Jan 3, 2022, 23:53 by loca...@tutanota.com: > Jan 3, 2022, 23:08 by d...@randomstring.org: > >> Alright. Put this into your /etc/hosts temporarily: >> >> 152.195.33.23 www.usps.com tools.usps.com www.usps.gov >> >> That's unlikely to be an optimal IP from their CDN, but it is >> currently working. >> > > That fixed it, I got the USPS tracking page to load normally. Still not sure > why it worked as tools.usps.com resolves for me to 152.195.33.23: > > # dig tools.usps.com > ... > .... > ;; ANSWER SECTION: > tools.usps.com. 42 IN CNAME cs1799.wpc.upsiloncdn.net. > cs1799.wpc.upsiloncdn.net. 2078 IN A 152.195.33.23 >
OK, I understand now what the problem was. Quite a while ago I added a line into the /etc/hosts to fix a temp DNS issue and completely forgot about it. So while DNS server was correctly resolving tools.usps.com to 152.195.33.23, my previous /etc/hosts entry was overriding it to 23.217.162.158 which was causing the certificate issue. Thanks to everyone who responded.
