What s up ```curl curl 60 SSL

Question

What s up ```curl curl 60 SSL certificate problem self signed certificate in certificate chain More details here curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it To learn more about this situation and how to fix it please visit the web page mentioned above ```

Gavin · Answer

Hey is this still an issue some of the OSquery infra was moved to the new foundation and there was a period of interruption Checking the certificate chain now I can t see any issue from the UK

Gavin · Answer

Certificate issued at `Wednesday 16 September 2020 at 16 19 43 British Summer Time`

jby · Answer

I m not sure I m getting this on a Linux F32 laptop but not on my MacBookPro so I don t know

jby · Answer

I also get this on that Linux host ```openssl s client showcerts servername server connect <http pkg osquery io 443|pkg osquery io 443> CONNECTED 00000003 140309355648832 error 140943F2 SSL routines ssl3 read bytes sslv3 alert unexpected message ssl record rec layer s3 c 1543 SSL alert number 10 no peer certificate available No client certificate CA names sent SSL handshake has read 7 bytes and written 308 bytes Verification OK New NONE Cipher is NONE Secure Renegotiation IS NOT supported Compression NONE Expansion NONE No ALPN negotiated Early data was not sent Verify return code 0 ok ```

Gavin · Answer

confused okay I just spun up a Fedora 32 live ISO and can t replicate

jby · Answer

Ok I ll look through my setup and try some more since it seems that it s my setup that s causing this

Gavin · Answer

It may be geo graphic amazon had some ACM issues yesterday

Gavin · Answer

So may be a bad load balancer etc

Gavin · Answer

```reated by dnf config manager from 248 B s | 313 B 00 01 Errors during downloading metadata for repository pkg osquery io rpm osquery s3 rpm rep Status code 404 for IP 99 84 10 98 Error Failed to download metadata for repo pkg osquery io rpm osquery s3 rpm rep Cannot download repomd xml Cannot download repodata repomd xml All mirrors were tried Ignoring repositories pkg osquery io rpm osquery s3 rpm rep Last metadata expiration check 0 01 55 ago on Fri 18 Sep 2020 10 37 15 AM BST Package osquery 4 4 0 1 x86 64 is already installed Dependencies resolved ```

theopolis · Answer

Question about ```<https pkg osquery io rpm osquery s3 rpm rep>``` that is invalid there should be a o at the end

theopolis · Answer

` repo`

theopolis · Answer

< jby> your `openssl` command is incorrect please use ```openssl s client showcerts servername connect ```