On Wed, Jun 22, 2022 at 12:16 PM Petr Pisar <petr.pi...@atlas.cz> wrote: > > V Tue, Jun 21, 2022 at 10:54:47PM -0500, KeithG napsal(a): > > With the latest wget 1.21.3 on arch linux on armv7, I was experiencing > > a 'certificate expired' error. This has been going on for a while but > > only on my 32 bit machine. The 64 bit version never had a problem on > > x86_64 or aarch64. 1.21.1 did not have this problem on 32 bit > > machines, either. I was able to resolve the issue by a patch found in > > this thread: > > https://archlinuxarm.org/forum/viewtopic.php?f=57&t=16070&p=69630#p69630 > > I still have test problems for the iri tests, but this patch does fix > > the https certificate bug on arch arm armv7 and maybe other 32 bit OS. > > > > time_t now = time (NULL); > [...] > --- wget-1.21.3.org/src/gnutls.c 2022-02-26 15:47:42.000000000 +0100 > +++ wget-1.21.3/src/gnutls.c 2022-06-21 20:51:40.244552644 +0200 > @@ -1085,7 +1085,7 @@ > logprintf (LOG_NOTQUIET, _("The certificate has not yet been > activated\n")); > success = false; > } > - if (now >= gnutls_x509_crt_get_expiration_time (cert)) > + if (now >= (unsigned long) gnutls_x509_crt_get_expiration_time (cert)) > { > logprintf (LOG_NOTQUIET, _("The certificate has expired\n")); > success = false; > > That patch does not seem right. gnutls_x509_crt_get_expiration_time() returns > time_t and now is also time_t. > > Either there is a bug in gnutls, or glibc, or simply the expiration time of > the certificate is not representable with 32-bit time_t type. I would not be > surprised if it were the last case. > > Can you post here a complete certificate chain the server presents to wget? > You can use "openssl s_client -connect THE_HOST:https -showcerts to obtain it. > If it so, than the only fix is to recompile your system with "-D_TIME_BITS=64 > -D_FILE_OFFSET_BITS=64" CFLAGS. (Provided your platform supports it.) > > -- Petr
I am not sure what I need to reply when the command completes. I typed '0'. This is on an armv7 running arch linux: # openssl s_client -connect google.com:https -showcerts CONNECTED(00000003) depth=2 C = US, O = Google Trust Services LLC, CN = GTS Root R1 verify return:1 depth=1 C = US, O = Google Trust Services LLC, CN = GTS CA 1C3 verify return:1 depth=0 CN = *.google.com verify return:1 --- Certificate chain 0 s:CN = *.google.com i:C = US, O = Google Trust Services LLC, CN = GTS CA 1C3 -----BEGIN CERTIFICATE----- MIIN1zCCDL+gAwIBAgIQWKzllAtBeGQSnVMaOcsAZzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFDMzAeFw0yMjA2MDYwODI5NDZaFw0yMjA4Mjkw ODI5NDVaMBcxFTATBgNVBAMMDCouZ29vZ2xlLmNvbTBZMBMGByqGSM49AgEGCCqG SM49AwEHA0IABJXa7t39lmNrnl00A4TS0c6SSgC6po71Axfk8nyX3Dmq0yfpwr3k 1ju5sXIZdLtt8AuzSh/DKSIpV6HQoYkRNEyjggu5MIILtTAOBgNVHQ8BAf8EBAMC B4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU A2K1L5UeYUaRupS8Ar36m2zsex0wHwYDVR0jBBgwFoAUinR/r4XN7pXNPZzQ4kYU 83E1HScwagYIKwYBBQUHAQEEXjBcMCcGCCsGAQUFBzABhhtodHRwOi8vb2NzcC5w a2kuZ29vZy9ndHMxYzMwMQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBv L2NlcnRzL2d0czFjMy5kZXIwggloBgNVHREEgglfMIIJW4IMKi5nb29nbGUuY29t ghYqLmFwcGVuZ2luZS5nb29nbGUuY29tggkqLmJkbi5kZXaCEiouY2xvdWQuZ29v Z2xlLmNvbYIYKi5jcm93ZHNvdXJjZS5nb29nbGUuY29tghgqLmRhdGFjb21wdXRl Lmdvb2dsZS5jb22CCyouZ29vZ2xlLmNhggsqLmdvb2dsZS5jbIIOKi5nb29nbGUu Y28uaW6CDiouZ29vZ2xlLmNvLmpwgg4qLmdvb2dsZS5jby51a4IPKi5nb29nbGUu Y29tLmFygg8qLmdvb2dsZS5jb20uYXWCDyouZ29vZ2xlLmNvbS5icoIPKi5nb29n bGUuY29tLmNvgg8qLmdvb2dsZS5jb20ubXiCDyouZ29vZ2xlLmNvbS50coIPKi5n b29nbGUuY29tLnZuggsqLmdvb2dsZS5kZYILKi5nb29nbGUuZXOCCyouZ29vZ2xl LmZyggsqLmdvb2dsZS5odYILKi5nb29nbGUuaXSCCyouZ29vZ2xlLm5sggsqLmdv b2dsZS5wbIILKi5nb29nbGUucHSCEiouZ29vZ2xlYWRhcGlzLmNvbYIPKi5nb29n bGVhcGlzLmNughEqLmdvb2dsZXZpZGVvLmNvbYIMKi5nc3RhdGljLmNughAqLmdz dGF0aWMtY24uY29tgg9nb29nbGVjbmFwcHMuY26CESouZ29vZ2xlY25hcHBzLmNu ghFnb29nbGVhcHBzLWNuLmNvbYITKi5nb29nbGVhcHBzLWNuLmNvbYIMZ2tlY25h cHBzLmNugg4qLmdrZWNuYXBwcy5jboISZ29vZ2xlZG93bmxvYWRzLmNughQqLmdv b2dsZWRvd25sb2Fkcy5jboIQcmVjYXB0Y2hhLm5ldC5jboISKi5yZWNhcHRjaGEu bmV0LmNughByZWNhcHRjaGEtY24ubmV0ghIqLnJlY2FwdGNoYS1jbi5uZXSCC3dp ZGV2aW5lLmNugg0qLndpZGV2aW5lLmNughFhbXBwcm9qZWN0Lm9yZy5jboITKi5h bXBwcm9qZWN0Lm9yZy5jboIRYW1wcHJvamVjdC5uZXQuY26CEyouYW1wcHJvamVj dC5uZXQuY26CF2dvb2dsZS1hbmFseXRpY3MtY24uY29tghkqLmdvb2dsZS1hbmFs eXRpY3MtY24uY29tghdnb29nbGVhZHNlcnZpY2VzLWNuLmNvbYIZKi5nb29nbGVh ZHNlcnZpY2VzLWNuLmNvbYIRZ29vZ2xldmFkcy1jbi5jb22CEyouZ29vZ2xldmFk cy1jbi5jb22CEWdvb2dsZWFwaXMtY24uY29tghMqLmdvb2dsZWFwaXMtY24uY29t ghVnb29nbGVvcHRpbWl6ZS1jbi5jb22CFyouZ29vZ2xlb3B0aW1pemUtY24uY29t ghJkb3VibGVjbGljay1jbi5uZXSCFCouZG91YmxlY2xpY2stY24ubmV0ghgqLmZs cy5kb3VibGVjbGljay1jbi5uZXSCFiouZy5kb3VibGVjbGljay1jbi5uZXSCDmRv dWJsZWNsaWNrLmNughAqLmRvdWJsZWNsaWNrLmNughQqLmZscy5kb3VibGVjbGlj ay5jboISKi5nLmRvdWJsZWNsaWNrLmNughFkYXJ0c2VhcmNoLWNuLm5ldIITKi5k YXJ0c2VhcmNoLWNuLm5ldIIdZ29vZ2xldHJhdmVsYWRzZXJ2aWNlcy1jbi5jb22C HyouZ29vZ2xldHJhdmVsYWRzZXJ2aWNlcy1jbi5jb22CGGdvb2dsZXRhZ3NlcnZp Y2VzLWNuLmNvbYIaKi5nb29nbGV0YWdzZXJ2aWNlcy1jbi5jb22CF2dvb2dsZXRh Z21hbmFnZXItY24uY29tghkqLmdvb2dsZXRhZ21hbmFnZXItY24uY29tghhnb29n bGVzeW5kaWNhdGlvbi1jbi5jb22CGiouZ29vZ2xlc3luZGljYXRpb24tY24uY29t giQqLnNhZmVmcmFtZS5nb29nbGVzeW5kaWNhdGlvbi1jbi5jb22CFmFwcC1tZWFz dXJlbWVudC1jbi5jb22CGCouYXBwLW1lYXN1cmVtZW50LWNuLmNvbYILZ3Z0MS1j bi5jb22CDSouZ3Z0MS1jbi5jb22CC2d2dDItY24uY29tgg0qLmd2dDItY24uY29t ggsybWRuLWNuLm5ldIINKi4ybWRuLWNuLm5ldIIUZ29vZ2xlZmxpZ2h0cy1jbi5u ZXSCFiouZ29vZ2xlZmxpZ2h0cy1jbi5uZXSCDGFkbW9iLWNuLmNvbYIOKi5hZG1v Yi1jbi5jb22CDSouZ3N0YXRpYy5jb22CFCoubWV0cmljLmdzdGF0aWMuY29tggoq Lmd2dDEuY29tghEqLmdjcGNkbi5ndnQxLmNvbYIKKi5ndnQyLmNvbYIOKi5nY3Au Z3Z0Mi5jb22CECoudXJsLmdvb2dsZS5jb22CFioueW91dHViZS1ub2Nvb2tpZS5j b22CCyoueXRpbWcuY29tggthbmRyb2lkLmNvbYINKi5hbmRyb2lkLmNvbYITKi5m bGFzaC5hbmRyb2lkLmNvbYIEZy5jboIGKi5nLmNuggRnLmNvggYqLmcuY2+CBmdv by5nbIIKd3d3Lmdvby5nbIIUZ29vZ2xlLWFuYWx5dGljcy5jb22CFiouZ29vZ2xl LWFuYWx5dGljcy5jb22CCmdvb2dsZS5jb22CEmdvb2dsZWNvbW1lcmNlLmNvbYIU Ki5nb29nbGVjb21tZXJjZS5jb22CCGdncGh0LmNuggoqLmdncGh0LmNuggp1cmNo aW4uY29tggwqLnVyY2hpbi5jb22CCHlvdXR1LmJlggt5b3V0dWJlLmNvbYINKi55 b3V0dWJlLmNvbYIUeW91dHViZWVkdWNhdGlvbi5jb22CFioueW91dHViZWVkdWNh dGlvbi5jb22CD3lvdXR1YmVraWRzLmNvbYIRKi55b3V0dWJla2lkcy5jb22CBXl0 LmJlggcqLnl0LmJlghphbmRyb2lkLmNsaWVudHMuZ29vZ2xlLmNvbYIbZGV2ZWxv cGVyLmFuZHJvaWQuZ29vZ2xlLmNughxkZXZlbG9wZXJzLmFuZHJvaWQuZ29vZ2xl LmNughhzb3VyY2UuYW5kcm9pZC5nb29nbGUuY24wIQYDVR0gBBowGDAIBgZngQwB AgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5w a2kuZ29vZy9ndHMxYzMvUU92SjBOMXNUMkEuY3JsMIIBBQYKKwYBBAHWeQIEAgSB 9gSB8wDxAHcARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+bUcAAAGBOFlj fAAABAMASDBGAiEAoHmOVZKS5VGSQKFc7VgCS6VnJHtTiIMnNCU9G98myXcCIQCG EMb/cl+saCWuhJfzHQQTxbLc/34kUxIY9vx+XO4cbwB2AFGjsPX9AXmcVm24N3iP DKR6zBsny/eeiEKaDf7UiwXlAAABgThZY1gAAAQDAEcwRQIgfxFCZ91KrebMHewb gKBoLA0LIA3DSWz7mM0US70BR10CIQDJw43ZdCczvEd/AEPjw4OdluIr9KUluUHS z7Uxl0py1zANBgkqhkiG9w0BAQsFAAOCAQEAuptNDYahXiqDDDXoqo+1O9zkF2XZ e88HG0+w1ldWIuhDfuZI30H7t9+bUbnP4htEd36/b8TEkxITvwkGqivIsHXkQI5a /dASKdM/cU1E/S0QRrYfVnxZQQizdI8OYzX8ArmYHaXiVPsJq+DjnVXzf1/29O1V eu6SI2mcv1JMKsFzUbAHVzaah5tfyDEWLlL2+k31IoxscJk8Jto/jCHfD2ZdI68q DVS1z6RQyJEI8Dh55Xg+tvLzB2deDJXgQD+VYXN8JkLFrJnuNu3sXxczmCzjzNp9 wzRlH/FWcZ93OTEhQn20Cuew1Sg26DBbHVHH4foKRg2VpT+LQRiqE4yR8Q== -----END CERTIFICATE----- 1 s:C = US, O = Google Trust Services LLC, CN = GTS CA 1C3 i:C = US, O = Google Trust Services LLC, CN = GTS Root R1 -----BEGIN CERTIFICATE----- MIIFljCCA36gAwIBAgINAgO8U1lrNMcY9QFQZjANBgkqhkiG9w0BAQsFADBHMQsw CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU MBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjAwODEzMDAwMDQyWhcNMjcwOTMwMDAw MDQyWjBGMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp Y2VzIExMQzETMBEGA1UEAxMKR1RTIENBIDFDMzCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAPWI3+dijB43+DdCkH9sh9D7ZYIl/ejLa6T/belaI+KZ9hzp kgOZE3wJCor6QtZeViSqejOEH9Hpabu5dOxXTGZok3c3VVP+ORBNtzS7XyV3NzsX lOo85Z3VvMO0Q+sup0fvsEQRY9i0QYXdQTBIkxu/t/bgRQIh4JZCF8/ZK2VWNAcm BA2o/X3KLu/qSHw3TT8An4Pf73WELnlXXPxXbhqW//yMmqaZviXZf5YsBvcRKgKA gOtjGDxQSYflispfGStZloEAoPtR28p3CwvJlk/vcEnHXG0g/Zm0tOLKLnf9LdwL tmsTDIwZKxeWmLnwi/agJ7u2441Rj72ux5uxiZ0CAwEAAaOCAYAwggF8MA4GA1Ud DwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0T AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUinR/r4XN7pXNPZzQ4kYU83E1HScwHwYD VR0jBBgwFoAU5K8rJnEaK0gnhS9SZizv8IkTcT4waAYIKwYBBQUHAQEEXDBaMCYG CCsGAQUFBzABhhpodHRwOi8vb2NzcC5wa2kuZ29vZy9ndHNyMTAwBggrBgEFBQcw AoYkaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzcjEuZGVyMDQGA1UdHwQt MCswKaAnoCWGI2h0dHA6Ly9jcmwucGtpLmdvb2cvZ3RzcjEvZ3RzcjEuY3JsMFcG A1UdIARQME4wOAYKKwYBBAHWeQIFAzAqMCgGCCsGAQUFBwIBFhxodHRwczovL3Br aS5nb29nL3JlcG9zaXRvcnkvMAgGBmeBDAECATAIBgZngQwBAgIwDQYJKoZIhvcN AQELBQADggIBAIl9rCBcDDy+mqhXlRu0rvqrpXJxtDaV/d9AEQNMwkYUuxQkq/BQ cSLbrcRuf8/xam/IgxvYzolfh2yHuKkMo5uhYpSTld9brmYZCwKWnvy15xBpPnrL RklfRuFBsdeYTWU0AIAaP0+fbH9JAIFTQaSSIYKCGvGjRFsqUBITTcFTNvNCCK9U +o53UxtkOCcXCb1YyRt8OS1b887U7ZfbFAO/CVMkH8IMBHmYJvJh8VNS/UKMG2Yr PxWhu//2m+OBmgEGcYk1KCTd4b3rGS3hSMs9WYNRtHTGnXzGsYZbr8w0xNPM1IER lQCh9BIiAfq0g3GvjLeMcySsN1PCAJA/Ef5c7TaUEDu9Ka7ixzpiO2xj2YC/WXGs Yye5TBeg2vZzFb8q3o/zpWwygTMD0IZRcZk0upONXbVRWPeyk+gB9lm+cZv9TSjO z23HFtz30dZGm6fKa+l3D/2gthsjgx0QGtkJAITgRNOidSOzNIb2ILCkXhAd4FJG AJ2xDx8hcFH1mt0G/FX0Kw4zd8NLQsLxdxP8c4CU6x+7Nz/OAipmsHMdMqUybDKw juDEI/9bfU1lcKwrmz3O2+BtjjKAvpafkmO8l7tdufThcV4q5O8DIrGKZTqPwJNl 1IXNDw9bg1kWRxYtnCQ6yICmJhSFm/Y3m6xv+cXDBlHz4n/FsRC6UfTd -----END CERTIFICATE----- 2 s:C = US, O = Google Trust Services LLC, CN = GTS Root R1 i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIQd70NbNs2+RrqIQ/E8FjTDTANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIwMDYx OTAwMDA0MloXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFIx MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthECix7joXebO9y/lD63 ladAPKH9gvl9MgaCcfb2jH/76Nu8ai6Xl6OMS/kr9rH5zoQdsfnFl97vufKj6bwS iV6nqlKr+CMny6SxnGPb15l+8Ape62im9MZaRw1NEDPjTrETo8gYbEvs/AmQ351k KSUjB6G00j0uYODP0gmHu81I8E3CwnqIiru6z1kZ1q+PsAewnjHxgsHA3y6mbWwZ DrXYfiYaRQM9sHmklCitD38m5agI/pboPGiUU+6DOogrFZYJsuB6jC511pzrp1Zk j5ZPaK49l8KEj8C8QMALXL32h7M1bKwYUH+E4EzNktMg6TO8UpmvMrUpsyUqtEj5 cuHKZPfmghCN6J3Cioj6OGaK/GP5Afl4/Xtcd/p2h/rs37EOeZVXtL0m79YB0esW CruOC7XFxYpVq9Os6pFLKcwZpDIlTirxZUTQAs6qzkm06p98g7BAe+dDq6dso499 iYH6TKX/1Y7DzkvgtdizjkXPdsDtQCv9Uw+wp9U7DbGKogPeMa3Md+pvez7W35Ei Eua++tgy/BBjFFFy3l3WFpO9KWgz7zpm7AeKJt8T11dleCfeXkkUAKIAf5qoIbap sZWwpbkNFhHax2xIPEDgfg1azVY80ZcFuctL7TlLnMQ/0lUTbiSw1nH69MG6zO0b 9f6BQdgAmD06yK56mDcYBZUCAwEAAaOCATgwggE0MA4GA1UdDwEB/wQEAwIBhjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrysmcRorSCeFL1JmLO/wiRNxPjAf BgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzBgBggrBgEFBQcBAQRUMFIw JQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjEwKQYIKwYBBQUH MAKGHWh0dHA6Ly9wa2kuZ29vZy9nc3IxL2dzcjEuY3J0MDIGA1UdHwQrMCkwJ6Al oCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMS9nc3IxLmNybDA7BgNVHSAENDAy MAgGBmeBDAECATAIBgZngQwBAgIwDQYLKwYBBAHWeQIFAwIwDQYLKwYBBAHWeQIF AwMwDQYJKoZIhvcNAQELBQADggEBADSkHrEoo9C0dhemMXoh6dFSPsjbdBZBiLg9 NR3t5P+T4Vxfq7vqfM/b5A3Ri1fyJm9bvhdGaJQ3b2t6yMAYN/olUazsaL+yyEn9 WprKASOshIArAoyZl+tJaox118fessmXn1hIVw41oeQa1v1vg4Fv74zPl6/AhSrw 9U5pCZEt4Wi4wStz6dTZ/CLANx8LZh1J7QJVj2fhMtfTJr9w4z30Z209fOU0iOMy +qduBmpvvYuR7hZL6Dupszfnw0Skfths18dG9ZKb59UhvmaSGZRVbNQpsg3BZlvi d0lIKO2d1xozclOzgjXPYovJJIultzkMu34qQb9Sz/yilrbCgj8= -----END CERTIFICATE----- --- Server certificate subject=CN = *.google.com issuer=C = US, O = Google Trust Services LLC, CN = GTS CA 1C3 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: ECDSA Server Temp Key: X25519, 253 bits --- SSL handshake has read 6679 bytes and written 392 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 256 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- 0 --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384 Session-ID: 709DB91BEEF2889ECEAD040C57CBE15EA4374C883FB5BEDEEB2A1BEB3CDEC4FB Session-ID-ctx: Resumption PSK: 85E0CBEE20B17D72F0F20C88E69713BE9ED66EE00D40651D6A90FD8DF3595669DC1B0690673A39B3907E843B480AB6BD PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 172800 (seconds) TLS session ticket: 0000 - 01 28 ff 4c 30 36 ab 7d-4c 95 2e 03 ef 70 d0 92 .(.L06.}L....p.. 0010 - 44 05 83 80 d8 31 e6 4e-be a3 69 58 e7 8b 84 93 D....1.N..iX.... 0020 - 87 35 ae 51 fe b7 02 2a-4a e5 b1 1b 0c c8 db 3e .5.Q...*J......> 0030 - 3c af 66 03 01 0d f2 54-ac e4 bc 25 09 e3 d3 52 <.f....T...%...R 0040 - 72 9a 60 5c a8 8f e6 64-9b 89 cd f4 7c 4c 3c 45 r.`\...d....|L<E 0050 - 2d 35 dd 22 1f ff 9e 17-e4 5c f7 83 29 4c 25 87 -5.".....\..)L%. 0060 - 56 3b 64 d8 f0 8d 9d c7-b9 36 7d e7 6d d3 a3 e0 V;d......6}.m... 0070 - 47 94 34 c7 5b 48 cb 0a-0f 2d af c7 2d 73 1c 7b G.4.[H...-..-s.{ 0080 - 04 f1 6e f9 27 4e e5 d4-4f 3b b8 51 19 be 13 4f ..n.'N..O;.Q...O 0090 - 80 5b 38 d4 11 7e f3 43-f0 4e 7e 3a c1 da 12 b4 .[8..~.C.N~:.... 00a0 - d9 6e 93 a0 81 7c 82 e6-1b 23 ff 4d eb dd a6 f4 .n...|...#.M.... 00b0 - f7 d3 42 2d b0 df a6 11-71 82 46 33 0f bb 31 a9 ..B-....q.F3..1. 00c0 - 97 d3 82 6f ae 0d 62 38-46 ef e8 89 b0 38 84 89 ...o..b8F....8.. 00d0 - 57 40 2a 3c c5 6c 62 fc-0b 2f 79 fb 4a bb 19 49 W@*<.lb../y.J..I 00e0 - 55 09 c5 45 87 6c b2 33-69 9c 62 e1 92 83 b9 ea U..E.l.3i.b..... 00f0 - 51 fd Q. Start Time: 1655940738 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no Max Early Data: 14336 --- read R BLOCK --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384 Session-ID: CEF3C48C29249E010163B5140510B62C2FDB8BFDC43E87614AF7BF20F2EAE9F5 Session-ID-ctx: Resumption PSK: 3EF7661E661D0E1F50CF03AAA82107F74091304FAB36DB28D519205F0B66621B5C95B7009A12641FB88E103F05E6E60C PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 172800 (seconds) TLS session ticket: 0000 - 01 28 ff 4c 30 36 ab 7d-4c 95 2e 03 ef 70 d0 92 .(.L06.}L....p.. 0010 - d6 1f 3f c3 0f bc 9f 89-aa d5 2d 28 97 a8 70 f3 ..?.......-(..p. 0020 - bb bc ed af 17 c9 ea 39-a7 01 5d da e4 1e e2 68 .......9..]....h 0030 - dd 9d 69 33 c1 d0 63 a7-57 a0 59 81 99 9b d2 66 ..i3..c.W.Y....f 0040 - cf 72 8c 7c 24 5f d0 6a-6f b2 95 34 ad a5 5c 66 .r.|$_.jo..4..\f 0050 - c6 60 34 64 6e 42 0a 9e-29 ca 92 b5 e2 3f bb 01 .`4dnB..)....?.. 0060 - 35 63 08 ab 10 c3 62 02-95 f7 ce c3 00 ff ae bf 5c....b......... 0070 - d8 12 66 8a 2e 4a c7 c0-a8 8b b2 05 1e fe 4f e3 ..f..J........O. 0080 - 4d 41 e5 b3 8c 6f 83 be-bd 23 6e 91 d0 0e 1e 8f MA...o...#n..... 0090 - b6 aa 23 e5 2a eb 3e 4a-1f ac 42 60 d2 4b 4a b3 ..#.*.>J..B`.KJ. 00a0 - 06 df f1 4f b1 40 5c 92-f3 3d f5 1c 43 a0 12 54 ...O.@\..=..C..T 00b0 - ed 5a 5d 48 d3 e6 cb 6c-f8 72 59 73 b6 96 10 5b .Z]H...l.rYs...[ 00c0 - ef 63 7c e1 68 af 18 e9-28 85 d9 27 13 df 3f da .c|.h...(..'..?. 00d0 - 3f a7 d6 ee d5 2a 2e b6-75 f3 f8 77 c8 0d 7c 6e ?....*..u..w..|n 00e0 - 63 e6 12 23 aa e6 ff c7-41 e7 95 e0 b3 28 b3 0b c..#....A....(.. 00f0 - d2 ce .. Start Time: 1655940738 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no Max Early Data: 14336 --- read R BLOCK HTTP/1.0 400 Bad Request Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1555 Date: Wed, 22 Jun 2022 23:32:18 GMT <!DOCTYPE html> <html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}* > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Google></span></a> <p><b>400.</b> <ins>That’s an error.</ins> <p>Your client has issued a malformed or illegal request. <ins>That’s all we know.</ins> read:errno=0