Package: curl Version: 7.38.0-4+deb8u3 Severity: important Hello
I cannot connect to some sites using curl but using wget it works fine. $ curl -v https://identity.api.rackspacecloud.com/v2.0/ * Hostname was NOT found in DNS cache * Trying 72.3.138.129... * Connected to identity.api.rackspacecloud.com (72.3.138.129) port 443 (#0) * successfully set certificate verify locations: * CAfile: none CApath: /etc/ssl/certs * SSLv3, TLS handshake, Client hello (1): * SSLv3, TLS handshake, Server hello (2): * SSLv3, TLS handshake, CERT (11): * SSLv3, TLS alert, Server hello (2): * SSL certificate problem: unable to get local issuer certificate * Closing connection 0 curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: http://curl.haxx.se/docs/sslcerts.html $ wget https://identity.api.rackspacecloud.com/v2.0/ -O - >/dev/null --2016-02-08 06:52:21-- https://identity.api.rackspacecloud.com/v2.0/ Resolving identity.api.rackspacecloud.com (identity.api.rackspacecloud.com)... 72.3.138.129 Connecting to identity.api.rackspacecloud.com (identity.api.rackspacecloud.com)|72.3.138.129|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 642 [application/json] Saving to: ‘STDOUT’ - 100%[================================================================================>] 642 --.-KB/s in 0s 2016-02-08 06:52:23 (28.5 MB/s) - written to stdout [642/642] I have ca-certificates installed, this problem does not appear on sid machines. but I can reproduce on multiple jessie installs Passing -1 or --tlsv1.0 doesn't make it work. -- System Information: Debian Release: 8.3 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=C.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages curl depends on: ii libc6 2.19-18+deb8u2 ii libcurl3 7.38.0-4+deb8u3 ii zlib1g 1:1.2.8.dfsg-2+b1 curl recommends no packages. curl suggests no packages. -- no debconf information
