Certificate issue on pyra-handheld.com


Alec

Alec

Member
Joined
Mar 5, 2009
Messages
440
Starting Wednesday, there's been an issue with the site's certificate. With a browser everything is fine, but with something like curl or wget it fails:
Code: 
$ curl https://pyra-handheld.com/boards/forums/pyra-news.250/index.rss
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

I think it might be similar to this issue from a few years ago where it's mixing up Let's Encrypt and non-Let's Encrypt certificates in the chain:
Code: 
$ openssl s_client -connect pyra-handheld.com:443
...
Certificate chain
0 s:CN = pyra-handheld.com
   i:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Thawte TLS RSA CA G1
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
 
Yes, I get the same using curl. Traditionally, letsencrypt all relied on a non-letsencrypt cert as it's root, because to begin with they didn't own their own root cert so needed to rely on someone else's. But reportedly that needn't be the case for a few years now, and with todays certs only lasting a few months before they need to be renewed, I'm surprised that the letsencrypt cert this site is using is dependent on Thawte's root cert.
 
I have often Certificate Problems in many Sites...and i figured Out that my System Clock and Date was wrong.

After correcting the System Time...most of then Work again :)
 
levi said:
Yes, I get the same using curl. Traditionally, letsencrypt all relied on a non-letsencrypt cert as it's root, because to begin with they didn't own their own root cert so needed to rely on someone else's. But reportedly that needn't be the case for a few years now, and with todays certs only lasting a few months before they need to be renewed, I'm surprised that the letsencrypt cert this site is using is dependent on Thawte's root cert.
Click to expand...

Ahh, again?
I'll recheck that... where the heck is it getting that old Thawte certificate from?
 
Working now. I did receive a cacerts update to my linux box yesterday, dunno if that's what fixed it, but its now working for me.

The openssl command run today tells me it's backed by DST Root CA X3, not Thawte any more.
 
Anyone else have trouble connecting to pyra-handheld.com and dragonbox.de earlier today?
I tried on my phone (with Wi-Fi both on and off) and on a laptop but kept getting the message that my browser couldn’t open page as the website’s server wasn’t responding :( Other websites loaded without a problem though...
 
Phlyra said:
Anyone else have trouble connecting to pyra-handheld.com and dragonbox.de earlier today?
I tried on my phone (with Wi-Fi both on and off) and on a laptop but kept getting the message that my browser couldn’t open page as the website’s server wasn’t responding :( Other websites loaded without a problem though...
Click to expand...
I couldn't connect some hours ago (6-8, I don't remember). I was busy and didn't look for causes, so it could be on my side, but I could browse other sites.
 
Phlyra said:
Anyone else have trouble connecting to pyra-handheld.com and dragonbox.de earlier today?
I tried on my phone (with Wi-Fi both on and off) and on a laptop but kept getting the message that my browser couldn’t open page as the website’s server wasn’t responding :( Other websites loaded without a problem though...
Click to expand...
We were discussing this on Discord too.

According to the dragon himself:
"Huh. Apache2 hung."
"Hasn't done that for months."
 
You must log in or register to reply here.

Similar threads

sebt3
a journey with the pyra
Replies
2
Views
5K
Magic Sam
Magic Sam
Back
Top