginAction.download(InstallPluginAction.java:318)
	at org.elasticsearch.plugins.cli.InstallPluginAction.execute(InstallPluginAction.java:242)
	at org.elasticsearch.plugins.cli.InstallPluginCommand.execute(InstallPluginCommand.java:88)
	at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:77)
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:112)
	at org.elasticsearch.cli.MultiCommand.execute(MultiCommand.java:95)
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:112)
	at org.elasticsearch.plugins.cli.PluginCli.main(PluginCli.java:36)
	at org.elasticsearch.cli.Command.main(Command.java:77)

msokolov · May 15, 2024, 12:08pm

Hello,

IPv6 is enabled, however unused. Same issue without it. It seems that we used EOL version indeed, however we cannot use a newer one as the server seems blacklisted also.
I provide further information here:

403 Forbidden

Error: Forbidden

Your client does not have permission to get URL `/GPG-KEY-elasticsearch` from this server.

11:46:27.441371 <= Recv SSL data, 5 bytes (0x5) 0000: 17 03 03 00 22 ...." 11:46:27.441561 <= Recv SSL data, 1 bytes (0x1) 0000: 17 . 11:46:27.441723 => Send SSL data, 5 bytes (0x5) 0000: 17 03 03 00 22 ...." 11:46:27.441859 => Send SSL data, 1 bytes (0x1) 0000: 17 . 11:46:27.442016 == Info: Connection #0 to host artifacts.elastic.co left intact

Please whitelist our IP Address(34.120.127.130) as we have changed the repository to 6.x but still fails as the IP Is blacklisted.

msokolov · May 15, 2024, 3:29pm

Ah forgot to post, in the end the error is

Your client does not have permission to get URL `/GPG-KEY-elasticsearch` from this server.

Dzianis_Malets · May 15, 2024, 8:32pm

Hello!
Please unblock ip: 5.75.247.14

{
ip: "5.75.247.14",
hostname: "static.14.247.75.5.clients.your-server.de",
city: "Falkenstein",
region: "Saxony",
country: "DE",
loc: "50.4779,12.3713",
org: "AS24940 Hetzner Online GmbH",
postal: "08223",
timezone: "Europe/Berlin"
}

I have the same error:

Failed to configure repo 'deb https://artifacts.elastic.co/packages/8.x/apt stable main': Error: HTTP 403: Forbidden reading /GPG-KEY-elasticsearch

carly.richmond · May 16, 2024, 8:16am

Hi @msokolov,

As mentioned before, it looks like your ASN is covered under our rules. Are you still receiving the same issue downloading v8.x? v6.x is still EOL.

Can you send the --trace output as well please?

carly.richmond · May 16, 2024, 8:17am

Hi @NominaSumpta,

Thanks for raising your issue! I've received confirmation that your IP has been unblocked. Can you try again and let us know if you're still encountering issues with downloading.

Hope that helps!

carly.richmond · May 16, 2024, 8:22am

Hi @Dzianis_Malets,

Welcome! Thanks for raising your issue. I see your IP is part of AS24940, which I've received word from the team before that it is already allowed.

Can you check that you meet the Hertzner prerequisites for Elasticsearch as covered here in their support documentation? If you have been granted hos-dev by their support already please send me the tracing details as per this post.

Hope that helps!

Topic		Replies	Views
Official apt repository (451 Unavailable For Legal Reasons) Elasticsearch	75	6956	August 10, 2020
Artifacts.elastic.co responds with 403 Meta Elastic	4	3411	May 31, 2022
Why artifacts.elastic.co/GPG-KEY-elasticsearch returns 403 for russian IPs, but not always? Вопросы на русском языке	28	6789	August 14, 2022
Getting 403 denied to elastic.co (for anything: apt refresh, wget, etc) Meta Elastic	14	16196	June 6, 2022
Forbidden IP errors? incompetent elastic team Meta Elastic	4	143	September 9, 2025

Are you getting 403's when downloading? Please read here first

Error: Forbidden

Your client does not have permission to get URL /GPG-KEY-elasticsearch from this server.

Your client does not have permission to get URL /GPG-KEY-elasticsearch from this server.

Related topics

Your client does not have permission to get URL `/GPG-KEY-elasticsearch` from this server.

Your client does not have permission to get URL `/GPG-KEY-elasticsearch` from this server.