You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When built using gnutls, curl cannot connect to https://pyropus.ca. possibly because the period at the end of the hostname is not being stripped for SNI purposes. This problem does not occur when curl is built using openssl. I'm not sure whether this is a curl bug or a gnutls bug.
For prior history on issues accessing this server, which intentionally uses a canonical name ending in a period, see #8290 reported by @ccazabon. There, the problem was that curl was stripping the period from the hostname for non-SNI purposes when it should not have been doing so.
curl: (60) SSL: certificate subject name (pyropus.ca) does not match target host name 'pyropus.ca.'
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
Likely so; I was guessing. Feel free to retitle or edit as needed.
bagder
changed the title
Absolute domain names do not get trailing dot stripped from SNI hostname when using gnutls
domain name with trailing dot fails the certificate check when using gnutls
Apr 21, 2024
When built using gnutls, curl cannot connect to
https://pyropus.ca.
possibly because the period at the end of the hostname is not being stripped for SNI purposes. This problem does not occur when curl is built using openssl. I'm not sure whether this is a curl bug or a gnutls bug.For prior history on issues accessing this server, which intentionally uses a canonical name ending in a period, see #8290 reported by @ccazabon. There, the problem was that curl was stripping the period from the hostname for non-SNI purposes when it should not have been doing so.
I did this
I expected the following
but I got this
curl/libcurl version
operating system
Darwin hostname-redacted 21.6.0 Darwin Kernel Version 21.6.0: Mon Feb 19 20:24:34 PST 2024; root:xnu-8020.240.18.707.4~1/RELEASE_X86_64 x86_64
The text was updated successfully, but these errors were encountered: