[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Intermediate certificate expired
|
From: |
Thomas Dickey |
|
Subject: |
Re: Intermediate certificate expired |
|
Date: |
Sun, 3 Oct 2021 10:57:02 -0400 |
|
User-agent: |
Mutt/1.10.1 (2018-07-13) |
On Sun, Oct 03, 2021 at 01:32:23PM +0200, Milan P. Stanić wrote:
> Hi Thomas,
>
> Tried to upgrade latest ncurses this morning for Alpine linux but
> download failed with this error:
> -----------------------------------------------
> >>> ncurses: Fetching
> >>> https://invisible-mirror.net/archives/ncurses/current/ncurses-6.2-20211002.tgz
> % Total % Received % Xferd Average Speed Time Time Time
> Current
> Dload Upload Total Spent Left Speed
> 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
> curl: (60) SSL certificate problem: certificate has expired
> More details here: https://curl.se/docs/sslcerts.html
>
> curl failed to verify the legitimacy of the server and therefore could not
> establish a secure connection to it. To learn more about this situation and
> how to fix it, please visit the web page mentioned above.
> >>> ERROR: ncurses: checksum failed
> -----------------------------------------------
>
> Then checked with openssl running this:
> -----------------------------------------------
>
> openssl s_client -connect 160.153.42.69:443 -servername invisible-mirror.net
> -showcerts
> CONNECTED(00000003)
> depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
> verify error:num=10:certificate has expired
> notAfter=Sep 30 14:01:15 2021 GMT
> verify return:1
> depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
> notAfter=Sep 30 14:01:15 2021 GMT
> verify return:1
> depth=1 C = US, O = Let's Encrypt, CN = R3
> verify error:num=10:certificate has expired
> notAfter=Sep 29 19:21:40 2021 GMT
> verify return:1
> depth=1 C = US, O = Let's Encrypt, CN = R3
> notAfter=Sep 29 19:21:40 2021 GMT
> verify return:1
> depth=0 CN = invisible-mirror.net
> notAfter=Oct 30 17:19:46 2021 GMT
> verify return:1
> ---
> Certificate chain
> 0 s:CN = invisible-mirror.net
> i:C = US, O = Let's Encrypt, CN = R3
> -----------------------------------------------
>
> Looks like intermediate certificate should be upgraded in server
> certificate bundle.
>
> https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/
I just did this (seems okay now)
--
Thomas E. Dickey <dickey@invisible-island.net>
https://invisible-island.net
ftp://ftp.invisible-island.net
signature.asc
Description: PGP signature