On Mon, 1 Jun 2020, Mark Rogers via curl-library wrote:
Using curl on macOS 10.15.4
...
Is this a LibreSSL issue?
Yes. This is a LibreSSL issue, also found in OpenSSL before 1.1.0, in all versions of GnuTLS and probably in some other TLS libs too.
From my understanding, the issue seems to be that these libraries have flaws and beleive there's a problem with an expired cert, even though there is another trust chain that doesn't include the expired cert.
-- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes, support, ports, new features | https://www.wolfssl.com/contact/ ------------------------------------------------------------------- Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.html