From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: * X-Spam-Status: No, score=1.4 required=5.0 tests=DKIM_ADSP_CUSTOM_MED, DKIM_INVALID,DKIM_SIGNED,FREEMAIL_FROM,NML_ADSP_CUSTOM_MED autolearn=no autolearn_force=no version=3.4.4 Received: (qmail 12636 invoked from network); 7 Dec 2022 21:51:53 -0000 Received: from bsd.lv (HELO mandoc.bsd.lv) (66.111.2.12) by inbox.vuxu.org with ESMTPUTF8; 7 Dec 2022 21:51:53 -0000 Received: from fantadrom.bsd.lv (localhost [127.0.0.1]) by mandoc.bsd.lv (OpenSMTPD) with ESMTP id 4cb64be0 for ; Wed, 7 Dec 2022 16:51:51 -0500 (EST) Received: from mail-wm1-f44.google.com (mail-wm1-f44.google.com [209.85.128.44]) by mandoc.bsd.lv (OpenSMTPD) with ESMTP id cb8a351e for ; Wed, 7 Dec 2022 16:51:51 -0500 (EST) Received: by mail-wm1-f44.google.com with SMTP id n7so14857250wms.3 for ; Wed, 07 Dec 2022 13:51:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=MmDyzymGWmJJDqLdZdK3kGkEuXee/CntqB1S41Pk+Wc=; b=opZcCUast+sjetgv69c914bPN8+MKa5+ha07BRR05OlusqjoIs0crW6bPZcEyGP1rt YpZF3TRGhuxZ71S4VzbKmiisc/EdOnmY6iME0VPWLUcFfUHbRkwIGQk8XI7OY2XcLeaf IpxXAexgf9c/N9pzRiVL6PS7iAsh3TiGQv+vdultXCdVE3yPKwlMII+LL/WfKHLqcVEu BbBHzNqhJymPFHgPar28Cl2DlWCVSgVjTK/U1q48ZnXZEcaqDJyZPsW/7JVHlhLNq+L1 lBtdn9uCfjHGPNZoVTeZD8dAXseXaSjtMd+OYRibglcKmI5He/544Hui6Qy5gYvkEojT /IYw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=MmDyzymGWmJJDqLdZdK3kGkEuXee/CntqB1S41Pk+Wc=; b=YtYdK70Y6OuL4bAyBNQ67BltPnumgaaPBmOM2G/4Cpkqn3yE+b4nZYhjMAeVJ0eRjg KC0Gv02oLCuUd6zdQa+df6fE5Gj9K2rko7PwFpS4mNgZwM48nJDLNLlEGpi5tLi1HGiT 4Fa3k57/wNviyEg1z1AHLFk1ZlBOP887rb7MGnFdw2XYTIMCk2W/45m6LJKi8+NerVIR hfGCPP+iYzazhOyTR83gck9aKkrmHXyAw5a1K796ekXUmY85u/yhoTE4TkraYZ/5BpJ0 K4mj5//tcJkZ/1Guui07BpKoesNcjAH2odeZdGNiWW5nDUzPAtjL/kWtXF15MZrqRQuL 8Ctw== X-Gm-Message-State: ANoB5pnKU0OsxzbGnWX39jJwyEsb1c2LIqxqrpMvMUHmarnZRhSf1eTy ru0SG71zE762aD4DMp31nOUn/E0swoM= X-Google-Smtp-Source: AA0mqf6uRRfoVe03cgnfotm91TquJVMiyZdaoPtDD4ud8zSJgNBNFeP/sXj3gYo2g402pNtQmQmNJg== X-Received: by 2002:a05:600c:3493:b0:3c6:e63d:b8a1 with SMTP id a19-20020a05600c349300b003c6e63db8a1mr976626wmq.16.1670449909703; Wed, 07 Dec 2022 13:51:49 -0800 (PST) Received: from gmail.com (cpc91232-cmbg18-2-0-cust728.5-4.cable.virginm.net. [82.2.126.217]) by smtp.gmail.com with ESMTPSA id h41-20020a05600c49a900b003c6bd91caa5sm2726172wmp.17.2022.12.07.13.51.48 for (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Wed, 07 Dec 2022 13:51:49 -0800 (PST) Date: Wed, 7 Dec 2022 21:51:39 +0000 From: Raf Czlonka To: discuss@mandoc.bsd.lv Subject: Re: certificate has expired for https://mandoc.bsd.lv according to curl Message-ID: References: X-Mailinglist: mandoc-discuss Reply-To: discuss@mandoc.bsd.lv MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Hi Jon, On Wed, Dec 07, 2022 at 07:35:07PM GMT, Jon Ronnenberg wrote: > Here is what I get from curl 7.54.0: > > curl -vI https://mandoc.bsd.lv/snapshots/mandoc-1.14.6.tar.gz > Trying 66.111.2.12... > TCP_NODELAY set > Connected to mandoc.bsd.lv (66.111.2.12) port 443 (#0) > ALPN, offering h2 > ALPN, offering http/1.1 > Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH Is the above set in your .curlrc? > successfully set certificate verify locations: > CAfile: /etc/ssl/cert.pem > CApath: none > TLSv1.2 (OUT), TLS handshake, Client hello (1): > TLSv1.2 (IN), TLS handshake, Server hello (2): > TLSv1.2 (IN), TLS handshake, Certificate (11): > TLSv1.2 (OUT), TLS alert, Server hello (2): > SSL certificate problem: certificate has expired > stopped the pause stream! > Closing connection 0 > curl: (60) SSL certificate problem: certificate has expired I can't reproduce it - it works fine with curl packages for OpenBSD-current, macOS 13.0.1, and Ubuntu 20.04 LTS. Regards, Raf -- To unsubscribe send an email to discuss+unsubscribe@mandoc.bsd.lv