# Nexus Proxy RHEL 404 not found on some packages **URL:** \ **Category:** Sonatype Nexus Repository\ **Created:** [June 9, 2021, 1:17pm UTC](https://community.sonatype.com/t/nexus-proxy-rhel-404-not-found-on-some-packages/6693 "2021-06-09T13:17:51Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![michel.dieudonne.ext](https://avatars.discourse-cdn.com/v4/letter/m/3bc359/32.png) [@michel.dieudonne.ext](https://community.sonatype.com/u/michel.dieudonne.ext)\ **Post date:** [June 9, 2021, 1:17pm UTC](https://community.sonatype.com/t/nexus-proxy-rhel-404-not-found-on-some-packages/6693/1 "2021-06-09T13:17:51Z")
Hello, We have a Nexus which is proxying RHEL repo (cdn . redhat . com/content/dist/rhel/server/7/). Everything is working fine but on some package, on the client side we have this error : > dhcp-4.2.5-82.el7.x86\_64.rpm FAILED > xxxxxx. com /rhel-proxy/7Server/x86\_64/os/Packages/d/dhcp-4.2.5-82.el7.x86\_64.rpm: [Errno 14] S Error 404 - Not Found0 B --:–:-- ETA > Trying other mirror. > Error downloading packages: > 12:dhcp-4.2.5-82.el7.x86\_64: [Errno 256] No more mirrors to try. And from Nexus logs: > 2021-06-09 11:59:23,329+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.sonatype.nexus.repository.yum.internal.proxy.YumProxyFacetImpl - Fetching: GET cdn . redhat . com/content/dist/rhel/server/7/7Server/x86\_64/os/Packages/d/dhcp-4.2.5-82.el7.x86\_64.rpm /1.1 > 2021-06-09 11:59:23,329+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.client.protocol.RequestAddCookies - CookieSpec selected: ignoreCookies > 2021-06-09 11:59:23,330+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.client.protocol.RequestAuthCache - Auth cache not set in the context > 2021-06-09 11:59:23,330+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.impl.execchain.MainClientExec - Opening connection {tls}-\>proxy-\>cdn . redhat . com:443 > 2021-06-09 11:59:23,330+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.impl.conn.DefaultHttpClientConnectionOperator - Connecting to proxy > 2021-06-09 11:59:23,331+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.impl.conn.DefaultHttpClientConnectionOperator - Connection established nexus:49882\<-\>proxy:3129 > 2021-06-09 11:59:23,331+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.headers - -outgoing-13091 \>\> CONNECT cdn . redhat . com:443 /1.1 > 2021-06-09 11:59:23,331+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.headers - -outgoing-13091 \>\> Host: cdn . redhat . com > 2021-06-09 11:59:23,332+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.headers - -outgoing-13091 \>\> User-Agent: Nexus/3.28.0-01 (OSS; Linux; 3.10.0-1062.el7.x86\_64; amd64; 1.8.0\_252) > 2021-06-09 11:59:35,509+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.headers - -outgoing-13091 \<\< /1.1 200 Connection established > 2021-06-09 11:59:35,510+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.impl.execchain.MainClientExec - Tunnel to target created. > 2021-06-09 11:59:35,510+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.conn.ssl.SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2] > 2021-06-09 11:59:35,510+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.conn.ssl.SSLConnectionSocketFactory - Enabled cipher suites:[TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDH\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_ECDH\_RSA\_WITH\_AES\_256\_CBC\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDH\_ECDSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDH\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_256\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_256\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDH\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDH\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA256, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDH\_ECDSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDH\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_RSA\_WITH\_AES\_128\_CBC\_SHA, TLS\_DHE\_DSS\_WITH\_AES\_128\_CBC\_SHA, TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDH\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDH\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384, TLS\_DHE\_DSS\_WITH\_AES\_256\_GCM\_SHA384, TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDH\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_ECDH\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256, TLS\_DHE\_DSS\_WITH\_AES\_128\_GCM\_SHA256, TLS\_EMPTY\_RENEGOTIATION\_INFO\_SCSV] > 2021-06-09 11:59:35,511+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.conn.ssl.SSLConnectionSocketFactory - Starting handshake > 2021-06-09 11:59:36,118+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.conn.ssl.SSLConnectionSocketFactory - Secure session established > 2021-06-09 11:59:36,119+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.conn.ssl.SSLConnectionSocketFactory - negotiated protocol: TLSv1.2 > 2021-06-09 11:59:36,120+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.conn.ssl.SSLConnectionSocketFactory - negotiated cipher suite: TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384 > 2021-06-09 11:59:36,121+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.conn.ssl.SSLConnectionSocketFactory - peer principal: CN=cdn . redhat . com, OU=Red Hat Network, O=“Red Hat, Inc.”, ST=North Carolina, C=US > 2021-06-09 11:59:36,121+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.conn.ssl.SSLConnectionSocketFactory - peer alternative names: [stagecdn . redhat . com, [cdn6.redhat.com](http://cdn6.redhat.com), cdn . redhat . com] > 2021-06-09 11:59:36,123+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.impl.conn.DefaultManagedHttpClientConnection - -outgoing-13091: set socket timeout to 120000 > 2021-06-09 11:59:36,123+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.apache.impl.execchain.MainClientExec - Executing request GET /content/dist/rhel/server/7/7Server/x86\_64/os/Packages/d/dhcp-4.2.5-82.el7.x86\_64.rpm /1.1 > 2021-06-09 11:59:36,592+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.sonatype.nexus.repository.yum.internal.proxy.YumProxyFacetImpl - Response: HttpResponseProxy{/1.1 403 Forbidden [Server: AkamaiGHost, Mime-Version: 1.0, Content-Type: text/html, Content-Length: 423, Expires: Wed, 09 Jun 2021 11:59:36 GMT, Date: Wed, 09 Jun 2021 11:59:36 GMT, X-Cache: TCP\_DENIED from a2-20-243-48.deploy.akamaitechnologies . com (AkamaiGHost/10.4.0-33449709) (-), Connection: keep-alive, EJ-HOST: authorizer-prod-dc-us-west-26-bchr7, X-Akamai-Request-ID: 355ff82] ResponseEntityProxy{[Content-Type: text/html,Content-Length: 423,Chunked: false]}} > 2021-06-09 11:59:36,592+0000 DEBUG [qtp391727418-56285] \*UNKNOWN org.sonatype.nexus.repository.yum.internal.proxy.YumProxyFacetImpl - Status: /1.1 403 Forbidden The client seems to find the package into the manifest .xml but can’t download it. We are using a squid proxy, but no call to a2-20-243-48.deploy.akamaitechnologies . com into logs, i guess it’s a redirection from cdn . redhat . com ? Any idea ? Thanks. Regards, Michel. ---
**Author:** ![mpiggott](https://avatars.discourse-cdn.com/v4/letter/m/f0a364/32.png) [@mpiggott](https://community.sonatype.com/u/mpiggott)\ **Post date:** [June 9, 2021, 1:23pm UTC](https://community.sonatype.com/t/nexus-proxy-rhel-404-not-found-on-some-packages/6693/2 "2021-06-09T13:23:23Z")
I think only the last line is relevant where it tells you it got a 403 error. ---
**Author:** ![michel.dieudonne.ext](https://avatars.discourse-cdn.com/v4/letter/m/3bc359/32.png) [@michel.dieudonne.ext](https://community.sonatype.com/u/michel.dieudonne.ext)\ **Post date:** [June 10, 2021, 4:57am UTC](https://community.sonatype.com/t/nexus-proxy-rhel-404-not-found-on-some-packages/6693/3 "2021-06-10T04:57:43Z")
Yeah, but i can’t figure out where this came from… Watched all our squid’s logs but no reference to akamai…