| delorie.com/archives/browse.cgi | search |
| X-Recipient: | archive-cygwin AT delorie DOT com |
| DomainKey-Signature: | a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id |
| :list-unsubscribe:list-subscribe:list-archive:list-post | |
| :list-help:sender:date:from:reply-to:message-id:to:subject | |
| :in-reply-to:references:mime-version:content-type | |
| :content-transfer-encoding; q=dns; s=default; b=mjeYmwfMMQkvKScC | |
| DShAypBWj8A/tYFmaCCZHjRg0XAj2KfaLyvTqit0Uhb4LO8b/FL1WPK8t5GnVMda | |
| 1/DGE93cBZIMWZ2QgtrMmPaUut6h8F5df+JilVgzoMe9jTSRg+8eHDVpGk2sYEjd | |
| kYz7BqQUcEyCOD2na/Wc+A0cM5c= | |
| DKIM-Signature: | v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id |
| :list-unsubscribe:list-subscribe:list-archive:list-post | |
| :list-help:sender:date:from:reply-to:message-id:to:subject | |
| :in-reply-to:references:mime-version:content-type | |
| :content-transfer-encoding; s=default; bh=yBixaW/LXREguOQyxPC6O3 | |
| Hkl0Y=; b=W1OtW3ogSRkUaO3DFQjsa40HOBLvq5ZNzMrLvT9tXWkPAM1V96sYf3 | |
| J+n+D213d7KPS5rSy5KZqJrWPbmQHEJ8ScU/Um3Q0TRX7RmNRa8fY55aijT1RMeg | |
| rs4RWuWodsDlySDlqOE8dw8hQxpoZCJgrlHep89ci5oXc0sUgqOww= | |
| Mailing-List: | contact cygwin-help AT cygwin DOT com; run by ezmlm |
| List-Id: | <cygwin.cygwin.com> |
| List-Subscribe: | <mailto:cygwin-subscribe AT cygwin DOT com> |
| List-Archive: | <http://sourceware.org/ml/cygwin/> |
| List-Post: | <mailto:cygwin AT cygwin DOT com> |
| List-Help: | <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs> |
| Sender: | cygwin-owner AT cygwin DOT com |
| Mail-Followup-To: | cygwin AT cygwin DOT com |
| Delivered-To: | mailing list cygwin AT cygwin DOT com |
| Authentication-Results: | sourceware.org; auth=none |
| X-Spam-SWARE-Status: | No, score=1.2 required=5.0 tests=BAYES_20,FREEMAIL_FROM,KAM_THEBAT,MIME_BASE64_BLANKS,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=no version=3.3.2 spammy=UD:yandex.ru, Csaba, Raduly, raduly |
| X-HELO: | forward101p.mail.yandex.net |
| DKIM-Signature: | v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1533549002; bh=84lItuuGc0Iz32zYZbZF7AgOWIiUfZvKvtLTA7Xm0V8=; h=Date:From:Reply-To:Message-ID:To:Subject:In-Reply-To:References; b=BXFanlWeBA/TGajbqY0CSNDPldYOzw7EcgibxPPANUdhYilv2025kZlJ37nkUgXu8 yuUCX+mfAUBeI/Of8A5yxEUNCx4/aEJDmJWoNvzA/Q5Aox1Cpxcgj0ta/MDezH781M 5S+t3KOyWOzm31VarSom77w9Gh+7GPj2r8i8poPo= |
| DKIM-Signature: | v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1533549001; bh=84lItuuGc0Iz32zYZbZF7AgOWIiUfZvKvtLTA7Xm0V8=; h=Date:From:Reply-To:Message-ID:To:Subject:In-Reply-To:References; b=DgrZqFRMQWUdCTzez6qgNv7LvxmFY216iRcRAfltjeQtngA75Q5ebIbyQmMs8PW1/ yn4zeIKFtSswPflNBQnHQ4YxRMafOo+G4RmGx6SVATKJ6kafHBzZr8Ncm9UfQ2k4dc FdTxwz4sb7iYQV41lMYoYDPzWG4P7oVZlgMa4ix0= |
| Authentication-Results: | smtp1j.mail.yandex.net; dkim=pass header.i=@yandex.ru |
| Date: | Mon, 6 Aug 2018 12:44:07 +0300 |
| From: | Andrey Repin <anrdaemon AT yandex DOT ru> |
| Reply-To: | cygwin AT cygwin DOT com |
| Message-ID: | <1816846654.20180806124407@yandex.ru> |
| To: | Csaba Raduly <rcsaba AT gmail DOT com>, cygwin AT cygwin DOT com |
| Subject: | Re: wget does not recognize PKI? |
| In-Reply-To: | <CAEhDDbCE6BN+Ok-NnAS9JhxXa6mC5NYqsyFUMhLS+jZuYoe9tw@mail.gmail.com> |
| References: | <1964416456 DOT 20180805201253 AT yandex DOT ru> <bd0e6b94-9286-9e42-0efa-6ce8a9e2bd8d AT gmail DOT com> <CAEhDDbCE6BN+Ok-NnAS9JhxXa6mC5NYqsyFUMhLS+jZuYoe9tw AT mail DOT gmail DOT com> |
| MIME-Version: | 1.0 |
| X-IsSubscribed: | yes |
| X-MIME-Autoconverted: | from base64 to 8bit by delorie.com id w769oJtP017148 |
Greetings, Csaba Raduly! > On Sun, Aug 5, 2018 at 7:36 PM, Marco Atzeri wrote: >> Am 05.08.2018 um 19:12 schrieb Andrey Repin: >>> >>> Greetings, All! >>> >>> $ wget https://ca.rootdir.org/ca.crl >>> --2018-08-05 20:05:28-- https://ca.rootdir.org/ca.crl >>> Resolving ca.rootdir.org (ca.rootdir.org)... 192.168.1.6 >>> Connecting to ca.rootdir.org (ca.rootdir.org)|192.168.1.6|:443... >>> connected. >>> ERROR: The certificate of ‘ca.rootdir.org’ is not trusted. >>> ERROR: The certificate of ‘ca.rootdir.org’ hasn't got a known issuer. >>> >> >>> >>> What's going on? >>> >> >> It seems not a cygwin issue: >> >> "This connection is not secure >> >> The owner of ca.rootdir.org did not properly configure the site. Firefox has >> not affiliated with this site to protect your information from theft." >> As I said, the root CA certificate is properly installed. > And not just Firefox : > $ curl -v https://ca.rootdir.org/ca.crl $ curl -v https://ca.rootdir.org/ca.crl * STATE: INIT => CONNECT handle 0x600057ac0; line 1404 (connection #-5000) * Added connection 0. The cache now contains 1 members * STATE: CONNECT => WAITRESOLVE handle 0x600057ac0; line 1440 (connection #0) * Trying 192.168.1.6... * TCP_NODELAY set * STATE: WAITRESOLVE => WAITCONNECT handle 0x600057ac0; line 1521 (connection #0) * Connected to ca.rootdir.org (192.168.1.6) port 443 (#0) * STATE: WAITCONNECT => SENDPROTOCONNECT handle 0x600057ac0; line 1573 (connection #0) * Marked for [keep alive]: HTTP default * ALPN, offering h2 * ALPN, offering http/1.1 * Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH * successfully set certificate verify locations: CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: /etc/ssl/certs * TLSv1.2 (OUT), TLS header, Certificate Status (22): * TLSv1.2 (OUT), TLS handshake, Client hello (1): * STATE: SENDPROTOCONNECT => PROTOCONNECT handle 0x600057ac0; line 1587 (connection #0) * TLSv1.2 (IN), TLS handshake, Server hello (2): * TLSv1.2 (IN), TLS handshake, Certificate (11): * TLSv1.2 (IN), TLS handshake, Server key exchange (12): * TLSv1.2 (IN), TLS handshake, Server finished (14): * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): * TLSv1.2 (OUT), TLS change cipher, Client hello (1): * TLSv1.2 (OUT), TLS handshake, Finished (20): * TLSv1.2 (IN), TLS change cipher, Client hello (1): * TLSv1.2 (IN), TLS handshake, Finished (20): * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: C=RU; ST=RF; L=Moscow; CN=Rootdir CA webserver * start date: Nov 21 17:47:29 2017 GMT * expire date: Nov 22 17:47:29 2018 GMT * subjectAltName: host "ca.rootdir.org" matched cert's "ca.rootdir.org" * issuer: C=RU; L=Moscow; CN=Andrey Repin; emailAddress=anrdaemon AT rootdir DOT org * SSL certificate verify ok. * STATE: PROTOCONNECT => DO handle 0x600057ac0; line 1608 (connection #0) * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x600057ac0) > GET /ca.crl HTTP/2 > Host: ca.rootdir.org > User-Agent: curl/7.59.0 > Accept: */* > * STATE: DO => DO_DONE handle 0x600057ac0; line 1670 (connection #0) * multi changed, check CONNECT_PEND queue! * STATE: DO_DONE => WAITPERFORM handle 0x600057ac0; line 1795 (connection #0) * STATE: WAITPERFORM => PERFORM handle 0x600057ac0; line 1811 (connection #0) * Connection state changed (MAX_CONCURRENT_STREAMS == 128)! * multi changed, check CONNECT_PEND queue! * HTTP/2 found, allow multiplexing < HTTP/2 200 < server: nginx/1.14.0 < date: Mon, 06 Aug 2018 09:41:25 GMT < content-type: application/octet-stream < content-length: 872 < last-modified: Sun, 05 Aug 2018 16:51:59 GMT < etag: "5b672b2f-368" < accept-ranges: bytes < Warning: Binary output can mess up your terminal. Use "--output -" to tell Warning: curl to output it to your terminal anyway, or consider "--output Warning: <FILE>" to save to a file. * Failed writing body (0 != 872) * Kill stream: Transfer returned error * multi_done * Connection #0 to host ca.rootdir.org left intact * Expire cleared [23]anrdaemon AT daemon2:xterm:~ $ "$( which curl )" --version curl 7.59.0 (x86_64-unknown-cygwin) libcurl/7.59.0 OpenSSL/1.0.2o zlib/1.2.11 libidn2/2.0.4 libpsl/0.18.0 (+libidn2/2.0.2) libssh2/1.7.0 nghttp2/1.31.0 Release-Date: 2018-03-14 Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp Features: AsynchDNS Debug IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz TLS-SRP HTTP2 UnixSockets HTTPS-proxy PSL Metalink -- With best regards, Andrey Repin Monday, August 6, 2018 12:41:08 Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
| webmaster | delorie software privacy |
| Copyright © 2019 by DJ Delorie | Updated Jul 2019 |