Date: Wed, 12 Jan 2022 13:29:48 +0100 From: Axel Rau <Axel.Rau@Chaos1.DE> To: FreeBSD-security@FreeBSD.org Subject: Re: Random failures: "unable to get local issuer certificate" Message-ID: <B65E8153-5E72-4167-9C8F-0FBB052DB95F@Chaos1.DE> In-Reply-To: <3a5cd966011999f62c7d66a263f12500@patpro.net> References: <A1C37E54-1FF3-4486-AD6C-470B5F858634@Chaos1.DE> <3a5cd966011999f62c7d66a263f12500@patpro.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--Apple-Mail=_46AF78E5-BD2C-43D5-BDDF-1BF5167F147F Content-Type: multipart/alternative; boundary="Apple-Mail=_BA4CA67E-8199-4721-9942-92D1F920C151" --Apple-Mail=_BA4CA67E-8199-4721-9942-92D1F920C151 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > Am 12.01.2022 um 12:05 schrieb patpro@patpro.net: >=20 > may be (I have not tested) the result is different depending on DNS = reply. I don=E2=80=99t think so, as I have local resolvers which should have = cached the AAAAs. But they have no valid reverse mapping. I just saw 1 jail failing which succeded always in the past. Strange. Axel --- PGP-Key: CDE74120 =E2=98=80 computing @ chaos claudius --Apple-Mail=_BA4CA67E-8199-4721-9942-92D1F920C151 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; = charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><br = class=3D""><div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D"">Am 12.01.2022 um 12:05 schrieb <a = href=3D"mailto:patpro@patpro.net" = class=3D"">patpro@patpro.net</a>:</div><br = class=3D"Apple-interchange-newline"><div class=3D""><span = style=3D"caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; = font-size: 12px; font-style: normal; font-variant-caps: normal; = font-weight: normal; letter-spacing: normal; text-align: start; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none; float: none; display: inline !important;" class=3D"">may be (I = have not tested) the result is different depending on DNS = reply.</span><br style=3D"caret-color: rgb(0, 0, 0); font-family: = Menlo-Regular; font-size: 12px; font-style: normal; font-variant-caps: = normal; font-weight: normal; letter-spacing: normal; text-align: start; = text-indent: 0px; text-transform: none; white-space: normal; = word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: = none;" class=3D""></div></blockquote></div><div class=3D""><br = class=3D""></div>I don=E2=80=99t think so, as I have local resolvers = which should have cached the AAAAs.<div class=3D"">But they have = no valid reverse mapping.</div><div class=3D""><br class=3D""></div><div = class=3D"">I just saw 1 jail failing which succeded always in the = past.<div class=3D""><br class=3D""></div><div = class=3D"">Strange.</div><div class=3D"">Axel<br class=3D""><div = class=3D""> <div dir=3D"auto" style=3D"caret-color: rgb(0, 0, 0); color: rgb(0, 0, = 0); letter-spacing: normal; text-align: start; text-indent: 0px; = text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: = break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" = class=3D""><div dir=3D"auto" style=3D"caret-color: rgb(0, 0, 0); color: = rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: = 0px; text-transform: none; white-space: normal; word-spacing: 0px; = -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: = break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: = break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: = break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); font-family: Helvetica; = font-style: normal; font-variant-ligatures: normal; = font-variant-position: normal; font-variant-caps: normal; = font-variant-numeric: normal; font-variant-alternates: normal; = font-variant-east-asian: normal; font-weight: normal; letter-spacing: = normal; line-height: normal; orphans: 2; text-align: -webkit-auto; = text-indent: 0px; text-transform: none; white-space: normal; widows: 2; = word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: = break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" = class=3D""><div class=3D"">---<br class=3D"">PGP-Key: CDE74120 = =E2=98=80 computing @ chaos = claudius</div></div></div></div></div></div> </div> <br class=3D""></div></div></body></html>= --Apple-Mail=_BA4CA67E-8199-4721-9942-92D1F920C151-- --Apple-Mail=_46AF78E5-BD2C-43D5-BDDF-1BF5167F147F Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEl5evOTfnjZdhkBzKaPxTRM3nQSAFAmHeybwACgkQaPxTRM3n QSC3Ag/+Pqbc4EbFrdsoj2WMus657UIbKg9wV26lB4heIjC1zTUlsgZ5lfi0+Ik+ pJmyXwCYTVDd4+gt7j983Vpfp99FOg4u0HDOPolf5Br2of/ZMxzVAB6Z0PWHeEpj ev3t45OASIvL7CjpgjZ00shwsJz1J8HxojYwcjuX54G2A+6ffHa8eiW0zBrb0F4d uyLWKVcX3rg5v4/rrwhrQhFLCnBzzV8M9xGxN9qwPZrRXSnv+r3L/VLplWIstn6q ZuthX4W3jsxnsJTroiDL1CWyr4xkOY26IomeXUCN8Xsx+sg3FYfKuO564p/t2E08 kJLY3YAa0HqQ593eiqCq9wkqiqqRR16I0pTdOZpTUdwc9kReM4tP4Fm6jSO+k288 2QOJJL2B7mRo1tumE62hRq8KzUxchZoq763S4n05PycuhS7gqYw83ckTjCf0i/pO TuKUUL4v0mnLhij49/UFM9gTd6+UJ3bGqXoPaqfMjr3XPzCrvJBQWTqlS+h4/9t8 W7IK1a8DMDoBoji7iiC9VulHN53vSc0uk2s8XL6CkktrNkySVctjFs/VPrF1AnJj V+HrItUahvlL/h0YfcHR/v2SPAJrKUHww5W3eFvEMF5qyXw8vtQbRLdX5hokH8Q7 MsvAwTlt67eIuZxXwwxS2A5xW0EJLsgs0NaYYuMyxRaj0CA3owY= =xbUt -----END PGP SIGNATURE----- --Apple-Mail=_46AF78E5-BD2C-43D5-BDDF-1BF5167F147F--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B65E8153-5E72-4167-9C8F-0FBB052DB95F>