kphrx on Nostr: ちなみにopensslでtls v1.3 ...
ちなみにopensslでtls v1.3 handshakeさせたら普通にZeroSSLの証明書返ってきたのでcURLが悪いだけっぽそう
```
$ openssl s_client -showcerts -verify 5 -connect yuuhimawari.infinityfreeapp.com:443 -tls1_3 < /dev/null
verify depth is 5
CONNECTED(00000005)
depth=0 CN = yuuhimawari.infinityfreeapp.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = yuuhimawari.infinityfreeapp.com
verify error:num=21:unable to verify the first certificate
verify return:1
depth=0 CN = yuuhimawari.infinityfreeapp.com
verify return:1
---
Certificate chain
0 s:CN = yuuhimawari.infinityfreeapp.com
i:C = AT, O = ZeroSSL, CN = ZeroSSL RSA Domain Secure Site CA
a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA384
v:NotBefore: Feb 21 00:00:00 2023 GMT; NotAfter: May 22 23:59:59 2023 GMT
```
Published at
2023-02-21 06:43:37Event JSON
{
"id": "0101da459c00029f410b48418162aa522658fceaa18cfbbfc79f3868132644df",
"pubkey": "04317e40be42f3371053e47d63186c1554a362ddafb816ed5df4bee1aad3ed54",
"created_at": 1676961817,
"kind": 1,
"tags": [
[
"e",
"0dc545c8b1c46ad862abd016f1c9f46b121c2815cf667a41a486ea9a1e135cae",
"",
"reply"
]
],
"content": "ちなみにopensslでtls v1.3 handshakeさせたら普通にZeroSSLの証明書返ってきたのでcURLが悪いだけっぽそう\n\n```\n$ openssl s_client -showcerts -verify 5 -connect yuuhimawari.infinityfreeapp.com:443 -tls1_3 \u003c /dev/null\n\nverify depth is 5\nCONNECTED(00000005)\ndepth=0 CN = yuuhimawari.infinityfreeapp.com\nverify error:num=20:unable to get local issuer certificate\nverify return:1\ndepth=0 CN = yuuhimawari.infinityfreeapp.com\nverify error:num=21:unable to verify the first certificate\nverify return:1\ndepth=0 CN = yuuhimawari.infinityfreeapp.com\nverify return:1\n---\nCertificate chain\n 0 s:CN = yuuhimawari.infinityfreeapp.com\n i:C = AT, O = ZeroSSL, CN = ZeroSSL RSA Domain Secure Site CA\n a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA384\n v:NotBefore: Feb 21 00:00:00 2023 GMT; NotAfter: May 22 23:59:59 2023 GMT\n```",
"sig": "0b4496fc363c75ea042a51466d711f73421144e5a0068d9d1aea384ea067f5a4691f03ace047c092147665d315ba7e14f5bc2f9cdabe294a9cdc269db994aa3e"
}