(In reply to Marcus Meissner from comment #2) > does it persist? it might have been a transient error on > cherryh.freenode.net ? The problem persists unfortunately. On each reconnect attempt there's a new host and TLS handshake fails for each of those. I don't understand why gnutls-cli works though. In theory both should use the the same data from /var/lib/ca-certificates, so why weechat fails? I have another machine running Arch, same config works there.