I fired up an updated Fedora VM I have, and “finally”:
wget https://bill.welliver.org/dist/openhab/
ERROR: The certificate is NOT trusted. The certificate issuer is unknown.
Failed to connect: Certificate error
I don’t get why this is though, my Windows computer things the certificate is OK, but Fedora doesn’t…
curl says:
curl -v https://bill.welliver.org/dist/openhab/
* Host bill.welliver.org:443 was resolved.
* IPv6: (none)
* IPv4: 192.99.78.190
* Trying 192.99.78.190:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* CAfile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
* CApath: none
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: unable to get local issuer certificate
* closing connection #0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html
edit: Could this be some TLS 1.2 vs 1.3 issue?
edit2: Nope:
curl -v --tls-max 1.2 https://bill.welliver.org/dist/openhab/
* Host bill.welliver.org:443 was resolved.
* IPv6: (none)
* IPv4: 192.99.78.190
* Trying 192.99.78.190:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* CAfile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
* CApath: none
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: unable to get local issuer certificate
* closing connection #0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html
edit3: However, if I force TLS 1.3, the handshake itself fails. Is that “typical”/normal?
curl -v --tlsv1.3 https://bill.welliver.org/dist/openhab/ * Host bill.welliver.org:443 was resolved.
* IPv6: (none)
* IPv4: 192.99.78.190
* Trying 192.99.78.190:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* CAfile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
* CApath: none
* TLSv1.3 (IN), TLS alert, handshake failure (552):
* TLS connect error: error:0A000410:SSL routines::ssl/tls alert handshake failure
* closing connection #0
curl: (35) TLS connect error: error:0A000410:SSL routines::ssl/tls alert handshake failure