Not able to access wiki.manjaro.org

[Acor]

@bendipa1 had the connection problem even in a session of booted installation media. So I exclude a problem of configuration and browser cache. A comparison of the output of

mtr -c 1 --report --tcp --port 443 -bw wiki.manjaro.org

and

mtr -c 1 --report --tcp --port 443 -bw forum.manjaro.org

should show, if there is any blocking on the way to the wiki (ISP?).

If a redirection caused a blocking, then https://wiki.manjaro.org/index.php?title=Main_Page should succed (instead of https://wiki.manjaro.org/index.php). I guess @bendipa1 had tried that.

[soundofthunder]

@Acor

I guess

It seems that’s all we can do.

@bendipa1

refusing to open in any browser

@bendipa1

It affects both my browsers on all 3 Linux distros I have, as well as on the Windows platform.

@Teo

if it happens on 3 different computers with 3 OSes

@bendipa1

Just the one computer, but 3 different Linux distros + Windows 10.

@bendipa1

Is there another physical computer that you can also test with?

[Teo]

…or a smartphone with browser.

[soundofthunder]

@Teo

…or a smartphone with browser.

Unfortunately, that doesn’t seem to be an option.

@bendipa1

I don’t have a smart phone, android or otherwise. Just a simple Nokia type

The Wiki was experiencing BotNet attacks (the reason for migrating it to a new Server) – Bear with me here, as this is at best a little brainstorming…

I wonder if the OP attempted to access the Wiki during that time, and the Wiki ip address was detected as part of an attack and subsequently blocked by the ISP.

Yes, this direction of thought has a few holes in it. If the OP has contacted their ISP as mentioned, perhaps they can shed some light from their perspective.

[Acor]

@Teo

…or a smartphone with browser.

Since @bendipa1 doesn’t have a smartphone: It could also be that of a friend who is visiting and is allowed to use the Wi-Fi.

[PackCat]

This worked for me:

sudo mhwd -la | grep network

network-broadcom-wl    2018.10.07    false    PCI 
network-r8168          2023.09.12    true     PCI 
network-rt3562sta      2013.12.07    true     PCI 
network-slmodem        2013.12.07    true     PCI

sudo mhwd --install pci network-*broadcom-wl*

where broadcom-wi is the name of the wifi network device. (The false one)

I would give formal attestation, but I forgot where I found it.

---

Mod edit:- Post tidied to conform to forum presentational guidelines. No charge.

[Mini-HowTo] Present code or command output

Code or command output is expected to be presented similarly to how it would appear in a text editor (monospaced). The Discourse forum software makes it easy to create an enclosure (a text box) that is already pre-formatted for this purpose.

Note: Grave accent (or, backtick) characters are used.

For inline code or to show a single command:

• please follow this simple example: code here.

For multi-line command output:

• place text beween two rows of three (```) backtick characters to form a scrollable text box, or …
• use the </> button in the Compose window to achieve the same result.

Important: Click the </> button and paste text between the backticks (if using the old Compose layout). Otherwise, paste into the box generated (if using the new Compose layout).

The empty row between these rows of backtick characters is where to paste any multi-line command output (such as inxi).

An example of a pre-formatted text enclosure:

What is a Quark?

A. In Physics, an elementary particle and fundamental constituent of matter. 
B. A character from the Star Trek: "Deep Space Nine" television series.
C. A soft, creamy, usually unsalted cheese traditional to central Europe.

---

[bendipa1]

@Acor

You could use some trace commands to find out where the connection ends, e.g.:

for better readable output:

curl --head --trace - --verbose Manjaro

Sorry for delay in replying.

curl --head --trace - --verbose https://wiki.manjaro.org/index.php

Warning: -v, --verbose overrides an earlier trace option
*   Trying [2a01:4f9:c010:2eb3::1]:443...
* Host wiki.manjaro.org:443 was resolved.
* IPv6: 2a01:4f9:c010:2eb3::1
* IPv4: 95.216.171.102
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* SSL Trust Anchors:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
* TLSv1.3 (OUT), TLS alert, decode error (562):
* TLS connect error: error:0A000126:SSL routines::unexpected eof while reading
* closing connection #0
curl: (35) TLS connect error: error:0A000126:SSL routines::unexpected eof while reading

Can you make any sense of ‘unexpected eof while reading…’ because that appears to be the root cause here? The other commands show similar issue.

[pwx]

Something is definitely wrong with you ca-certificates. Did you consider reinstalling ca-certificates-utils? This is my output in comparison:

curl --head --trace - --verbose https://wiki.manjaro.org/index.php                                                                                            
Warning: -v, --verbose overrides an earlier trace option
*   Trying 95.216.171.102:443...
* Host wiki.manjaro.org:443 was resolved.
* IPv6: 2a01:4f9:c010:2eb3::1
* IPv4: 95.216.171.102
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* SSL Trust Anchors:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / x25519 / id-ecPublicKey
* ALPN: server accepted http/1.1
* Server certificate:
*   subject: CN=wiki.manjaro.org
*   start date: May 17 09:58:42 2026 GMT
*   expire date: Aug 15 09:58:41 2026 GMT
*   issuer: C=US; O=Let's Encrypt; CN=E7
*   Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA384
*   Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
*   subjectAltName: "wiki.manjaro.org" matches cert's "wiki.manjaro.org"
* OpenSSL verify result: 0
* SSL certificate verified via OpenSSL.
* Established connection to wiki.manjaro.org (95.216.171.102 port 443) from 10.2.0.2 port 59804 
* using HTTP/1.x
> HEAD /index.php HTTP/1.1
> Host: wiki.manjaro.org
> User-Agent: curl/8.21.0
> Accept: */*
> 
* Request completely sent off
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
< HTTP/1.1 301 Moved Permanently
HTTP/1.1 301 Moved Permanently
< Server: nginx/1.24.0 (Ubuntu)
Server: nginx/1.24.0 (Ubuntu)
< Date: Sun, 28 Jun 2026 20:02:15 GMT
Date: Sun, 28 Jun 2026 20:02:15 GMT
< Content-Type: text/html; charset=utf-8
Content-Type: text/html; charset=utf-8
< Connection: keep-alive
Connection: keep-alive
< X-Content-Type-Options: nosniff
X-Content-Type-Options: nosniff
< Vary: Accept-Encoding, Accept-Language, Cookie
Vary: Accept-Encoding, Accept-Language, Cookie
< Expires: Sun, 28 Jun 2026 20:02:15 GMT
Expires: Sun, 28 Jun 2026 20:02:15 GMT
< Cache-Control: private, must-revalidate, max-age=0
Cache-Control: private, must-revalidate, max-age=0
< Last-Modified: Sun, 28 Jun 2026 20:02:15 GMT
Last-Modified: Sun, 28 Jun 2026 20:02:15 GMT
< Location: https://wiki.manjaro.org/index.php?title=Main_Page
Location: https://wiki.manjaro.org/index.php?title=Main_Page
< X-Request-Id: 286db4a7826c4f9e4d22f05e
X-Request-Id: 286db4a7826c4f9e4d22f05e
< 

* Connection #0 to host wiki.manjaro.org:443 left intact

[mithrial]

Do you live in a country where TLS1v3 might be disabled? This typically happens if your government would like to see all your traffic and if it can’t, drop the connection.

[bendipa1]

Before I re-install ca certificates utils:-

1. Why am I only affected by this Wiki website so far? No other Wiki website or any other website is failing to open. The same website issue occurs on all other Linux distros (eg Endeavouros Ubuntu) I’ve used as well, using Chromium browser.

2. I thought ca certificates relate directly to a particular website itself, not my computer system.

3. UPDATE: I can now access the Wiki link, but only using Firefox on each distro, and Win 10. A few weeks ago it did not open with Firefox. Meanwhile Chromium, my main browser continues to refuse it, as does MS Edge which is based on Chromium. Both say the website is insecure as the reason for refusal.

[cfinnberg]

@bendipa1

* TLS connect error: error:0A000126:SSL routines::unexpected eof while reading
* closing connection #0
curl: (35) TLS connect error: error:0A000126:SSL routines::unexpected eof while reading

To me that reads like you are behind a firewall that is blocking, for whatever reason, the connection to the wiki. At least I get something quite similar with some domains at work.

[mithrial]

@bendipa1

UPDATE: I can now access the Wiki link, but only using Firefox on each distro, and Win 10. A few weeks ago it did not open with Firefox. Meanwhile Chromium, my main browser continues to refuse it, as does MS Edge which is based on Chromium. Both say the website is insecure as the reason for refusal.

This sounds like Firefox is using DNS-over-TLS and receives the correct domain to initiate the transfer. Or it’s not configured as secure as the others and uses less secure settings to connect.

[Acor]

Hi @bendipa1, since you can evidently access this forum, you can compare the output of “mtr” for both destinations wiki.manjaro.org and forum.manjaro.org.

In curl output of @pwx you can see that the real target location of the wiki is

https://wiki.manjaro.org/index.php?title=Main_Page

You never told us what result you got at this URL.

@bendipa1

The other commands show similar issue

Do you mean the output of mtr -c 1 --report --tcp --port 443 -bw wiki.manjaro.org ?

(The packet “mtr” must be installed.)

When I run the command in my shell, 11 hops are displayed. The first is my router, the fifth is core8.fra.hetzner.com and eighth is spine1-rdev1.cloud1.hel1.hetzner.com.`

The same ones as in output of mtr -c 1 --report --tcp --port 443 -bw forum.manjaro.org .

@bendipa1

MS Edge which is based on Chromium. Both say the website is insecure as the reason for refusal

You evidently did not follow the self-help measure known for such cases: clearing the browser cache (corresponding advice was given here).

https://shop.trustico.de: "If a visitor’s browser has cached … old SSL Certificate information, it may become confused when the server presents the new SSL Certificate.

This mismatch can trigger warnings about SSL Certificate changes or cause connection failures as the browser struggles to reconcile cached data with the new SSL Certificate. The visitor’s browser essentially expects one SSL Certificate but receives another."

I’m out.

Mod edit: Consecutive posts merged.

@cfinnberg

like you are behind a firewall

… or using a closed IT infrastructure e.g. in a gated living complex with a caching internet proxy server, that is administered by another person.

[bendipa1]

@Acor

Hi @bendipa1, since you can evidently access this forum, you can compare the output of “mtr” for both destinations wiki.manjaro.org and forum.manjaro.org.

mtr -c 1 --report --tcp --port 443 -bw wiki.manjaro.org

Start: 2026-07-09T19:51:40+0100
HOST: paulb-vostro470                         Loss%   Snt   Last   Avg  Best  Wrst StDev
  1.|-- 2a04:4a43:843f:f005:696e:dec2:f46f:4ba6  0.0%     1    1.2   1.2   1.2   1.2   0.0
  2.|-- ???                                     100.0     1    0.0   0.0   0.0   0.0   0.0
  3.|-- 2a04:4a44:4:18b5::1                      0.0%     1   20.8  20.8  20.8  20.8   0.0
  4.|-- ???                                     100.0     1    0.0   0.0   0.0   0.0   0.0
  5.|-- 2a01:4f9:c010:2eb3::1                    0.0%     1   14.1  14.1  14.1  14.1   0.0

mtr -c 1 --report --tcp --port 443 -bw forum.manjaro.org

Start: 2026-07-09T19:56:24+0100
HOST: paulb-vostro470                         Loss%   Snt   Last   Avg  Best  Wrst StDev
  1.|-- 2a04:4a43:843f:f005:696e:dec2:f46f:4ba6  0.0%     1    1.1   1.1   1.1   1.1   0.0
  2.|-- ???                                     100.0     1    0.0   0.0   0.0   0.0   0.0
  3.|-- 2a04:4a44:4:18b5::1                      0.0%     1   15.2  15.2  15.2  15.2   0.0
  4.|-- ???                                     100.0     1    0.0   0.0   0.0   0.0   0.0
  5.|-- 2a01:4f9:c010:b613::1                    0.0%     1   17.4  17.4  17.4  17.4   0.0

So. er - is this of any use, as you requested, because I don’t know what I’m supposed to be looking for or comparing?

[Teo]

@bendipa1

mtr -c 1 --report --tcp --port 443 -bw forum.manjaro.org

Would you repeat with a

mtr -c 1 --report --tcp  -4 --port 443 -bw forum.manjaro.org

cause i do not currently have ip v6 right now and cannot compare

[Acor]

@bendipa1

don’t know what I’m supposed to be looking for or comparing?

Great! Your computer doesn’t have a connection probem

forum.manjaro.org (2a01:4f9:c010:b613::1)

wiki.manjaro.org (2a01:4f9:c010:2eb3::1)

Enjoy https://wiki.manjaro.org/index.php?title=Main_Page !

[Teo]

@bendipa1

wiki.manjaro.org

The ipv6 dns seems to work correctly. Interesting if the ip v4 does the same.