From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-pg1-x531.google.com (mail-pg1-x531.google.com [IPv6:2607:f8b0:4864:20::531]) by sourceware.org (Postfix) with ESMTPS id DF4133858D37 for ; Thu, 3 Nov 2022 06:43:39 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org DF4133858D37 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-pg1-x531.google.com with SMTP id h193so857050pgc.10 for ; Wed, 02 Nov 2022 23:43:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:mime-version:message-id:references :in-reply-to:subject:to:from:date:from:to:cc:subject:date:message-id :reply-to; bh=K5feHehcEazhlDnMfq14EGwbgX0V2MOI1+ym63ZadG0=; b=YLwy/rcuWiX88fc4i7DpK8xPEZAB2up07YIBYVdJpwOsxADJGNcZwd4UIKOtIR5bVY +Fj8RBIBn1iOtrSF7Jh2ytGOp0mufwArj/qGZKjwQ9C05LlG7RPbEIa5T1WbMhY1I8yX TWsrleMeGNkbT/wzpD1nJtnJMEo8P1CUwJxZ0vUR380w16CAS8A+f/MPjgPIzePSflAd aZdjFBIfRC2LMgLp3Yjbv6AM2WgnzHkOCWrJEfx+sqawsH7NoLuMoBD5F9f6JEcr/1z2 GyXVESiHLn0mliQGYcghqHwenZemaGxWi61HjvlW3RnNDF2uMh0LScJvbQi+aCTjUTaW cynQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:message-id:references :in-reply-to:subject:to:from:date:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=K5feHehcEazhlDnMfq14EGwbgX0V2MOI1+ym63ZadG0=; b=vd9ntpLfpo43IZr18IhV5e+KpbymbRumOaGwPe4CW1bCUlvgQmJ8yUA8ghIXUD4OoS BaBxHQZAzrgJVi3GwVlgwSnDNZ1B2f+jpn4NMOV9JoQuJX673Y2m51H27Qx1yHCjsRsi XD91DT3/W0BRwBL86jld8F0foPdOU8uDKvmFQOnt3qQ2J2SUVJ/70QJfQUgOgrVh0acN UShVgahf6ocRUf82M59YfSlbmDOZqk/ps5jYbbgVM2gBkVvQY0to6ZPZzu2gfo360gYT cFIuu0vLIhQq9oWfyAuFZ7XhQ5B4MrUOZ0U/DIO2SqU/7T5otp/ZMSQajRwQ8Hwszf1H NcUQ== X-Gm-Message-State: ACrzQf2VPi46ll8NcxM1Pf+hT0LKY9sk0YWG2+Ocp1HejaDUTZmTZWeG B5Vjk5VbuJWUje3sKFHE1UOrP+VE21o= X-Google-Smtp-Source: AMsMyM491NW6yU1KqGPkpd+/jjeBI14OTSmw8JL4P7pO4t04XNkTHtb5E6nbvvktS8UAYcYa2UfuFg== X-Received: by 2002:a17:902:e74a:b0:186:a094:1d3 with SMTP id p10-20020a170902e74a00b00186a09401d3mr27998967plf.153.1667457807350; Wed, 02 Nov 2022 23:43:27 -0700 (PDT) Received: from [192.168.3.3] ([2400:2411:aa20:4300:c1e2:325f:9b30:c284]) by smtp.gmail.com with ESMTPSA id j5-20020a170902da8500b00177f25f8ab3sm9537002plx.89.2022.11.02.23.43.25 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 02 Nov 2022 23:43:26 -0700 (PDT) Date: Thu, 03 Nov 2022 15:43:26 +0900 From: Lemures Lemniscati To: cygwin@cygwin.com Subject: Re: [ANNOUNCEMENT] Test: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.86 (TEST) In-Reply-To: References: <20221103103809.AB08.50F79699@gmail.com> Message-Id: <20221103154324.AB10.50F79699@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit X-Mailer: Becky! ver. 2.81.03 [ja] X-Antivirus: Avast (VPS 221102-10, 2022/11/2), Outbound message X-Antivirus-Status: Clean X-Spam-Status: No, score=-1.3 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,KAM_SHORT,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On Wed, 2 Nov 2022 22:10:18 -0400, gs-cygwin.com Re: [ANNOUNCEMENT] Test: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.86 (TEST) > On Thu, Nov 03, 2022 at 10:38:13AM +0900, Lemures Lemniscati wrote: > > I failed to get https://cygwin.com/index.html by curl: > > > > ========== > > $ uname -svrmo; cygcheck -c curl libcurl4 libgsasl18 ca-certificates; rm -f index.html; curl -O https://cygwin.com/index.html; ls -l index.html > > CYGWIN_NT-10.0-22621 3.3.6-341.x86_64 2022-09-05 11:15 UTC x86_64 Cygwin > > Cygwin Package Information > > Package Version Status > > ca-certificates 2022.2.54-3 OK > > curl 7.86.0-1 OK > > libcurl4 7.86.0-1 OK > > libgsasl18 2.2.0-1 OK > > % Total % Received % Xferd Average Speed Time Time Time Current > > Dload Upload Total Spent Left Speed > > 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 > > curl: (60) SSL certificate problem: unable to get local issuer certificate > > More details here: https://curl.se/docs/sslcerts.html > > > > curl failed to verify the legitimacy of the server and therefore could not > > establish a secure connection to it. To learn more about this situation and > > how to fix it, please visit the web page mentioned above. > > ls: cannot access 'index.html': No such file or directory > > ========== > > > > I don't know whether the result is expeced. > > If so, is there any help? > > Lem: did this work for you with an older version of curl? > > Please use 'curl -v -O https://cygwin.com/index.html' and identify the > server with which you are having trouble. There is more than one server. > > Cheers, Glenn I guess it could work in June 2022. But reverting upto curl-7.81.0 doesn't improve the situation. Lem ======== $ curl -V curl 7.81.0 (x86_64-pc-cygwin) libcurl/7.81.0 OpenSSL/1.1.1s zlib/1.2.13 brotli/1.0.9 zstd/1.5.2 libidn2/2.3.4 libpsl/0.21.1 (+libidn2/2.3.1) libssh2/1.10.0 nghttp2/1.50.0 libgsasl/1.10.0 OpenLDAP/2.6.3 Release-Date: 2022-01-05 Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp Features: alt-svc AsynchDNS brotli Debug gsasl GSS-API HSTS HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM NTLM_WB PSL SPNEGO SSL TLS-SRP TrackMemory UnixSockets zstd $ curl -v -O https://cygwin.com/index.html * STATE: INIT => CONNECT handle 0x80008eb28; line 1835 (connection #-5000) * Added connection 0. The cache now contains 1 members * STATE: CONNECT => RESOLVING handle 0x80008eb28; line 1881 (connection #0) % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* family0 == v4, family1 == v6 * Trying 8.43.85.97:443... * STATE: RESOLVING => CONNECTING handle 0x80008eb28; line 1965 (connection #0) * Connected to cygwin.com (8.43.85.97) port 443 (#0) * STATE: CONNECTING => PROTOCONNECT handle 0x80008eb28; line 2028 (connection #0) 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* ALPN, offering h2 * ALPN, offering http/1.1 * CAfile: /etc/pki/tls/certs/ca-bundle.crt * CApath: none * Didn't find Session ID in cache for host HTTPS://cygwin.com:443 } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * STATE: PROTOCONNECT => PROTOCONNECTING handle 0x80008eb28; line 2048 (connection #0) { [5 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [70 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [1023 bytes data] * TLSv1.2 (OUT), TLS alert, unknown CA (560): } [2 bytes data] * SSL certificate problem: unable to get local issuer certificate * multi_done: status: 60 prem: 1 done: 0 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 * The cache now contains 0 members * Closing connection 0 curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. ========