Flint
View Ticket
Login
HomeTimelineBranchesTagsTicketsWiki
Edit New Ticket Plaintext
Ticket Hash: e21707776d4c404be6a784c9b8e5790e7f722cf2
Title: chiselapp SSL certificate has expired
Status: Open Type: Incident
Severity: Critical Priority: Immediate
Subsystem: Resolution: Open
Last Modified: 2021-11-23 08:27:03
Version Found In:
User Comments:
anonymous added on 2021-04-02 11:04:16:

Using the SSL validation service at

https://www.ssllabs.com/ssltest/analyze.html

on chiselapp.com

It said that an intermediate certificate expired about 15 days ago.

I am unable to access repositories via Fossil or curl.

curl -v https://chiselapp.com/

also fails.

For some reason I can access the site via Google Chrome browser, but I don't know why it is also not broken.

I reported this problem at https://trac.macports.org/ticket/62599

anonymous added on 2021-06-14 10:01:09:

I have the same issue. For instance the following command

openssl s_client -connect chiselapp.com:443 -CApath /etc/ssl/certs/

raises the error 

depth=0 CN = chiselapp.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = chiselapp.com
verify error:num=21:unable to verify the first certificate
verify return:1

This makes trouble with some more pedantic apps that try to access the webpage via https.

anonymous added on 2021-06-28 08:50:37:

That's not the same issue. That error may happen if the server uses letsencrypt's cert.pem, rather than fullchain.pem. See Cannot verify domain with openssl.

Schelte.

anonymous added on 2021-11-23 08:27:03:

This has still not been fixed. The server is sending an out-of-date intermediate certificate. Please retry the SSL analyser mentioned above.

It is true that Chrome on macOS is not showing any problems. There are no problems with the system openssl and curl on macOS. This is because they use Apple's certificates in the Keychain.

However, using the curl certificate bundle and curl and openssl installed by Macports shows the problem.

Also FreeBSD 13 with the curl and openssl provided by the pkg install shows the problem.

Fossil running on FreeBSD 13 complains about the certificate

Powered by Fossil · RSS