[Bug 1191220] New Let's Encrypt certificate cannot be verify in Mono

1 Oct 2021

      https://bugzilla.suse.com/show_bug.cgi?id=1191220
https://bugzilla.suse.com/show_bug.cgi?id=1191220#c4

--- Comment #4 from Martin Li��ka <martin.liska@suse.com> ---
(In reply to Thorsten Kukuk from comment #1)
...
This looks like the same problem as all non-webbrowser based tools we have:
kukuk@f05:~> curl https://defiant.thkukuk.de
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html
Thanks for help.

In the case of seznam.cz, I can get it via curl:

$ curl -v https://seznam.cz
*   Trying 77.75.74.176:443...
* Connected to seznam.cz (77.75.74.176) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=www.seznam.cz
*  start date: Aug  9 14:01:43 2021 GMT
*  expire date: Nov  7 14:01:41 2021 GMT
*  subjectAltName: host "seznam.cz" matched cert's "seznam.cz"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multiplexing
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade:
len=0
* Using Stream ID: 1 (easy handle 0x557325389bd0)
...
GET / HTTP/2
Host: seznam.cz
user-agent: curl/7.79.1
accept: */*
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 128)!
< HTTP/2 302 
< server: nginx
< date: Fri, 01 Oct 2021 11:49:11 GMT
< content-type: text/html
< content-length: 138
< location: https://www.seznam.cz/
< 
<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx</center>
</body>
</html>
* Connection #0 to host seznam.cz left intact

While I can confirm
curl https://defiant.thkukuk.de

really does not work for me.

So, it's maybe something different?

-- 
You are receiving this mail because:
You are on the CC list for the bug.

bugzilla_noreply＠suse.com

tags

participants (1)