X-Debbugs-Cc: Andre Heider <[email protected]>, [email protected]
On 2021-10-08 Andre Heider <[email protected]> wrote: > Source: gnutls28 > Version: 3.7.2-2 > Apps using gnutls fail to connect to servers using a Let's Encrypt > certificate which are cross-signed by the now expired DST Root CA X3, see > [0]. > Examples: > $ lftp https://shop.bbc.com > cd: Fatal error: Certificate verification: Not trusted > (93:3C:6D:DE:E9:5C:9C:41:A4:0F:9F:50:49:3D:82:BE:03:AD:87:BF) [...] > [0] https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ Hello, given that gnutls-cli --port https shop.bbc.com works I suspect that it is not necessarily a GnuTLS problem. cu Andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure'
