On 170131-19:35+0100, Klaus Ethgen wrote:
...
> the SSL certificate for website devuan.org is invalid again and does not
> match the one in TLSA record.
>
> Could you please fix it?
>

> Regards
>    Klaus

I'm not deep into SSL, but it might be issues with devuan.org cert.

Wget is complaining
(
and Wget is pretty actively developed, and it got
really really nice things lately --even though my understanding is not
vast, some of it is clear to me--, have a look at this bug, and my demo
contained therein:

Write TLS session keys to $SSLKEYLOGFILE #11614
https://github.com/rg3/youtube-dl/issues/11614

Apologies for using (only) github. I haven't known better till now... I work so
slowly...
).

Have a look (if the format gets too badly mangled in sending, I'll
resend this log better formated next):

$ wget https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz
--2017-02-23 12:59:54-- https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz
Resolving files.devuan.org... 104.236.249.173
Connecting to files.devuan.org|104.236.249.173|:443... connected.
ERROR: The certificate of ‘files.devuan.org’ is not trusted.
ERROR: The certificate of ‘files.devuan.org’ hasn't got a known issuer.
$
...
$ wget --no-check-certificate https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz
--2017-02-23 13:00:57-- https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz
Resolving files.devuan.org... failed: Temporary failure in name resolution.
wget: unable to resolve host address ‘files.devuan.org’
$ wget --no-check-certificate https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz
--2017-02-23 13:01:15-- https://files.devuan.org/devuan_jessie_beta/testing/devuan_jessie_1.0.0-beta2_amd64.qcow2.xz
Resolving files.devuan.org... 104.236.249.173
Connecting to files.devuan.org|104.236.249.173|:443... connected.
WARNING: The certificate of ‘files.devuan.org’ is not trusted.
WARNING: The certificate of ‘files.devuan.org’ hasn't got a known issuer.
HTTP request sent, awaiting response... 200 OK
Length: 531904260 (507M) [application/octet-stream]
Saving to: ‘devuan_jessie_1.0.0-beta2_amd64.qcow2.xz’

devuan_jessie_1.0.0-beta2_ 100%[=======================================>] 507.26M  5.29MB/s    in 87s     

2017-02-23 13:02:43 (5.83 MB/s) - ‘devuan_jessie_1.0.0-beta2_amd64.qcow2.xz’ saved [531904260/531904260]

$

The image later verified (with the <...>.sha that I also downloaded. So
this may not be an urgent matter.

Regards!

--
Miroslav Rovis
Zagreb, Croatia
https://www.CroatiaFidelis.hr