View Ticket
Ticket Hash: e21707776d4c404be6a784c9b8e5790e7f722cf2
Title: chiselapp SSL certificate has expired
Status: Open Type: Incident
Severity: Critical Priority: Immediate
Subsystem: Resolution: Open
Last Modified: 2021-11-23 08:27:03
Version Found In:
User Comments:
anonymous added on 2021-04-02 11:04:16: (text/x-fossil-wiki)
Using the SSL validation service at

[https://www.ssllabs.com/ssltest/analyze.html]

on chiselapp.com

It said that an intermediate certificate expired about 15 days ago.

I am unable to access repositories via Fossil or curl.

curl -v https://chiselapp.com/  

also fails.

For some reason I can access the site via Google Chrome browser, but I don't know why it is also not broken.

I reported this problem at [https://trac.macports.org/ticket/62599]

anonymous added on 2021-06-14 10:01:09: (text/x-markdown)
 I have the same issue. For instance the following command

    openssl s_client -connect chiselapp.com:443 -CApath /etc/ssl/certs/

raises the error 

    depth=0 CN = chiselapp.com
    verify error:num=20:unable to get local issuer certificate
    verify return:1
    depth=0 CN = chiselapp.com
    verify error:num=21:unable to verify the first certificate
    verify return:1

This makes trouble with some more pedantic apps that try to access the webpage via https.

anonymous added on 2021-06-28 08:50:37: (text/x-markdown)
That's not the same issue. That error may happen if the server uses letsencrypt's cert.pem, rather than fullchain.pem. See
[Cannot verify domain with openssl](https://community.letsencrypt.org/t/cannot-verify-domain-with-openssl/11545).

Schelte.

anonymous added on 2021-11-23 08:27:03: (text/x-markdown)
This has still not been fixed. The server is sending an out-of-date intermediate certificate. Please retry the SSL analyser mentioned above.

It is true that Chrome on macOS is not showing any problems. There are no problems with the system openssl and curl on macOS. This is because they use
Apple's certificates in the Keychain.

However, using the curl certificate bundle and curl and openssl installed by Macports shows the problem.

Also FreeBSD 13 with the curl and openssl provided by the pkg install shows the problem.

Fossil running on FreeBSD 13 complains about the certificate