1 |
I have the same issue, i can also verify that the CA is on my host,
|
1 |
I have the same issue, i can also verify that the CA is on my host,
|
2 |
\n
|
2 |
\n
|
3 |
{{{
|
3 |
{{{
|
|
|
4 |
$ curl -v https://repos.springrts.com > /dev/null
|
4 |
% Total % Received % Xferd Average Speed Time Time Time Current
|
5 |
% Total % Received % Xferd Average Speed Time Time Time Current
|
5 |
Dload Upload Total Spent Left Speed
|
6 |
Dload Upload Total Spent Left Speed
|
6 |
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Trying 78.46.21.29:443...
|
7 |
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Trying 78.46.21.29:443...
|
7 |
* Connected to repos.springrts.com (78.46.21.29) port 443 (#0)
|
8 |
* Connected to repos.springrts.com (78.46.21.29) port 443 (#0)
|
8 |
* ALPN, offering h2
|
9 |
* ALPN, offering h2
|
9 |
* ALPN, offering http/1.1
|
10 |
* ALPN, offering http/1.1
|
10 |
* successfully set certificate verify locations:
|
11 |
* successfully set certificate verify locations:
|
11 |
* CAfile: /etc/ssl/certs/ca-certificates.crt
|
12 |
* CAfile: /etc/ssl/certs/ca-certificates.crt
|
12 |
* CApath: /etc/ssl/certs
|
13 |
* CApath: /etc/ssl/certs
|
13 |
} [5 bytes data]
|
14 |
} [5 bytes data]
|
14 |
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
|
15 |
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
|
15 |
} [512 bytes data]
|
16 |
} [512 bytes data]
|
16 |
* TLSv1.3 (IN), TLS handshake, Server hello (2):
|
17 |
* TLSv1.3 (IN), TLS handshake, Server hello (2):
|
17 |
{ [122 bytes data]
|
18 |
{ [122 bytes data]
|
18 |
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
|
19 |
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
|
19 |
{ [25 bytes data]
|
20 |
{ [25 bytes data]
|
20 |
* TLSv1.3 (IN), TLS handshake, Certificate (11):
|
21 |
* TLSv1.3 (IN), TLS handshake, Certificate (11):
|
21 |
{ [4060 bytes data]
|
22 |
{ [4060 bytes data]
|
22 |
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
|
23 |
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
|
23 |
{ [264 bytes data]
|
24 |
{ [264 bytes data]
|
24 |
* TLSv1.3 (IN), TLS handshake, Finished (20):
|
25 |
* TLSv1.3 (IN), TLS handshake, Finished (20):
|
25 |
{ [52 bytes data]
|
26 |
{ [52 bytes data]
|
26 |
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
|
27 |
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
|
27 |
} [1 bytes data]
|
28 |
} [1 bytes data]
|
28 |
* TLSv1.3 (OUT), TLS handshake, Finished (20):
|
29 |
* TLSv1.3 (OUT), TLS handshake, Finished (20):
|
29 |
} [52 bytes data]
|
30 |
} [52 bytes data]
|
30 |
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
|
31 |
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
|
31 |
* ALPN, server accepted to use http/1.1
|
32 |
* ALPN, server accepted to use http/1.1
|
32 |
* Server certificate:
|
33 |
* Server certificate:
|
33 |
* subject: CN=repos.springrts.com
|
34 |
* subject: CN=repos.springrts.com
|
34 |
* start date: Sep 14 09:57:34 2021 GMT
|
35 |
* start date: Sep 14 09:57:34 2021 GMT
|
35 |
* expire date: Dec 13 09:57:33 2021 GMT
|
36 |
* expire date: Dec 13 09:57:33 2021 GMT
|
36 |
* subjectAltName: host "repos.springrts.com" matched cert's "repos.springrts.com"
|
37 |
* subjectAltName: host "repos.springrts.com" matched cert's "repos.springrts.com"
|
37 |
* issuer: C=US; O=Let's Encrypt; CN=R3
|
38 |
* issuer: C=US; O=Let's Encrypt; CN=R3
|
38 |
* SSL certificate verify ok.
|
39 |
* SSL certificate verify ok.
|
39 |
} [5 bytes data]
|
40 |
} [5 bytes data]
|
40 |
> GET / HTTP/1.1
|
41 |
> GET / HTTP/1.1
|
41 |
> Host: repos.springrts.com
|
42 |
> Host: repos.springrts.com
|
42 |
> User-Agent: curl/7.74.0
|
43 |
> User-Agent: curl/7.74.0
|
43 |
> Accept: */*
|
44 |
> Accept: */*
|
44 |
>
|
45 |
>
|
45 |
{ [5 bytes data]
|
46 |
{ [5 bytes data]
|
46 |
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
|
47 |
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
|
47 |
{ [297 bytes data]
|
48 |
{ [297 bytes data]
|
48 |
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
|
49 |
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
|
49 |
{ [281 bytes data]
|
50 |
{ [281 bytes data]
|
50 |
* old SSL session ID is stale, removing
|
51 |
* old SSL session ID is stale, removing
|
51 |
{ [5 bytes data]
|
52 |
{ [5 bytes data]
|
52 |
* Mark bundle as not supporting multiuse
|
53 |
* Mark bundle as not supporting multiuse
|
53 |
< HTTP/1.1 200 OK
|
54 |
< HTTP/1.1 200 OK
|
54 |
< Date: Sun, 10 Oct 2021 09:59:58 GMT
|
55 |
< Date: Sun, 10 Oct 2021 09:59:58 GMT
|
55 |
< Server: Apache/2.4.38 (Debian)
|
56 |
< Server: Apache/2.4.38 (Debian)
|
56 |
< Vary: Accept-Encoding
|
57 |
< Vary: Accept-Encoding
|
57 |
< Transfer-Encoding: chunked
|
58 |
< Transfer-Encoding: chunked
|
58 |
< Content-Type: text/html;charset=UTF-8
|
59 |
< Content-Type: text/html;charset=UTF-8
|
59 |
<
|
60 |
<
|
60 |
{ [6 bytes data]
|
61 |
{ [6 bytes data]
|
61 |
100 10888 0 10888 0 0 82484 0 --:--:-- --:--:-- --:--:-- 82484
|
62 |
100 10888 0 10888 0 0 82484 0 --:--:-- --:--:-- --:--:-- 82484
|
62 |
* Connection #0 to host repos.springrts.com left intact
|
63 |
* Connection #0 to host repos.springrts.com left intact
|
63 |
\n
|
64 |
\n
|
64 |
}}}
|
65 |
}}}
|
65 |
\n
|
66 |
\n
|
66 |
so it looks like the problem is isolated to mono,
|
67 |
so it looks like the problem is isolated to mono,
|
67 |
\n
|
68 |
\n
|
68 |
I tried importing the certificate directly and that didn't help eithe...
|
69 |
I tried importing the certificate directly and that didn't help eithe...
|
69 |
{{{
|
70 |
{{{
|
70 |
$ certmgr -ssl https://repos.springrts.com
|
71 |
$ certmgr -ssl https://repos.springrts.com
|
71 |
Mono Certificate Manager - version 6.8.0.105
|
72 |
Mono Certificate Manager - version 6.8.0.105
|
72 |
Manage X.509 certificates and CRL from stores.
|
73 |
Manage X.509 certificates and CRL from stores.
|
73 |
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.
|
74 |
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.
|
74 |
\n
|
75 |
\n
|
75 |
\n
|
76 |
\n
|
76 |
X.509 Certificate v3
|
77 |
X.509 Certificate v3
|
77 |
Issued from: O=Digital Signature Trust Co., CN=DST Root CA X3
|
78 |
Issued from: O=Digital Signature Trust Co., CN=DST Root CA X3
|
78 |
Issued to: C=US, O=Internet Security Research Group, CN=ISRG Root X1
|
79 |
Issued to: C=US, O=Internet Security Research Group, CN=ISRG Root X1
|
79 |
Valid from: 20/01/2021 7:14:03 PM
|
80 |
Valid from: 20/01/2021 7:14:03 PM
|
80 |
Valid until: 30/09/2024 6:14:03 PM
|
81 |
Valid until: 30/09/2024 6:14:03 PM
|
81 |
*** WARNING: Certificate signature is INVALID ***
|
82 |
*** WARNING: Certificate signature is INVALID ***
|
82 |
This certificate is already in the CA store.
|
83 |
This certificate is already in the CA store.
|
83 |
\n
|
84 |
\n
|
84 |
X.509 Certificate v3
|
85 |
X.509 Certificate v3
|
85 |
Issued from: C=US, O=Internet Security Research Group, CN=ISRG Root X1
|
86 |
Issued from: C=US, O=Internet Security Research Group, CN=ISRG Root X1
|
86 |
Issued to: C=US, O=Let's Encrypt, CN=R3
|
87 |
Issued to: C=US, O=Let's Encrypt, CN=R3
|
87 |
Valid from: 4/09/2020 12:00:00 AM
|
88 |
Valid from: 4/09/2020 12:00:00 AM
|
88 |
Valid until: 15/09/2025 4:00:00 PM
|
89 |
Valid until: 15/09/2025 4:00:00 PM
|
89 |
*** WARNING: Certificate signature is INVALID ***
|
90 |
*** WARNING: Certificate signature is INVALID ***
|
90 |
This certificate is already in the CA store.
|
91 |
This certificate is already in the CA store.
|
91 |
\n
|
92 |
\n
|
92 |
X.509 Certificate v3
|
93 |
X.509 Certificate v3
|
93 |
Issued from: C=US, O=Let's Encrypt, CN=R3
|
94 |
Issued from: C=US, O=Let's Encrypt, CN=R3
|
94 |
Issued to: CN=repos.springrts.com
|
95 |
Issued to: CN=repos.springrts.com
|
95 |
Valid from: 14/09/2021 9:57:34 AM
|
96 |
Valid from: 14/09/2021 9:57:34 AM
|
96 |
Valid until: 13/12/2021 9:57:33 AM
|
97 |
Valid until: 13/12/2021 9:57:33 AM
|
97 |
This certificate is already in the AddressBook store.
|
98 |
This certificate is already in the AddressBook store.
|
98 |
\n
|
99 |
\n
|
99 |
No certificate were added to the stores.
|
100 |
No certificate were added to the stores.
|
100 |
\n
|
101 |
\n
|
101 |
}}}
|
102 |
}}}
|
102 |
\n
|
103 |
\n
|
103 |
i still get the same error from Zero-k that you are seeing,
|
104 |
i still get the same error from Zero-k that you are seeing,
|