Conversation

Notices

1. Embed this notice
   daniel:// stenberg:// (bagder@mastodon.social)'s status on Saturday, 18-Feb-2023 15:48:30 JST daniel:// stenberg://

   user reports curl doesn't work on his system, gets annoying cert error

   turns out user is indeed getting MITMed so the check worked exactly as intended

   https://github.com/curl/curl/issues/10551

   • clacke likes this.
   • Embed this notice
     linus (linus@telegrafverket.cc)'s status on Saturday, 18-Feb-2023 15:58:32 JST linus

     in reply to

     @bagder "you either die an antivirus, or you live long enough to see yourself become the malware"

     clacke likes this.
   • Embed this notice
     clacke (clacke@libranet.de)'s status on Saturday, 18-Feb-2023 16:18:28 JST clacke

     in reply to

     • Jonathan Doughty
     @jwd630 @bagder MitM everything is standard employer procedure these days.
   • Embed this notice
     Jonathan Doughty (jwd630@mastodon.social)'s status on Saturday, 18-Feb-2023 16:18:31 JST Jonathan Doughty

     in reply to

     @bagder old employer used to MitM everything. The number of developer hours wasted discovering, and then getting an explanation from others on how to work around that by adding the corporate cert chain into tools’ expectations, always boggled my mind.

   • Embed this notice
     daniel:// stenberg:// (bagder@mastodon.social)'s status on Saturday, 18-Feb-2023 18:45:16 JST daniel:// stenberg://

     in reply to

     • Jérôme Mainaud

     @jxerome agreed! someone should work on that one day... =)

     clacke likes this.
   • Embed this notice
     Jérôme Mainaud (jxerome@framapiaf.org)'s status on Saturday, 18-Feb-2023 18:45:23 JST Jérôme Mainaud

     in reply to

     @bagder indeed.

     However, having details on the rejected certificate displayed in the first request would have avoided the user to put himself in danger by testing the query with "-k" to understand the reason why the requests were rejected.

     So, maybe the error message could be slightly improved.

     clacke likes this.