From nobody Wed Feb 26 20:51:45 2025 X-Original-To: freebsd-security@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Z36956PzBz5nt2v for ; Wed, 26 Feb 2025 20:52:09 +0000 (UTC) (envelope-from doctor@doctor.nl2k.ab.ca) Received: from doctor.nl2k.ab.ca (doctor.nl2k.ab.ca [204.209.81.1]) by mx1.freebsd.org (Postfix) with SMTP id 4Z36941QK3z3VRP for ; Wed, 26 Feb 2025 20:52:08 +0000 (UTC) (envelope-from doctor@doctor.nl2k.ab.ca) Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=pass (policy=quarantine) header.from=nl2k.ab.ca; spf=pass (mx1.freebsd.org: domain of doctor@doctor.nl2k.ab.ca designates 204.209.81.1 as permitted sender) smtp.mailfrom=doctor@doctor.nl2k.ab.ca Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.1 (FreeBSD)) (envelope-from ) id 1tnONd-000000007SO-24Td for freebsd-security@freebsd.org; Wed, 26 Feb 2025 13:51:45 -0700 Date: Wed, 26 Feb 2025 13:51:45 -0700 From: The Doctor To: freebsd-security@freebsd.org Subject: False positive Message-ID: List-Id: Security issues List-Archive: https://lists.freebsd.org/archives/freebsd-security List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-security@freebsd.org Sender: owner-freebsd-security@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Spamd-Result: default: False [2.39 / 15.00]; INTRODUCTION(2.00)[]; NEURAL_SPAM_LONG(1.00)[1.000]; NEURAL_HAM_SHORT(-0.93)[-0.926]; NEURAL_SPAM_MEDIUM(0.82)[0.820]; DMARC_POLICY_ALLOW(-0.50)[nl2k.ab.ca,quarantine]; ONCE_RECEIVED(0.20)[]; R_SPF_ALLOW(-0.20)[+a]; RCVD_NO_TLS_LAST(0.10)[]; MIME_GOOD(-0.10)[text/plain]; MIME_TRACE(0.00)[0:+]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; RCVD_COUNT_ONE(0.00)[1]; ARC_NA(0.00)[]; ASN(0.00)[asn:6171, ipnet:204.209.81.0/24, country:CA]; RCPT_COUNT_ONE(0.00)[1]; MISSING_XM_UA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; TO_DN_NONE(0.00)[]; MLMMJ_DEST(0.00)[freebsd-security@freebsd.org]; R_DKIM_NA(0.00)[]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Queue-Id: 4Z36941QK3z3VRP X-Spamd-Bar: ++ This main server is seeing curl -v -v -v -v -v -v -v -v -v -v -v -v https://gateway.moneris.com/chktv2/request/request.php * !!! WARNING !!! * This is a debug build of libcurl, do not use in production. * STATE: INIT => SETUP handle 0x15e5070d7808; line 2393 * STATE: SETUP => CONNECT handle 0x15e5070d7808; line 2409 * Added connection 0. The cache now contains 1 members * STATE: CONNECT => RESOLVING handle 0x15e5070d7808; line 2308 * Curl_multi_closed, fd=4 multi is 0x15e507095008 * Curl_multi_closed, fd=4 entry is 0x15e507010508 * Host gateway.moneris.com:443 was resolved. * IPv6: (none) * IPv4: 23.249.192.196 * STATE: RESOLVING => CONNECTING handle 0x15e5070d7808; line 2266 * Trying 23.249.192.196:443... * ALPN: curl offers h2,http/1.1 * TLSv1.3 (OUT), TLS handshake, Client hello (1): * TLSv1.3 (IN), TLS handshake, Server hello (2): * TLSv1.2 (IN), TLS handshake, Certificate (11): * TLSv1.2 (OUT), TLS alert, unknown CA (560): * SSL certificate problem: self-signed certificate in certificate chain * multi_done[CONNECTING]: status: 60 prem: 1 done: 0 * multi_done, not reusing connection=0, forbid=0, close=0, premature=1, conn_multiplex=0 * Curl_disconnect(conn #0, aborted=1) * closing connection #0 * [CCACHE] closing #0 * Curl_multi_closed, fd=4 multi is 0x15e507095008 * Curl_multi_closed, fd=4 entry is (nil) * [CCACHE] trigger multi connchanged curl: (60) SSL certificate problem: self-signed certificate in certificate chain More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the webpage mentioned above. yet wen I check against KAli, the server says the certificate is correct. What could have gone wrong? -- Member - Liberal International This is doctor@nk.ca Ici doctor@nk.ca Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism ; Ontario vote for the Liberals - The best Anti-Trump option!