On 170131-19:35+0100, Klaus Ethgen wrote: ... > the SSL certificate for website devuan.org is invalid again and does not > match the one in TLSA record. > > Could you please fix it? > > Regards > Klaus
I'm not deep into SSL, but it might be issues with devuan.org cert. Wget is complaining ( and Wget is pretty actively developed, and it got really really nice things lately --even though my understanding is not vast, some of it is clear to me--, have a look at this bug, and my demo contained therein: Write TLS session keys to $SSLKEYLOGFILE #11614 https://github.com/rg3/youtube-dl/issues/11614 Apologies for using (only) github. I haven't known better till now... I work so slowly... ). Have a look (if the format gets too badly mangled in sending, I'll resend this log better formated next): $ wget https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz --2017-02-23 12:59:54-- https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz Resolving files.devuan.org... 104.236.249.173 Connecting to files.devuan.org|104.236.249.173|:443... connected. ERROR: The certificate of ‘files.devuan.org’ is not trusted. ERROR: The certificate of ‘files.devuan.org’ hasn't got a known issuer. $ ... $ wget --no-check-certificate https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz --2017-02-23 13:00:57-- https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz Resolving files.devuan.org... failed: Temporary failure in name resolution. wget: unable to resolve host address ‘files.devuan.org’ $ wget --no-check-certificate https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz --2017-02-23 13:01:15-- https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz Resolving files.devuan.org... 104.236.249.173 Connecting to files.devuan.org|104.236.249.173|:443... connected. WARNING: The certificate of ‘files.devuan.org’ is not trusted. WARNING: The certificate of ‘files.devuan.org’ hasn't got a known issuer. HTTP request sent, awaiting response... 200 OK Length: 531904260 (507M) [application/octet-stream] Saving to: ‘devuan_jessie_1.0.0-beta2_amd64.qcow2.xz’ devuan_jessie_1.0.0-beta2_ 100%[=======================================>] 507.26M 5.29MB/s in 87s 2017-02-23 13:02:43 (5.83 MB/s) - ‘devuan_jessie_1.0.0-beta2_amd64.qcow2.xz’ saved [531904260/531904260] $ The image later verified (with the <...>.sha that I also downloaded. So this may not be an urgent matter. Regards! -- Miroslav Rovis Zagreb, Croatia https://www.CroatiaFidelis.hr
signature.asc
Description: Digital signature
_______________________________________________ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
