Okay, so the DNS part looks good now, but the SSL connection is still throwing its toys out of the pram with this “illegal parameter” and “invalid session ID” nonsense. This is firmly OpenSSL refusing to play nice with Cloudflare’s edge settings for the CDN.
Here’s the most likely fix:
We’ll manually force curl
(which AMP’s installer indirectly uses) to drop to TLSv1.2. Modern GNU/Linux includes support for TLS tweaks using curl
built-in flags or OpenSSL environment changes.
Try this:
curl --tlsv1.2 -v https://cdn-repo.c7rs.com/
Does that work smoothly?
If it does, it’s evidently OpenSSL’s default negotiation being too aggressive (jumping straight to TLSv1.3). Post the results back (text not screenshots again, of course!). If this succeeds manually, we’ll override things system-wide for the AMP install process.