Thank you. Results for
echo | openssl s_client -CApath /etc/ssl/certs/ -connect
static.licdn.com:443 | grep 'Verify return code':

www.linkedin.com:443 OK
static.licdn.com:443:  Verify return code: 20 (unable to get local
issuer certificate)!
That's parallel to what asyncio also says.

Interestingly Firefox (Iceweasel) does not complain when opening
https://static.licdn.com
with its usual "This Connection is Untrusted" page.
Is it a A MITM setup which is detected by openssl/asyncio but not Firefox?

Some other sites:
mail.google.com:443 OK for now. But was NOK for a while.
www.reddit.com:443 NOK. Firefox complains too.
Though it says Cert is valid for *.akamaihd.net ,
*.akamaihd-staging.net , a248.e.akamai.net.
Optimistic possibility may be a misconfigured CDN network + wave of
certificate renewals..

Imran

Reply via email to