R devel - Nov 2016 - R CMD check --as-cran: sslv3 alert handshake failure

On R 3.2.5, 3.3.2 and devel for Windows, R CMD check --as-cran gives me:

Found the following (possibly) invalid URLs:
  URL: https://www.stat.auckland.ac.nz/~paul/Reports/DisplayList/dl-record.html
    From: man/capturePlot.Rd
    Status: Error
    Message: libcurl error code 35
    error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
handshake failure

This is reported both by the win-builder and the rhub services:

* R 3.3.2: https://win-builder.r-project.org/xj8fwadE4K31/00check.log
* R devel: https://win-builder.r-project.org/xj8fwadE4K31/00check.log
* R 3.2.5:
https://builder.r-hub.io/status/R.devices_2.14.0-9000.tar.gz-a252b2d919124c63bc976d78befce161

AFAIU, this is due to the HTTPS webserver not having SSL3 disabled,
e.g.
http://unix.stackexchange.com/questions/192944/how-to-fix-curl-sslv3-alert-handshake-failure.

Is this something that should be fixed in R CMD check --as-cran itself?

The only workaround I can see as a package maintainer is to drop the
\url{} / turn the URL into a plain text element, or just mention it my
CRAN submission note.

Thanks,

Henrik

On 07.11.2016 22:43, Henrik Bengtsson wrote:
> On R 3.2.5, 3.3.2 and devel for Windows, R CMD check --as-cran gives me:
>
> Found the following (possibly) invalid URLs:
>   URL:
https://www.stat.auckland.ac.nz/~paul/Reports/DisplayList/dl-record.html
>     From: man/capturePlot.Rd
>     Status: Error
>     Message: libcurl error code 35
>     error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
> handshake failure
>
> This is reported both by the win-builder and the rhub services:
>
> * R 3.3.2: https://win-builder.r-project.org/xj8fwadE4K31/00check.log
> * R devel: https://win-builder.r-project.org/xj8fwadE4K31/00check.log
> * R 3.2.5:
https://builder.r-hub.io/status/R.devices_2.14.0-9000.tar.gz-a252b2d919124c63bc976d78befce161
>
> AFAIU, this is due to the HTTPS webserver not having SSL3 disabled,
> e.g.
http://unix.stackexchange.com/questions/192944/how-to-fix-curl-sslv3-alert-handshake-failure.
>
> Is this something that should be fixed in R CMD check --as-cran itself?
>
> The only workaround I can see as a package maintainer is to drop the
> \url{} / turn the URL into a plain text element, or just mention it my
> CRAN submission note.
The latter,
Uwe


> Thanks,
>
> Henrik
>
> ______________________________________________
> R-devel at r-project.org mailing list
> https://stat.ethz.ch/mailman/listinfo/r-devel
>