{
"ip": "5.253.176.98",
"city": "Tallinn",
"region": "Harjumaa",
"country": "EE",
"loc": "59.4370,24.7535",
"org": "AS202759 RJ Network OU",
"postal": "10111",
"timezone": "Europe/Tallinn",
"readme": "https://ipinfo.io/missingauth"
}
Failed to fetch https://artifacts.elastic.co/packages/8.x/apt/pool/main/e/elasticsearch/elasticsearch-8.18.2-amd64.deb 403 Forbidden [IP: 34.120.127.130 443]
Welcome @PheliX!
Thanks for raising. Before I raise the ticket, can you confirm that you have IPv6 disabled on your host? Are you seeing the same issue with other versions?
Let me know!
Hello! I'm having trouble downloading Winlogbeat. When I click on the link "https://artifacts.elastic.co/downloads/beats/winlogbeat/winlogbeat-9.0.3-windows-x86_64.zip", I receive a "403 Forbidden" response. The IP address from which the download is being attempted is 88.218.171.233, which is a VPS hosting.
Hi @Takeshi_Kovach,
Welcome! Checking the ASN that your IP belongs to (AS210976) we're not unable to unblock this one. Can you try an alternative IP?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
IP Address: 91.99.76.174
Provider / ASN: Hetzner Online GmbH (AS24940)
Hi @Ahmad_Samawi,
Welcome! I can confirm that AS24940 is already allowed. Can you check if you have IPv6 enabled, and if so disable it on the host? That has been a common issue with Hetzner that we have seen before.
If not please send a trace as per this prior post.
Hope that helps!
Are there any plans to fix the IPv6 issues with Hetzner?
Disabling IPv6 because of a public package repo seems somewhat ridiculous to me.
Welcome @Stan_van_Hoorn. IPv6 downloads are sadly not supported which is why this workaround is proposed. Sadly I don't have a timeline for when this will be supported.
Hope that helps!
Hello @carly.richmond
We are self-hosting multiple instances of Frappe Cloud on Hetzner, where each server utilizes a dedicated floating IPv4 address. During automated setup on these servers (using Ansible for configuration), we are encountering persistent HTTP 403 Forbidden errors when trying to download the GPG key from Elastic's artifact repository:
This error prevents us from installing filebeat and other Elastic products, which are required for our operational logging and monitoring stack for Frappe Cloud.
Here is the error output from Ansible:
Code
Failed to download key at https://artifacts.elastic.co/GPG-KEY-elasticsearch: HTTP Error 403: Forbidden
{
"invocation": {
"module_args": {
"url": "https://artifacts.elastic.co/GPG-KEY-elasticsearch",
"state": "present",
"validate_certs": true,
"id": null,
"data": null,
"file": null,
"key": null,
"keyring": null,
"keyserver": null
}
},
"_ansible_no_log": false,
"changed": false
}
Server IPs in use:
Code
95.216.180.85
95.216.182.146
95.216.182.150
95.217.31.161
95.217.243.187
95.217.29.171
95.217.242.6
For some of these servers, Elastic artifact downloads are consistently blocked (HTTP 403 error).
Others have not yet been tested, but we expect similar issues may occur as more servers are provisioned on these IPs.
Troubleshooting steps performed:
Ansible tasks are making requests over IPv4.
IPv6 is disabled on affected servers to ensure all traffic uses IPv4.
The issue only affects Elastic artifact downloads; other repositories and websites are accessible.
Request:
Could you please review our list of Hetzner IP addresses and, if they are currently blocked or rate-limited by Elastic’s CDN/Cloudflare, remove these blocks so we can continue automated setup and maintenance of our Frappe Cloud fleet?
If you need traceroute output or additional diagnostics, please let us know and we will provide them.
We greatly appreciate your help, as these Elastic resources are essential for our infrastructure setup and maintenance.
Hi @harizan01,
Welcome! Thanks for raising your issue. I've checked all your IPs and they belong to AS24940 which is explicitly allowed on our side, and there are no changes to this configuration.
Can you double check IPv6 is definitely disabled (I'm aware you've stated it's already disabled) and that you don't have any proxy configuration that may be blocking the traffic? Otherwise if you could send the tracing details for investigation as per this thread we can investigate further.
Hope that helps!
Hi,
Here is the update as requested:
- IPv6 is fully disabled on our server:
```
root@proxy-server:~# ip a | grep inet6
root@proxy-server:~#
```
- No proxy, VPN, or custom NAT in use.
- Repeated 403 Forbidden error when accessing https://artifacts.elastic.co, e.g.:
```
Failed to download key at https://artifacts.elastic.co/GPG-KEY-elasticsearch: HTTP Error 403: Forbidden
```
- Here is the traceroute output:
```
traceroute -4 artifacts.elastic.co
traceroute to artifacts.elastic.co (34.120.127.130), 30 hops max, 60 byte packets
1 _gateway (172.31.1.1) 3.636 ms 3.719 ms 3.724 ms
2 29303.your-cloud.host (65.109.46.159) 1.719 ms 1.766 ms 1.659 ms
3 * * *
4 spine5.cloud1.hel1.hetzner.com (213.133.115.105) 17.614 ms 17.734 ms 17.567 ms
5 * * *
6 core31.hel1.hetzner.com (213.239.228.9) 2.406 ms core32.hel1.hetzner.com (213.239.228.5) 0.872 ms 0.905 ms
7 juniper4.dc1.hel1.hetzner.com (213.239.224.37) 1.638 ms 1.299 ms juniper4.dc1.hel1.hetzner.com (213.239.224.25) 2.785 ms
8 130.127.120.34.bc.googleusercontent.com (34.120.127.130) 1.079 ms 0.875 ms 142.251.195.234 (142.251.195.234) 0.955 ms
```
Is there any further diagnostic data required, or can this be investigated/escalated further with the CDN team?
We continue to experience HTTP 403 for Elastic artifact downloads on our Hetzner IPs, which restricts automation for our Frappe Cloud self-hosted deployment.
root@proxy-server:~# curl --trace - --trace-time https://artifacts.elastic.co/GPG-KEY-elasticsearch
11:43:23.258772 == Info: Trying 34.120.127.130:443...
11:43:23.262443 == Info: Connected to artifacts.elastic.co (34.120.127.130) port 443 (#0)
11:43:23.265811 == Info: ALPN, offering h2
11:43:23.265851 == Info: ALPN, offering http/1.1
11:43:23.320730 == Info: CAfile: /etc/ssl/certs/ca-certificates.crt
11:43:23.320784 == Info: CApath: /etc/ssl/certs
11:43:23.321227 == Info: TLSv1.0 (OUT), TLS header, Certificate Status (22):
11:43:23.321266 => Send SSL data, 5 bytes (0x5)
0000: 16 03 01 02 00 .....
11:43:23.321302 == Info: TLSv1.3 (OUT), TLS handshake, Client hello (1):
11:43:23.321323 => Send SSL data, 512 bytes (0x200)
0000: 01 00 01 fc 03 03 56 2e 22 f5 7a e7 b3 59 04 02 ......V.".z..Y..
0010: d8 cf 9b 90 f6 9f 0c 8a 9b bb d7 fc 35 2c 22 5d ............5,"]
0020: 76 6b 42 f9 0f 23 20 17 50 8d 89 68 34 48 cf 53 vkB..# .P..h4H.S
0030: 19 6b 15 cd 4b 6d 57 83 c8 58 5e 9a 6d e1 c2 c2 .k..KmW..X^.m...
0040: 3c 40 55 77 e5 47 1a 00 3e 13 02 13 03 13 01 c0 <@Uw.G..>.......
0050: 2c c0 30 00 9f cc a9 cc a8 cc aa c0 2b c0 2f 00 ,.0.........+./.
0060: 9e c0 24 c0 28 00 6b c0 23 c0 27 00 67 c0 0a c0 ..$.(.k.#.'.g...
0070: 14 00 39 c0 09 c0 13 00 33 00 9d 00 9c 00 3d 00 ..9.....3.....=.
0080: 3c 00 35 00 2f 00 ff 01 00 01 75 00 00 00 19 00 <.5./.....u.....
0090: 17 00 00 14 61 72 74 69 66 61 63 74 73 2e 65 6c ....artifacts.el
00a0: 61 73 74 69 63 2e 63 6f 00 0b 00 04 03 00 01 02 astic.co........
00b0: 00 0a 00 16 00 14 00 1d 00 17 00 1e 00 19 00 18 ................
00c0: 01 00 01 01 01 02 01 03 01 04 33 74 00 00 00 10 ..........3t....
00d0: 00 0e 00 0c 02 68 32 08 68 74 74 70 2f 31 2e 31 .....h2.http/1.1
00e0: 00 16 00 00 00 17 00 00 00 31 00 00 00 0d 00 2a .........1.....*
00f0: 00 28 04 03 05 03 06 03 08 07 08 08 08 09 08 0a .(..............
0100: 08 0b 08 04 08 05 08 06 04 01 05 01 06 01 03 03 ................
0110: 03 01 03 02 04 02 05 02 06 02 00 2b 00 05 04 03 ...........+....
0120: 04 03 03 00 2d 00 02 01 01 00 33 00 26 00 24 00 ....-.....3.&.$.
0130: 1d 00 20 99 57 d2 fd dc 5e 10 44 23 c1 53 ce d8 .. .W...^.D#.S..
0140: 4b c0 a5 a2 8f d9 59 54 f1 66 9c 60 07 c9 5e bd K.....YT.f.`..^.
0150: 95 f5 66 00 15 00 a9 00 00 00 00 00 00 00 00 00 ..f.............
0160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
01a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
01b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
01c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
01d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
01e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
01f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
11:43:23.327566 == Info: TLSv1.2 (IN), TLS header, Certificate Status (22):
11:43:23.327611 <= Recv SSL data, 5 bytes (0x5)
0000: 16 03 03 00 7a ....z
11:43:23.327660 == Info: TLSv1.3 (IN), TLS handshake, Server hello (2):
11:43:23.327690 <= Recv SSL data, 122 bytes (0x7a)
0000: 02 00 00 76 03 03 3d 36 86 a6 53 3a 22 0f 9f 02 ...v..=6..S:"...
0010: 3c 19 d1 05 7d 33 78 e0 87 11 e8 ba d3 dd 6a 67 <...}3x.......jg
0020: 67 14 78 ef 97 5c 20 17 50 8d 89 68 34 48 cf 53 g.x..\ .P..h4H.S
0030: 19 6b 15 cd 4b 6d 57 83 c8 58 5e 9a 6d e1 c2 c2 .k..KmW..X^.m...
0040: 3c 40 55 77 e5 47 1a 13 02 00 00 2e 00 33 00 24 <@Uw.G.......3.$
0050: 00 1d 00 20 53 d0 70 6d 02 75 f6 50 22 2b 42 a8 ... S.pm.u.P"+B.
0060: d1 57 2e f8 35 a9 dd 46 4e 3e 09 05 7c 21 27 08 .W..5..FN>..|!'.
0070: d0 d3 2e 03 00 2b 00 02 03 04 .....+....
11:43:23.328483 == Info: TLSv1.2 (IN), TLS header, Finished (20):
11:43:23.328515 <= Recv SSL data, 5 bytes (0x5)
0000: 14 03 03 00 01 .....
11:43:23.328552 == Info: TLSv1.2 (IN), TLS header, Supplemental data (23):
11:43:23.328571 <= Recv SSL data, 5 bytes (0x5)
0000: 17 03 03 11 86 .....
11:43:23.328623 <= Recv SSL data, 1 bytes (0x1)
0000: 16 .
11:43:23.328654 == Info: TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
11:43:23.328674 <= Recv SSL data, 19 bytes (0x13)
0000: 08 00 00 0f 00 0d 00 00 00 00 00 10 00 05 00 03 ................
0010: 02 68 32 .h2
11:43:23.328739 == Info: TLSv1.3 (IN), TLS handshake, Certificate (11):
11:43:23.328760 <= Recv SSL data, 4134 bytes (0x1026)
0000: 0b 00 10 22 00 00 10 1e 00 0b 0a 30 82 0b 06 30 ...".......0...0
0010: 82 09 ee a0 03 02 01 02 02 12 05 09 da f0 84 05 ................
0020: 92 39 55 5f 5e 59 67 8d 33 5c 9b 42 30 0d 06 09 .9U_^Yg.3\.B0...
0030: 2a 86 48 86 f7 0d 01 01 0b 05 00 30 33 31 0b 30 *.H........031.0
0040: 09 06 03 55 04 06 13 02 55 53 31 16 30 14 06 03 ...U....US1.0...
0050: 55 04 0a 13 0d 4c 65 74 27 73 20 45 6e 63 72 79 U....Let's Encry
0060: 70 74 31 0c 30 0a 06 03 55 04 03 13 03 52 31 32 pt1.0...U....R12
0070: 30 1e 17 0d 32 35 31 30 31 30 31 34 31 32 30 30 0...251010141200
0080: 5a 17 0d 32 36 30 31 30 38 31 34 31 31 35 39 5a Z..260108141159Z
0090: 30 15 31 13 30 11 06 03 55 04 03 13 0a 65 6c 61 0.1.0...U....ela
00a0: 73 74 69 63 2e 63 6f 30 82 01 22 30 0d 06 09 2a stic.co0.."0...*
00b0: 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 .H.............0
00c0: 82 01 0a 02 82 01 01 00 db ba 71 29 90 d1 4a 82 ..........q)..J.
00d0: 02 7c 4f 54 78 9a 52 d7 a5 7b 1b eb e0 7a ee d6 .|OTx.R..{...z..
00e0: ae d5 c3 8e 2d 90 a6 bb 7c 0f ae 0b 9f 1d 42 e3 ....-...|.....B.
00f0: 8b 95 67 90 63 23 a4 f0 4c de 03 08 b7 01 64 6a ..g.c#..L.....dj
0100: b9 1a 1a 2e 1e 3d e0 b7 ec 9b 97 d7 70 ba 6c 9c .....=......p.l.
0110: 4d dc d9 f2 06 c2 75 c2 2a 06 80 d5 00 e6 1d 97 M.....u.*.......
0120: 18 93 5a 41 1e 39 a8 93 06 95 78 00 65 da b1 97 ..ZA.9....x.e...
0130: 95 b3 e3 3b 03 5a de 38 f9 3d ad 86 98 dd a7 8c ...;.Z.8.=......
0140: be 44 a6 0c 9b 8d 7f 2d 8e fb 6b d4 61 23 d3 29 .D....-..k.a#.)
0150: 0a 15 ad 5f 41 89 71 4b ca bc 37 02 27 16 2d da ..._A.qK..7.'.-.
0160: c6 c5 31 65 bd b1 2b f7 66 0d 97 df e9 7c e9 f1 ..1e..+.f....|..
0170: f6 12 f8 f7 11 71 42 d8 2f b2 df 7f 3b c5 0b cc .....qB./..;...
0180: 51 7e 3c 78 fc 0c cb 37 ee 61 7b b4 36 c5 bb 6b Q~<x...7.a{.6..k
0190: 55 8c 4c b7 af 04 ef 10 c9 5f 59 aa d1 54 70 1e U.L......_Y..Tp.
01a0: b8 31 b9 97 bc b5 70 f1 43 c3 d9 1e 64 ad b0 38 .1....p.C...d..8
01b0: ea 47 37 ea 66 bc 9e bd fd 77 67 2e 91 9d f8 62 .G7.f....wg....b
01c0: 17 17 26 c4 86 13 60 29 02 03 01 00 01 a3 82 08 ..&...`)........
01d0: 30 30 82 08 2c 30 0e 06 03 55 1d 0f 01 01 ff 04 00..,0...U......
01e0: 04 03 02 05 a0 30 1d 06 03 55 1d 25 04 16 30 14 .....0...U.%..0.
01f0: 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 ..+.........+...
0200: 05 07 03 02 30 0c 06 03 55 1d 13 01 01 ff 04 02 ....0...U.......
0210: 30 00 30 1d 06 03 55 1d 0e 04 16 04 14 ed 19 41 0.0...U........A
0220: d0 6f 16 16 be 65 2f c3 6f 5b ed ba 3c 3c a5 50 .o...e/.o[..<<.P
0230: ad 30 1f 06 03 55 1d 23 04 18 30 16 80 14 00 b5 .0...U.#..0.....
0240: 29 f2 2d 8e 6f 31 e8 9b 4c ad 78 3e fa dc e9 0c ).-.o1..L.x>....
0250: d1 d2 30 33 06 08 2b 06 01 05 05 07 01 01 04 27 ..03..+........'
0260: 30 25 30 23 06 08 2b 06 01 05 05 07 30 02 86 17 0%0#..+.....0...
0270: 68 74 74 70 3a 2f 2f 72 31 32 2e 69 2e 6c 65 6e http://r12.i.len
0280: 63 72 2e 6f 72 67 2f 30 82 06 2a 06 03 55 1d 11 cr.org/0..*..U..
0290: 04 82 06 21 30 82 06 1d 82 0d 2a 2e 70 72 65 6c ...!0.....*.prel
02a0: 65 72 74 2e 63 6f 6d 82 14 61 70 70 73 65 61 72 ert.com..appsear
02b0: 63 68 2e 65 6c 61 73 74 69 63 2e 63 6f 82 1b 61 ch.elastic.co..a
02c0: 72 74 69 66 61 63 74 73 2d 6e 6f 2d 6b 70 69 2e rtifacts-no-kpi.
02d0: 65 6c 61 73 74 69 63 2e 63 6f 82 14 61 72 74 69 elastic.co..arti
02e0: 66 61 63 74 73 2e 65 6c 61 73 74 69 63 2e 63 6f facts.elastic.co
02f0: 82 1d 61 72 74 69 66 61 63 74 73 2e 73 65 63 75 ..artifacts.secu
0300: 72 69 74 79 2e 65 6c 61 73 74 69 63 2e 63 6f 82 rity.elastic.co.
0310: 19 62 65 6e 63 68 6d 61 72 6b 73 2d 6f 6c 64 2e .benchmarks-old.
0320: 65 6c 61 73 74 69 63 2e 63 6f 82 15 62 65 6e 63 elastic.co..benc
0330: 68 6d 61 72 6b 73 2e 65 6c 61 73 74 69 63 2e 63 hmarks.elastic.c
0340: 6f 82 0f 62 6c 6f 67 2e 65 6c 61 73 74 69 63 2e o..blog.elastic.
0350: 63 6f 82 10 62 75 69 6c 64 2e 65 6c 61 73 74 69 co..build.elasti
0360: 63 2e 63 6f 82 11 63 61 6e 76 61 73 2e 65 6c 61 c.co..canvas.ela
0370: 73 74 69 63 2e 63 6f 82 11 63 68 61 72 67 65 2e stic.co..charge.
0380: 65 6c 61 73 74 69 63 2e 63 6f 82 14 63 6f 6d 6d elastic.co..comm
0390: 75 6e 69 74 79 2e 65 6c 61 73 74 69 63 2e 63 6f unity.elastic.co
03a0: 82 17 64 6f 63 73 2d 73 74 61 67 69 6e 67 2e 65 ..docs-staging.e
03b0: 6c 61 73 74 69 63 2e 63 6f 82 0f 64 6f 63 73 2e lastic.co..docs.
03c0: 65 6c 61 73 74 69 63 2e 63 6f 82 13 64 6f 77 6e elastic.co..down
03d0: 6c 6f 61 64 2e 65 6c 61 73 74 69 63 2e 63 6f 82 load.elastic.co.
03e0: 1a 64 6f 77 6e 6c 6f 61 64 2e 65 6c 61 73 74 69 .download.elasti
03f0: 63 73 65 61 72 63 68 2e 6f 72 67 82 0a 65 6c 61 csearch.org..ela
0400: 73 74 69 63 2e 63 6f 82 0b 65 6c 61 73 74 69 63 stic.co..elastic
0410: 2e 77 74 66 82 12 65 6c 61 73 74 69 63 61 63 61 .wtf..elasticaca
0420: 64 65 6d 79 2e 63 6f 6d 82 10 65 6c 61 73 74 69 demy.com..elasti
0430: 63 62 65 61 74 73 2e 77 74 66 82 10 65 6c 61 73 cbeats.wtf..elas
0440: 74 69 63 63 6c 6f 75 64 2e 77 74 66 82 0f 65 6c ticcloud.wtf..el
0450: 61 73 74 69 63 6c 6f 75 64 2e 77 74 66 82 0c 65 asticloud.wtf..e
0460: 6c 61 73 74 69 63 6f 6e 2e 63 6f 82 0d 65 6c 61 lasticon.co..ela
0470: 73 74 69 63 6f 6e 2e 63 6f 6d 82 14 65 6c 61 73 sticon.com..elas
0480: 74 69 63 6f 6e 2e 65 6c 61 73 74 69 63 2e 63 6f ticon.elastic.co
0490: 82 19 65 6c 61 73 74 69 63 70 61 72 74 6e 65 72 ..elasticpartner
04a0: 61 63 61 64 65 6d 79 2e 63 6f 6d 82 2c 65 6c 61 academy.com.,ela
04b0: 73 74 69 63 73 65 61 72 63 68 2d 62 65 6e 63 68 sticsearch-bench
04c0: 6d 61 72 6b 2d 61 6e 61 6c 79 74 69 63 73 2e 65 mark-analytics.e
04d0: 6c 61 73 74 69 63 2e 63 6f 82 23 65 6c 61 73 74 lastic.co.#elast
04e0: 69 63 73 65 61 72 63 68 2d 62 65 6e 63 68 6d 61 icsearch-benchma
04f0: 72 6b 73 2e 65 6c 61 73 74 69 63 2e 63 6f 82 10 rks.elastic.co..
0500: 65 6c 61 73 74 69 63 73 65 61 72 63 68 2e 6a 70 elasticsearch.jp
0510: 82 11 65 6c 61 73 74 69 63 73 65 61 72 63 68 2e ..elasticsearch.
0520: 6f 72 67 82 11 65 6c 61 73 74 69 63 73 65 61 72 org..elasticsear
0530: 63 68 2e 77 74 66 82 10 65 6d 62 65 72 2e 65 6c ch.wtf..ember.el
0540: 61 73 74 69 63 2e 63 6f 82 12 65 70 72 2d 37 2d astic.co..epr-7-
0550: 39 2e 65 6c 61 73 74 69 63 2e 63 6f 82 1b 65 70 9.elastic.co..ep
0560: 72 2d 65 78 70 65 72 69 6d 65 6e 74 61 6c 2e 65 r-experimental.e
0570: 6c 61 73 74 69 63 2e 63 6f 82 17 65 70 72 2d 73 lastic.co..epr-s
0580: 6e 61 70 73 68 6f 74 2e 65 6c 61 73 74 69 63 2e napshot.elastic.
0590: 63 6f 82 16 65 70 72 2d 73 74 61 67 69 6e 67 2e co..epr-staging.
05a0: 65 6c 61 73 74 69 63 2e 63 6f 82 0e 65 70 72 2e elastic.co..epr.
05b0: 65 6c 61 73 74 69 63 2e 63 6f 82 14 67 6f 2e 65 elastic.co..go.e
05c0: 6c 61 73 74 69 63 73 65 61 72 63 68 2e 63 6f 6d lasticsearch.com
05d0: 82 13 68 65 6c 6d 2d 64 65 76 2e 65 6c 61 73 74 ..helm-dev.elast
05e0: 69 63 2e 63 6f 82 0f 68 65 6c 6d 2e 65 6c 61 73 ic.co..helm.elas
05f0: 74 69 63 2e 63 6f 82 1d 69 6e 66 72 61 2d 63 64 tic.co..infra-cd
0600: 6e 2d 64 69 72 65 63 74 6f 72 2e 65 6c 61 73 74 n-director.elast
0610: 69 63 2e 63 6f 82 14 69 6e 66 72 61 2d 63 64 6e ic.co..infra-cdn
0620: 2e 65 6c 61 73 74 69 63 2e 63 6f 82 0e 69 6e 66 .elastic.co..inf
0630: 72 61 2e 65 6c 73 74 63 2e 63 6f 82 0a 69 6e 73 ra.elstc.co..ins
0640: 69 67 68 74 2e 69 6f 82 0a 6b 69 62 61 6e 61 2e ight.io..kibana.
0650: 77 74 66 82 10 6c 6f 67 69 6e 2e 65 6c 61 73 74 wtf..login.elast
0660: 69 63 2e 63 6f 82 0c 6c 6f 67 73 74 61 73 68 2e ic.co..logstash.
0670: 6e 65 74 82 0c 6c 6f 67 73 74 61 73 68 2e 77 74 net..logstash.wt
0680: 66 82 13 70 61 63 6b 61 67 65 73 2e 65 6c 61 73 f..packages.elas
0690: 74 69 63 2e 63 6f 82 1a 70 61 63 6b 61 67 65 73 tic.co..packages
06a0: 2e 65 6c 61 73 74 69 63 73 65 61 72 63 68 2e 6f .elasticsearch.o
06b0: 72 67 82 17 70 72 65 6c 65 72 74 2d 69 6e 66 6f rg..prelert-info
06c0: 2e 65 6c 61 73 74 69 63 2e 63 6f 82 0b 70 72 65 .elastic.co..pre
06d0: 6c 65 72 74 2e 63 6f 6d 82 17 72 61 6c 6c 79 2d lert.com..rally-
06e0: 74 72 61 63 6b 73 2e 65 6c 61 73 74 69 63 2e 63 tracks.elastic.c
06f0: 6f 82 1b 73 6e 61 70 73 68 6f 74 73 2d 6e 6f 2d o..snapshots-no-
0700: 6b 70 69 2e 65 6c 61 73 74 69 63 2e 63 6f 82 14 kpi.elastic.co..
0710: 73 6e 61 70 73 68 6f 74 73 2e 65 6c 61 73 74 69 snapshots.elasti
0720: 63 2e 63 6f 82 12 73 74 61 67 69 6e 67 2e 65 6c c.co..staging.el
0730: 61 73 74 69 63 2e 63 6f 82 10 73 74 61 74 73 2e astic.co..stats.
0740: 65 6c 61 73 74 69 63 2e 63 6f 82 19 73 75 70 70 elastic.co..supp
0750: 6f 72 74 2e 65 6c 61 73 74 69 63 73 65 61 72 63 ort.elasticsearc
0760: 68 2e 63 6f 6d 82 13 74 72 61 69 6e 69 6e 67 2e h.com..training.
0770: 65 6c 61 73 74 69 63 2e 63 6f 82 1a 74 72 61 69 elastic.co..trai
0780: 6e 69 6e 67 2e 65 6c 61 73 74 69 63 73 65 61 72 ning.elasticsear
0790: 63 68 2e 63 6f 6d 82 0f 77 69 6b 69 2e 65 6c 61 ch.com..wiki.ela
07a0: 73 74 69 63 2e 63 6f 82 0f 77 77 77 2e 65 6c 61 stic.co..www.ela
07b0: 73 74 69 63 2e 77 74 66 82 14 77 77 77 2e 65 6c stic.wtf..www.el
07c0: 61 73 74 69 63 62 65 61 74 73 2e 77 74 66 82 14 asticbeats.wtf..
07d0: 77 77 77 2e 65 6c 61 73 74 69 63 63 6c 6f 75 64 www.elasticcloud
07e0: 2e 77 74 66 82 13 77 77 77 2e 65 6c 61 73 74 69 .wtf..www.elasti
07f0: 63 6c 6f 75 64 2e 77 74 66 82 10 77 77 77 2e 65 cloud.wtf..www.e
0800: 6c 61 73 74 69 63 6f 6e 2e 63 6f 82 11 77 77 77 lasticon.co..www
0810: 2e 65 6c 61 73 74 69 63 6f 6e 2e 63 6f 6d 82 1d .elasticon.com..
0820: 77 77 77 2e 65 6c 61 73 74 69 63 70 61 72 74 6e www.elasticpartn
0830: 65 72 61 63 61 64 65 6d 79 2e 63 6f 6d 82 14 77 eracademy.com..w
0840: 77 77 2e 65 6c 61 73 74 69 63 73 65 61 72 63 68 ww.elasticsearch
0850: 2e 6a 70 82 15 77 77 77 2e 65 6c 61 73 74 69 63 .jp..www.elastic
0860: 73 65 61 72 63 68 2e 6f 72 67 82 15 77 77 77 2e search.org..www.
0870: 65 6c 61 73 74 69 63 73 65 61 72 63 68 2e 77 74 elasticsearch.wt
0880: 66 82 0e 77 77 77 2e 6b 69 62 61 6e 61 2e 77 74 f..www.kibana.wt
0890: 66 82 10 77 77 77 2e 6c 6f 67 73 74 61 73 68 2e f..www.logstash.
08a0: 6e 65 74 82 10 77 77 77 2e 6c 6f 67 73 74 61 73 net..www.logstas
08b0: 68 2e 77 74 66 30 13 06 03 55 1d 20 04 0c 30 0a h.wtf0...U. ..0.
08c0: 30 08 06 06 67 81 0c 01 02 01 30 2e 06 03 55 1d 0...g.....0...U.
08d0: 1f 04 27 30 25 30 23 a0 21 a0 1f 86 1d 68 74 74 ..'0%0#.!....htt
08e0: 70 3a 2f 2f 72 31 32 2e 63 2e 6c 65 6e 63 72 2e p://r12.c.lencr.
08f0: 6f 72 67 2f 36 37 2e 63 72 6c 30 82 01 03 06 0a org/67.crl0.....
0900: 2b 06 01 04 01 d6 79 02 04 02 04 81 f4 04 81 f1 +.....y.........
0910: 00 ef 00 76 00 cb 38 f7 15 89 7c 84 a1 44 5f 5b ...v..8...|..D_[
0920: c1 dd fb c9 6e f2 9a 59 cd 47 0a 69 05 85 b0 cb ....n..Y.G.i....
0930: 14 c3 14 58 e7 00 00 01 99 ce ac 6f 8d 00 00 04 ...X.......o....
0940: 03 00 47 30 45 02 20 69 96 8c 5d 3e ef b1 80 2c ..G0E. i..]>...,
0950: 0d 80 cd ad 62 f4 12 9a 9e 8f 50 05 be f2 74 de ....b.....P...t.
0960: 44 95 89 84 67 0f 4d 02 21 00 8b 77 eb c5 fd 5d D...g.M.!..w...]
0970: f9 8e e5 6e d9 ad 48 6c 57 ee f6 c3 ea 30 b3 ac ...n..HlW....0..
0980: ec 41 59 aa fd bb 01 07 2f ee 00 75 00 0e 57 94 .AY...../..u..W.
0990: bc f3 ae a9 3e 33 1b 2c 99 07 b3 f7 90 df 9b c2 ....>3.,........
09a0: 3d 71 32 25 dd 21 a9 25 ac 61 c5 4e 21 00 00 01 =q2%.!.%.a.N!...
09b0: 99 ce ac 6f 34 00 00 04 03 00 46 30 44 02 20 6e ...o4.....F0D. n
09c0: e4 9c 82 29 29 b6 0b 65 7c 15 8d 17 63 30 6a b3 ...))..e|...c0j.
09d0: 6e 34 7e 93 f4 b3 57 8e 5e f9 3b 5c 41 a2 04 02 n4~...W.^.;\A...
09e0: 20 73 3b 42 b2 66 1b f1 69 e2 17 ab b3 5d 36 32 s;B.f..i....]62
09f0: 4b 7a 38 2a 9e 3a d4 22 d7 31 ba 6b c2 51 2d 6d Kz8*.:.".1.k.Q-m
0a00: 32 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 20...*.H........
0a10: 03 82 01 01 00 a5 82 45 6b 7b d9 29 85 9c 88 7b .......Ek{.)...{
0a20: 4b 57 c0 92 81 1e 04 05 a8 7e c8 65 54 40 c2 98 KW.......~.eT@..
0a30: 01 7e 95 7f c8 eb b0 6e fc f3 ae bf 5e eb 76 ec .~....n....^.v.
0a40: cd 95 70 db ec cd aa d1 da cf 7c 40 fa bb e2 90 ..p.......|@....
0a50: 3e 22 63 f4 bc 41 6c 75 a3 f8 95 7a 56 95 4e 0e >"c..Alu...zV.N.
0a60: bf 31 85 f0 1e b9 33 9e e0 a0 b9 de 5b 0f 81 a1 .1....3.....[...
0a70: d8 a8 9b e1 83 1c 5e 15 86 aa de f3 5c b0 3b d5 ......^.....\.;.
0a80: 43 43 9a b9 ff 0a 3e f4 c2 ac b7 eb 42 ba 54 51 CC....>.....B.TQ
0a90: 22 f5 7a f6 20 59 df 1f 79 4c 3d 05 d0 84 30 0a ".z. Y..yL=...0.
0aa0: 69 69 bc b0 c9 21 e1 83 c4 4f 4e 1e c8 e8 4f 6e ii...!...ON...On
0ab0: 35 8b 6b 18 db 0b e7 d0 7d 11 37 4e e4 d2 64 83 5.k.....}.7N..d.
0ac0: 9d e6 b7 06 e2 3b 31 fc b9 0c fe 10 a9 a3 a2 16 .....;1.........
0ad0: 41 b7 d4 a5 50 88 41 0c 76 a8 09 c4 ba 32 27 5a A...P.A.v....2'Z
0ae0: a9 f0 5b 1c 8e 39 20 a7 b1 fe 56 05 52 a3 ce 15 ..[..9 ...V.R...
0af0: c3 ee 20 ef f0 be 8c 08 a6 c8 a4 10 16 cf 46 04 .. ...........F.
0b00: d1 93 7a e8 1e 52 26 e2 99 0e db f7 3b c6 94 9a ..z..R&.....;...
0b10: 9c 99 8e eb 80 00 00 00 05 0a 30 82 05 06 30 82 ..........0...0.
0b20: 02 ee a0 03 02 01 02 02 11 00 c2 12 32 4b 70 a9 ............2Kp.
0b30: b4 91 71 dc 40 f7 e2 85 26 3c 30 0d 06 09 2a 86 ..q.@...&<0...*.
0b40: 48 86 f7 0d 01 01 0b 05 00 30 4f 31 0b 30 09 06 H........0O1.0..
0b50: 03 55 04 06 13 02 55 53 31 29 30 27 06 03 55 04 .U....US1)0'..U.
0b60: 0a 13 20 49 6e 74 65 72 6e 65 74 20 53 65 63 75 .. Internet Secu
0b70: 72 69 74 79 20 52 65 73 65 61 72 63 68 20 47 72 rity Research Gr
0b80: 6f 75 70 31 15 30 13 06 03 55 04 03 13 0c 49 53 oup1.0...U....IS
0b90: 52 47 20 52 6f 6f 74 20 58 31 30 1e 17 0d 32 34 RG Root X10...24
0ba0: 30 33 31 33 30 30 30 30 30 30 5a 17 0d 32 37 30 0313000000Z..270
0bb0: 33 31 32 32 33 35 39 35 39 5a 30 33 31 0b 30 09 312235959Z031.0.
0bc0: 06 03 55 04 06 13 02 55 53 31 16 30 14 06 03 55 ..U....US1.0...U
0bd0: 04 0a 13 0d 4c 65 74 27 73 20 45 6e 63 72 79 70 ....Let's Encryp
0be0: 74 31 0c 30 0a 06 03 55 04 03 13 03 52 31 32 30 t1.0...U....R120
0bf0: 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 .."0...*.H......
0c00: 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 .......0........
0c10: da 98 28 74 ad be 94 fe 3b e0 1e e2 e5 4b 75 ab ..(t....;....Ku.
0c20: 2c 12 7f ed a7 03 32 7e 36 97 ec e8 31 8f a5 13 ,....2~6...1...
0c30: 8d 0b 99 2e 1e cd 01 51 3d 4c e5 28 6e 09 55 31 .......Q=L.(n.U1
0c40: aa a5 22 5d 72 f4 2d 07 c2 4d 40 3c df 01 23 b9 .."]r.-..M@<..#.
0c50: 78 37 f5 1a 65 32 34 e6 86 71 9d 04 ef 84 08 5b x7..e24..q.....[
0c60: bd 02 1a 99 eb a6 01 00 9a 73 90 6d 8f a2 07 a0 .........s.m....
0c70: d0 97 d3 da 45 61 81 35 3d 14 f9 c4 c0 5f 6a dc ....Ea.5=...._j.
0c80: 0b 96 1a b0 9f e3 2a ea bd 2a d6 98 c7 9b 71 ab ......*..*....q.
0c90: 3b 74 0f 3c db b2 60 be 5a 4b 4e 18 e9 db 2a 73 ;t.<..`.ZKN...*s
0ca0: 5c 89 61 65 9e fe ed 3c a6 cb 4e 6f e4 9e f9 00 \.ae...<..No....
0cb0: 46 b3 ff 19 4d 2a 63 b3 8e 66 c6 18 85 70 c7 50 F...M*c..f...p.P
0cc0: 65 6f 3b 74 e5 48 83 0f 08 58 5d 2d 23 9d 5e a3 eo;t.H...X]-#.^.
0cd0: fe e8 db 00 a1 d2 f4 e3 19 4d f2 ee 7a f6 27 9e .........M..z.'.
0ce0: e5 cd 9c 2d a2 f2 7f 9c 17 ad ef 13 37 39 d1 b4 ...-.......79..
0cf0: c8 2c 41 d6 86 c0 e9 ec 21 f8 59 1b 7f b9 3a 7c .,A.....!.Y..:|
0d00: 9f 5c 01 9d 62 04 c2 28 bd 0a ad 3c ca 10 ec 1b .\..b..(...<....
0d10: 02 03 01 00 01 a3 81 f8 30 81 f5 30 0e 06 03 55 ........0..0...U
0d20: 1d 0f 01 01 ff 04 04 03 02 01 86 30 1d 06 03 55 ...........0...U
0d30: 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 02 .%..0...+.......
0d40: 06 08 2b 06 01 05 05 07 03 01 30 12 06 03 55 1d ..+.......0...U.
0d50: 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d ......0.......0.
0d60: 06 03 55 1d 0e 04 16 04 14 00 b5 29 f2 2d 8e 6f ..U........).-.o
0d70: 31 e8 9b 4c ad 78 3e fa dc e9 0c d1 d2 30 1f 06 1..L.x>......0..
0d80: 03 55 1d 23 04 18 30 16 80 14 79 b4 59 e6 7b b6 .U.#..0...y.Y.{.
0d90: e5 e4 01 73 80 08 88 c8 1a 58 f6 e9 9b 6e 30 32 ...s.....X...n02
0da0: 06 08 2b 06 01 05 05 07 01 01 04 26 30 24 30 22 ..+........&0$0"
0db0: 06 08 2b 06 01 05 05 07 30 02 86 16 68 74 74 70 ..+.....0...http
0dc0: 3a 2f 2f 78 31 2e 69 2e 6c 65 6e 63 72 2e 6f 72 ://x1.i.lencr.or
0dd0: 67 2f 30 13 06 03 55 1d 20 04 0c 30 0a 30 08 06 g/0...U. ..0.0..
0de0: 06 67 81 0c 01 02 01 30 27 06 03 55 1d 1f 04 20 .g.....0'..U...
0df0: 30 1e 30 1c a0 1a a0 18 86 16 68 74 74 70 3a 2f 0.0.......http:/
0e00: 2f 78 31 2e 63 2e 6c 65 6e 63 72 2e 6f 72 67 2f /x1.c.lencr.org/
0e10: 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 0...*.H.........
0e20: 82 02 01 00 8f 75 d0 09 cf 6a 76 48 65 32 92 de .....u...jvHe2..
0e30: b5 44 c8 85 76 f4 15 84 8c 02 bf 76 eb b3 f1 e2 .D..v......v....
0e40: f9 6e 84 a8 56 91 e1 92 4b f7 e1 ea 00 78 48 8f .n..V...K....xH.
0e50: 75 92 e3 e4 46 7b 1b 60 2b 20 af a0 ce 14 e5 45 u...F{.`+ .....E
0e60: 0d 6a e0 52 86 a4 f3 da 14 14 a9 a9 5f f1 6d 46 .j.R........_.mF
0e70: f9 52 50 17 40 e9 e4 1e 7d e6 15 58 fe a9 8b fc .RP.@...}..X....
0e80: ef f5 9e 63 e0 66 e2 c3 77 3b 1f 01 87 26 94 ed ...c.f..w;...&..
0e90: 40 10 dc b7 99 ec dd 57 d3 5c 71 41 ee 30 20 00 @......W.\qA.0 .
0ea0: 04 dc 95 4b 50 28 87 99 92 fe aa 80 94 b6 06 08 ...KP(..........
0eb0: 14 f8 1c 83 7e 74 40 c5 08 5a 0c 4f 5c d1 84 9d ....~t@..Z.O\...
0ec0: c4 fd db 59 de ee 79 6e 23 4d 95 f2 92 d4 98 29 ...Y..yn#M.....)
0ed0: 6a 5c eb 02 c1 42 f0 f8 f5 4e 64 20 7b a8 e3 31 j\...B...Nd {..1
0ee0: c4 c0 68 09 47 8b d8 b9 78 a0 ca 4e 4a be 69 24 ..h.G...x..NJ.i$
0ef0: 2a 4b 37 7b 51 03 6b 3a 3f 52 8b b3 d4 d2 ad 58 *K7{Q.k:?R.....X
0f00: 4e 93 ee cb 5f 6f 0d 31 49 48 ba c4 3f 9f 12 c9 N..._o.1IH..?...
0f10: 20 3d 11 84 07 85 b4 f8 f2 38 23 ac 71 00 40 e7 =.......8#.q.@.
0f20: 7f 8d 46 34 82 6a 4e cf e0 0e 63 5f ba 69 9a 47 .F4.jN...c_.i.G
0f30: 09 10 22 fe 4b 48 b7 91 75 54 cb 93 1e e4 16 eb ..".KH..uT......
0f40: 53 cf 7b de 36 4d bf f6 b1 eb e6 4a e9 33 3c 8d S.{.6M.....J.3<.
0f50: 69 a2 98 be a8 7f a3 ab 5f b6 54 e8 4d 96 a9 ac i......_.T.M...
0f60: f3 b0 5a cb 1b 7a 36 93 24 9b ce 58 52 80 9f 35 ..Z..z6.$..XR..5
0f70: 0a 5e 2d bf 74 9b 62 26 17 9c 91 31 29 0b f3 7f .^-.t.b&...1)..
0f80: cd c3 62 8b 68 c7 77 f4 7f 0b fb c6 59 f5 03 66 ..b.h.w....Y..f
0f90: 4b a6 50 9b d0 ef a5 fc 02 b4 60 4d 03 4b 61 4f K.P.......`M.KaO
0fa0: c5 20 07 8b 48 b0 31 f5 b6 9c d1 c9 ad 77 18 dc . ..H.1......w..
0fb0: b2 c7 0f be e0 46 08 de e0 4b de b9 b8 b6 c7 16 .....F...K......
0fc0: be 36 69 3f 86 68 4b 74 81 13 89 50 c5 6a 7a 02 .6i?.hKt...P.jz.
0fd0: ac c5 48 a5 0e 7d 5d 61 e4 cd d1 66 a0 75 c7 05 ..H..}]a...f.u..
0fe0: 5e e8 89 b5 63 19 23 bb 50 b4 90 ec c2 75 37 3e ^...c.#.P....u7>
0ff0: 75 a6 1b 83 25 28 00 21 4e c0 d3 3a cb 9c ea c0 u...%(.!N..:....
1000: 8f f7 5f ae 51 16 46 10 af 02 06 ee c0 b6 57 d4 .._.Q.F.......W.
1010: 0d ac 8c d8 d7 a0 f3 87 6e c3 e2 cb e9 4e d4 a1 ........n....N..
1020: 7c fd 76 3b 00 00 |.v;..
11:43:23.336337 == Info: TLSv1.3 (IN), TLS handshake, CERT verify (15):
11:43:23.336372 <= Recv SSL data, 264 bytes (0x108)
0000: 0f 00 01 04 08 04 01 00 ce 79 12 16 28 10 ea 93 .........y..(...
0010: 1f 61 68 73 9d 56 a0 51 22 99 6a 00 40 64 c5 c2 .ahs.V.Q".j.@d..
0020: 3e d3 b1 25 44 b8 63 db 88 4b ab 2c 8e 7a a9 4f >..%D.c..K.,.z.O
0030: 25 5a fd e5 15 2f 1d 19 a9 3e c2 f8 53 75 6c c2 %Z.../...>..Sul.
0040: 3f c3 51 19 b6 6b 5d b0 b8 0e 03 6f 71 47 ca 35 ?.Q..k]....oqG.5
0050: 33 cf 2d ff 2c 13 29 12 4c 48 5c bd 1b 03 c9 85 3.-.,.).LH\.....
0060: 28 d7 e6 43 b8 33 57 79 59 44 bd 2b 45 d8 b4 4b (..C.3WyYD.+E..K
0070: ca 17 5d 94 e7 b2 55 d3 24 c7 6f db cf 97 f3 a3 ..]...U.$.o.....
0080: 7f 14 1c c6 f9 ff 17 8e ad 33 55 31 36 aa 91 eb ........3U16...
0090: 9d 16 e9 e7 26 56 6c a2 8b a4 e4 92 54 d2 a4 2e ....&Vl.....T...
00a0: d7 01 3b f1 eb 2c 3e 79 18 af 15 ee 44 72 b9 cd ..;..,>y....Dr..
00b0: 41 71 4b 8a b5 24 27 d9 8d 9d c1 c8 f7 9d 09 ad AqK..$'.........
00c0: cd 4a ee 88 68 d5 25 54 bc dd dd 08 2d 6d 3c ab .J..h.%T....-m<.
00d0: e6 81 4e 86 33 ac 70 e3 d0 bd 55 25 a1 45 9a 55 ..N.3.p...U%.E.U
00e0: ca b0 00 df b5 14 fd e7 59 8c f3 d4 c1 49 09 d3 ........Y....I..
00f0: fe 46 29 26 c5 99 6d e1 12 cd fa 07 4a d1 3c 8b .F)&..m.....J.<.
0100: 12 48 9c 3f 81 ff db 9f .H.?....
11:43:23.336853 == Info: TLSv1.3 (IN), TLS handshake, Finished (20):
11:43:23.336882 <= Recv SSL data, 52 bytes (0x34)
0000: 14 00 00 30 60 42 6a 77 8b 85 fd 79 1c f3 2e 7a ...0`Bjw...y...z
0010: be fb 49 55 18 70 c8 ac b5 e7 c0 16 ab d5 90 c2 ..IU.p..........
0020: 00 7f 6d c9 7e 03 83 d2 08 ef e0 dc c6 16 62 c9 .m.~.........b.
0030: 12 80 1e c3 ....
11:43:23.337130 == Info: TLSv1.2 (OUT), TLS header, Finished (20):
11:43:23.337160 => Send SSL data, 5 bytes (0x5)
0000: 14 03 03 00 01 .....
11:43:23.337220 == Info: TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
11:43:23.337245 => Send SSL data, 1 bytes (0x1)
0000: 01 .
11:43:23.337366 == Info: TLSv1.2 (OUT), TLS header, Supplemental data (23):
11:43:23.337396 => Send SSL data, 5 bytes (0x5)
0000: 17 03 03 00 45 ....E
11:43:23.337430 => Send SSL data, 1 bytes (0x1)
0000: 16 .
11:43:23.337473 == Info: TLSv1.3 (OUT), TLS handshake, Finished (20):
11:43:23.337521 => Send SSL data, 52 bytes (0x34)
0000: 14 00 00 30 62 86 be 59 71 0d 67 17 9c bf 9b bf ...0b..Yq.g.....
0010: 7a 1f e9 ba 74 39 d3 95 a4 78 0a e3 e1 9d e1 8d z...t9...x......
0020: 69 b3 41 6e 59 c6 86 e3 22 8f ca b3 05 c9 f3 ed i.AnY...".......
0030: 65 3d d3 3c e=.<
11:43:23.337709 == Info: SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
11:43:23.337764 == Info: ALPN, server accepted to use h2
11:43:23.337785 == Info: Server certificate:
11:43:23.337817 == Info: subject: CN=elastic.co
11:43:23.337846 == Info: start date: Oct 10 14:12:00 2025 GMT
11:43:23.337873 == Info: expire date: Jan 8 14:11:59 2026 GMT
11:43:23.337985 == Info: subjectAltName: host "artifacts.elastic.co" matched cert's "artifacts.elastic.co"
11:43:23.338062 == Info: issuer: C=US; O=Let's Encrypt; CN=R12
11:43:23.338088 == Info: SSL certificate verify ok.
11:43:23.338179 == Info: Using HTTP2, server supports multiplexing
11:43:23.338227 == Info: Connection state changed (HTTP/2 confirmed)
11:43:23.338254 == Info: Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
11:43:23.338346 == Info: TLSv1.2 (OUT), TLS header, Supplemental data (23):
11:43:23.338364 => Send SSL data, 5 bytes (0x5)
0000: 17 03 03 00 29 ....)
11:43:23.338419 => Send SSL data, 1 bytes (0x1)
0000: 17 .
11:43:23.338507 == Info: TLSv1.2 (OUT), TLS header, Supplemental data (23):
11:43:23.338532 => Send SSL data, 5 bytes (0x5)
0000: 17 03 03 00 2c ....,
11:43:23.338557 => Send SSL data, 1 bytes (0x1)
0000: 17 .
11:43:23.338647 == Info: TLSv1.2 (OUT), TLS header, Supplemental data (23):
11:43:23.338672 => Send SSL data, 5 bytes (0x5)
0000: 17 03 03 00 1e .....
11:43:23.338705 => Send SSL data, 1 bytes (0x1)
0000: 17 .
11:43:23.338829 == Info: Using Stream ID: 1 (easy handle 0x560daaaac9f0)
11:43:23.338876 == Info: TLSv1.2 (OUT), TLS header, Supplemental data (23):
11:43:23.338900 => Send SSL data, 5 bytes (0x5)
0000: 17 03 03 00 4d ....M
11:43:23.338934 => Send SSL data, 1 bytes (0x1)
0000: 17 .
11:43:23.339006 => Send header, 103 bytes (0x67)
0000: 47 45 54 20 2f 47 50 47 2d 4b 45 59 2d 65 6c 61 GET /GPG-KEY-ela
0010: 73 74 69 63 73 65 61 72 63 68 20 48 54 54 50 2f sticsearch HTTP/
0020: 32 0d 0a 48 6f 73 74 3a 20 61 72 74 69 66 61 63 2..Host: artifac
0030: 74 73 2e 65 6c 61 73 74 69 63 2e 63 6f 0d 0a 75 ts.elastic.co..u
0040: 73 65 72 2d 61 67 65 6e 74 3a 20 63 75 72 6c 2f ser-agent: curl/
0050: 37 2e 38 31 2e 30 0d 0a 61 63 63 65 70 74 3a 20 7.81.0..accept:
0060: 2a 2f 2a 0d 0a 0d 0a */*....
11:43:23.340961 == Info: TLSv1.2 (IN), TLS header, Supplemental data (23):
11:43:23.341001 <= Recv SSL data, 5 bytes (0x5)
0000: 17 03 03 02 49 ....I
11:43:23.341040 <= Recv SSL data, 1 bytes (0x1)
0000: 16 .
11:43:23.341129 == Info: TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
11:43:23.341162 <= Recv SSL data, 284 bytes (0x11c)
0000: 04 00 01 18 00 02 a3 00 2a 33 e7 65 01 00 01 06 ........*3.e....
0010: 02 49 94 9b 99 9c 2a be 6b 7b 93 4f a1 eb 90 c8 .I....*.k{.O....
0020: 34 15 51 84 e1 ab 77 7e fd 76 a6 8a 3c 48 18 c5 4.Q...w~.v..<H..
0030: 1c 0e ed 30 96 aa 8a 4d 15 9f 49 50 5e ed 43 35 ...0...M..IP^.C5
0040: 5f e4 38 0d 38 a0 59 fb 44 0f d2 db 99 2d 90 52 _.8.8.Y.D....-.R
0050: 5a 51 bd ac b1 58 53 e4 25 6b 69 91 d1 eb 33 08 ZQ...XS.%ki...3.
0060: 73 d7 d6 a4 a4 91 59 63 6e db 53 dd 78 98 78 d6 s.....Ycn.S.x.x.
0070: e5 cc 93 78 51 9c e5 42 68 16 47 ff 78 3f ad 27 ...xQ..Bh.G.x?.'
0080: 0b 2a cf 68 43 2f 13 d0 0b e4 e2 46 23 9c 5e 4b .*.hC/.....F#.^K
0090: e6 75 f3 73 42 03 b0 64 6e c7 11 ff fb 2b aa 8c .u.sB..dn....+..
00a0: c1 0c e7 71 92 22 f1 ed 64 58 89 27 5b 12 32 b4 ...q."..dX.'[.2.
00b0: 95 a5 7e d3 db 57 1b ad 91 9e a3 d8 f0 d0 e7 85 ..~..W..........
00c0: 89 cc fb 25 fe 8d 68 2e 4e 5f 12 7a 62 03 62 25 ...%..h.N_.zb.b%
00d0: e0 f0 92 5f 5e 69 b4 d7 4c 65 13 09 00 c6 ad b6 ..._^i..Le......
00e0: 4e 59 c3 04 5c c9 e1 2e db 18 2c d0 95 bd ae d7 NY..\.....,.....
00f0: 4d 46 94 50 ef 6f 5b f8 7e b7 04 bd 80 94 47 88 MF.P.o[.~.....G.
0100: f6 59 54 8c 2d e7 e5 69 af 99 03 4c 50 50 e2 6a .YT.-..i...LPP.j
0110: 70 98 2d d4 33 32 00 04 ca ca 00 00 p.-.32......
11:43:23.341615 == Info: TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
11:43:23.341714 <= Recv SSL data, 284 bytes (0x11c)
0000: 04 00 01 18 00 02 a3 00 45 a8 11 2c 01 01 01 06 ........E..,....
0010: 02 49 94 9b 99 9c 2a be 6b 7b 93 4f a1 eb 90 c8 .I....*.k{.O....
0020: 8d cf 20 0b 26 c5 df 65 2e 78 bb 20 44 8c c3 52 .. .&..e.x. D..R
0030: b9 2c 40 06 69 16 b2 23 58 7d fe b8 82 75 03 42 .,@.i..#X}...u.B
0040: e7 95 19 62 d0 87 25 0b e7 b9 88 65 1d 91 2b 48 ...b..%....e..+H
0050: 47 05 5e 5a 74 40 1c a8 ae e5 6e 66 0b 16 78 31 G.^Zt@....nf..x1
0060: c6 1a a5 f2 38 18 3d f0 ec 5a cc ed df 9d 11 ee ....8.=..Z......
0070: b6 33 21 74 91 1f fd f0 79 87 0d 03 9b b1 da 1e .3!t....y.......
0080: 7a 67 4f 5c 08 34 03 8d f0 c4 ce 5f 29 b4 bd bb zgO\.4....._)...
0090: 7b 79 df 33 08 b8 79 fc 23 8a cc 6c 78 63 a7 b7 {y.3..y.#..lxc..
00a0: a4 84 75 b7 ed cc 20 9a 49 1b 61 36 1f 54 3a 1a ..u... .I.a6.T:.
00b0: 23 63 21 f8 92 92 54 47 94 2f 63 d6 27 e1 3c 3f #c!...TG./c.'.<?
00c0: d3 51 8f 80 98 44 8f 34 c0 10 0a 47 e8 2c 4f 19 .Q...D.4...G.,O.
00d0: c5 37 1a d7 95 4c 44 ee 06 db 77 0c 51 73 18 d0 .7...LD...w.Qs..
00e0: da 70 0f a8 00 7e ae b6 80 cf 27 56 d7 5b e7 39 .p...~....'V.[.9
00f0: ed 27 ef b7 1f fb bf d6 0b b9 15 0f 48 be 95 67 .'..........H..g
0100: cb ca f8 ac b4 fb 91 1f 8f 35 58 4c 50 50 9f c3 .........5XLPP..
0110: 32 58 f3 e4 83 6e 00 04 ca ca 00 00 2X...n......
11:43:23.342202 == Info: old SSL session ID is stale, removing
11:43:23.342273 == Info: TLSv1.2 (IN), TLS header, Supplemental data (23):
11:43:23.342299 <= Recv SSL data, 5 bytes (0x5)
0000: 17 03 03 00 39 ....9
11:43:23.342684 <= Recv SSL data, 1 bytes (0x1)
0000: 17 .
11:43:23.342744 == Info: TLSv1.2 (OUT), TLS header, Supplemental data (23):
11:43:23.342771 => Send SSL data, 5 bytes (0x5)
0000: 17 03 03 00 1a .....
11:43:23.342808 => Send SSL data, 1 bytes (0x1)
0000: 17 .
11:43:23.342882 == Info: TLSv1.2 (IN), TLS header, Supplemental data (23):
11:43:23.342908 <= Recv SSL data, 5 bytes (0x5)
0000: 17 03 03 00 1a .....
11:43:23.342989 <= Recv SSL data, 1 bytes (0x1)
0000: 17 .
11:43:23.443054 == Info: TLSv1.2 (IN), TLS header, Supplemental data (23):
11:43:23.443101 <= Recv SSL data, 5 bytes (0x5)
0000: 17 03 03 00 7a ....z
11:43:23.443157 <= Recv SSL data, 1 bytes (0x1)
0000: 17 .
11:43:23.443227 <= Recv header, 13 bytes (0xd)
0000: 48 54 54 50 2f 32 20 34 30 33 20 0d 0a HTTP/2 403 ..
11:43:23.443265 <= Recv header, 40 bytes (0x28)
0000: 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 content-type: te
0010: 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 xt/html; charset
0020: 3d 55 54 46 2d 38 0d 0a =UTF-8..
11:43:23.443320 <= Recv header, 30 bytes (0x1e)
0000: 72 65 66 65 72 72 65 72 2d 70 6f 6c 69 63 79 3a referrer-policy:
0010: 20 6e 6f 2d 72 65 66 65 72 72 65 72 0d 0a no-referrer..
11:43:23.443384 <= Recv header, 21 bytes (0x15)
0000: 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 content-length:
0010: 33 31 36 0d 0a 316..
11:43:23.443430 <= Recv header, 57 bytes (0x39)
0000: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 alt-svc: h3=":44
0010: 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 68 3"; ma=2592000,h
0020: 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 3-29=":443"; ma=
0030: 32 35 39 32 30 30 30 0d 0a 2592000..
11:43:23.443524 <= Recv header, 2 bytes (0x2)
0000: 0d 0a ..
11:43:23.443565 == Info: TLSv1.2 (IN), TLS header, Supplemental data (23):
11:43:23.443589 <= Recv SSL data, 5 bytes (0x5)
0000: 17 03 03 01 56 ....V
11:43:23.443635 <= Recv SSL data, 1 bytes (0x1)
0000: 17 .
11:43:23.443681 <= Recv data, 316 bytes (0x13c)
0000: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d .<html><head>.<m
0010: 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 eta http-equiv="
0020: 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f content-type" co
0030: 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c ntent="text/html
0040: 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e ;charset=utf-8">
0050: 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 .<title>403 Forb
0060: 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f idden</title>.</
0070: 68 65 61 64 3e 0a 3c 62 6f 64 79 20 74 65 78 74 head>.<body text
0080: 3d 23 30 30 30 30 30 30 20 62 67 63 6f 6c 6f 72 =#000000 bgcolor
0090: 3d 23 66 66 66 66 66 66 3e 0a 3c 68 31 3e 45 72 =#ffffff>.<h1>Er
00a0: 72 6f 72 3a 20 46 6f 72 62 69 64 64 65 6e 3c 2f ror: Forbidden</
00b0: 68 31 3e 0a 3c 68 32 3e 59 6f 75 72 20 63 6c 69 h1>.<h2>Your cli
00c0: 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 ent does not hav
00d0: 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 e permission to
00e0: 67 65 74 20 55 52 4c 20 3c 63 6f 64 65 3e 2f 47 get URL <code>/G
00f0: 50 47 2d 4b 45 59 2d 65 6c 61 73 74 69 63 73 65 PG-KEY-elasticse
0100: 61 72 63 68 3c 2f 63 6f 64 65 3e 20 66 72 6f 6d arch</code> from
0110: 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 68 this server.</h
0120: 32 3e 0a 3c 68 32 3e 3c 2f 68 32 3e 0a 3c 2f 62 2>.<h2></h2>.</b
0130: 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a ody></html>.
<html><head>
<meta http-equiv="content-type" content="text/html;charset=utf-8">
<title>403 Forbidden</title>
</head>
<body text=#000000 bgcolor=#ffffff>
<h1>Error: Forbidden</h1>
<h2>Your client does not have permission to get URL <code>/GPG-KEY-elasticsearch</code> from this server.</h2>
<h2></h2>
</body></html>
11:43:23.444144 == Info: TLSv1.2 (IN), TLS header, Supplemental data (23):
11:43:23.444171 <= Recv SSL data, 5 bytes (0x5)
0000: 17 03 03 00 22 ...."
11:43:23.444222 <= Recv SSL data, 1 bytes (0x1)
0000: 17 .
11:43:23.444269 == Info: TLSv1.2 (OUT), TLS header, Supplemental data (23):
11:43:23.444296 => Send SSL data, 5 bytes (0x5)
0000: 17 03 03 00 22 ...."
11:43:23.444328 => Send SSL data, 1 bytes (0x1)
0000: 17 .
11:43:23.444399 == Info: Connection #0 to host artifacts.elastic.co left intact
root@proxy-server:~#
Thank you!
Thanks @harizan01. It does look to me that you're hitting the IPv4 endpoint from the trace. Before I raise a ticket with the team, can you check your IPv6 settings look similar to the below so that all relevant settings are covered. I'm not an expert but I pulled relevant settings from a similar issue:
:~$ sudo sysctl -p
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1
Let us know!
root@proxy-server:~# sudo sysctl -p
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1
root@proxy-server:~#
already its like this can you raise a ticket to help me with this issue
Thanks @harizan01. I've raised a ticket and will provide an update when I see a response. Just a heads up that it can take some time to receive a response from the team in my experience.
Hope that helps!
@carly.richmond Thanks for the update. I’ll wait for the team’s response.
Just to add, I also contacted Hetzner regarding this issue, and they confirmed that some GeoIP databases are incorrectly locating certain Hetzner IPs in Iran, and this is outside their control. They suggested assigning an alternative IP if this causes issues.
Sharing this here in case it helps with the investigation.
Thanks again for your support!
Thanks for sharing the Hetzner update @harizan01. This is really useful for us to know. I'll add the context to the ticket.
If you want to try assigning an alternative IP as they suggest and see if that helps do let us know. Alternatively it should be possible to raise a request to GeoIP DBs to have the location reference data updated.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.