On 170131-19:35+0100, Klaus Ethgen wrote:
...
> the SSL certificate for website devuan.org is invalid again and does not
> match the one in TLSA record.
>
> Could you please fix it?
>
> Regards
> Klaus
I'm not deep into SSL, but it might be issues with devuan.org cert.
Wget is complaining
(
and Wget is pretty actively developed, and it got
really really nice things lately --even though my understanding is not
vast, some of it is clear to me--, have a look at this bug, and my demo
contained therein:
Write TLS session keys to $SSLKEYLOGFILE #11614
https://github.com/rg3/youtube-dl/issues/11614
Apologies for using (only) github. I haven't known better till now... I work so
slowly...
).
Have a look (if the format gets too badly mangled in sending, I'll
resend this log better formated next):
$ wget
https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz
--2017-02-23 12:59:54--
https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz
Resolving files.devuan.org... 104.236.249.173
Connecting to files.devuan.org|104.236.249.173|:443... connected.
ERROR: The certificate of ‘files.devuan.org’ is not trusted.
ERROR: The certificate of ‘files.devuan.org’ hasn't got a known issuer.
$
...
$ wget --no-check-certificate
https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz
--2017-02-23 13:00:57--
https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz
Resolving files.devuan.org... failed: Temporary failure in name resolution.
wget: unable to resolve host address ‘files.devuan.org’
$ wget --no-check-certificate
https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz
--2017-02-23 13:01:15--
https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz
Resolving files.devuan.org... 104.236.249.173
Connecting to files.devuan.org|104.236.249.173|:443... connected.
WARNING: The certificate of ‘files.devuan.org’ is not trusted.
WARNING: The certificate of ‘files.devuan.org’ hasn't got a known issuer.
HTTP request sent, awaiting response... 200 OK
Length: 531904260 (507M) [application/octet-stream]
Saving to: ‘devuan_jessie_1.0.0-beta2_amd64.qcow2.xz’
devuan_jessie_1.0.0-beta2_ 100%[=======================================>] 507.26M 5.29MB/s in 87s
2017-02-23 13:02:43 (5.83 MB/s) - ‘devuan_jessie_1.0.0-beta2_amd64.qcow2.xz’ saved [531904260/531904260]
$
The image later verified (with the <...>.sha that I also downloaded. So
this may not be an urgent matter.
Regards!
--
Miroslav Rovis
Zagreb, Croatia
https://www.CroatiaFidelis.hr