= bug description =
With updated F20, I can't download packages from Koji:

$ curl -O https://kojipkgs.fedoraproject.org//packages/setup/2.9.1/1.fc22/noarch/setup-2.9.1-1.fc22.noarch.rpm -v
* Adding handle: conn: 0x1326b30
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x1326b30) send_pipe: 1, recv_pipe: 0
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 About to connect() to kojipkgs.fedoraproject.org port 443 (#0)
* Trying 209.132.181.10...
* Connected to kojipkgs.fedoraproject.org (209.132.181.10) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSL connection using TLS_RSA_WITH_AES_128_CBC_SHA
* Server certificate:
* subject: CN=.fedoraproject.org,O=Red Hat Inc.,L=Raleigh,ST=North Carolina,C=US
* start date: dub 22 00:00:00 2014 GMT
* expire date: dub 26 12:00:00 2017 GMT
* common name: *.fedoraproject.org
* issuer: CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0> GET //packages/setup/2.9.1/1.fc22/noarch/setup-2.9.1-1.fc22.noarch.rpm HTTP/1.1

User-Agent: curl/7.32.0
Host: kojipkgs.fedoraproject.org
Accept: /

• HTTP 1.0, assume close after body
  < HTTP/1.0 200 OK
  < Date: Mon, 13 Oct 2014 16:00:53 GMT
  < Server: Apache/2.2.15 (Red Hat)
  < Last-Modified: Thu, 24 Jul 2014 13:47:38 GMT
  < Accept-Ranges: bytes
  < Content-Length: 171856
  < Content-Type: application/x-rpm
  < X-Cache: MISS from kojipkgs02.phx2.fedoraproject.org
  < X-Cache-Lookup: MISS from kojipkgs02.phx2.fedoraproject.org:80
  < Via: 1.0 kojipkgs02.phx2.fedoraproject.org (squid/3.1.10)
• HTTP/1.0 connection set to keep alive!
  < Connection: keep-alive
  <
  { [data not shown]
  100 167k 100 167k 0 0 103k 0 0:00:01 0:00:01 --:--:-- 103k
• Connection #0 to host kojipkgs.fedoraproject.org left intact

= bug analysis =
Not sure if this is issue of NSS or something else. I got this link from Koji:

https://koji.fedoraproject.org/koji/buildinfo?buildID=547728

= fix recommendation =