384.17 curl: (60) SSL certificate problem: certificate has expired

[wbartels]

Since today I get the "curl: (60) SSL certificate problem: certificate has expired" error on one site:

# curl -v https://www.myip.ms/files/blacklist/csf/latest_blacklist.txt
*   Trying 2607:5300:60:8137:a149::1:443...
* Immediate connect fail for 2607:5300:60:8137:a149::1: Network is unreachable
*   Trying 142.4.223.149:443...
* Connected to www.myip.ms (142.4.223.149) port 443 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: none
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, certificate expired (557):
* SSL certificate problem: certificate has expired
* Closing connection 0
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Update:
The same request works perfectly on Ubuntu 18.04
And failed on macOS 10.15.4

Viewing in browser works perfectly with:
Safari Version 13.1 (15609.1.20.111.8)
Firefox 76.0.1 (64-bit)

 

[dave14305]

Also discussed today here: [Fork] Asuswrt-Merlin 374.43 LTS releases (V44E5)

 

[wbartels]

Thanks!

 

[RMerlin]

For reference:

https://freedns.afraid.org/news/