<div dir="ltr">Awesome, thanks!!!<div><br></div><div>-Grant</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Dec 7, 2016 at 7:55 PM, Guido van Rossum <span dir="ltr"><<a href="mailto:gvanrossum@gmail.com" target="_blank">gvanrossum@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto">Should be over by now...<div dir="auto"><br></div><div dir="auto"><a href="https://status.fastly.com/incidents/3nvqmv1xdrmx" target="_blank">https://status.fastly.com/<wbr>incidents/3nvqmv1xdrmx</a><br><br><div data-smartmail="gmail_signature" dir="auto">--Guido (mobile)</div></div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On Dec 7, 2016 7:29 PM, "Grant Ridder" <<a href="mailto:shortdudey123@gmail.com" target="_blank">shortdudey123@gmail.com</a>> wrote:<br type="attribution"></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr">Not sure where to send this, so I thought i would start here.<div><br></div><div>Cert shows expired when accessing <a href="http://pypi.python.org" target="_blank">pypi.python.org</a> via curl, but chrome appears fine</div><div><br></div><div>-Grant</div><div><br></div><div><div>$ echo quit | openssl s_client -connect <a href="http://pypi.python.org:443" target="_blank">pypi.python.org:443</a> | openssl x509 -text | grep Validity -A 2</div><div>depth=1 /C=US/O=DigiCert Inc/OU=<a href="http://www.digicert.com/CN=DigiCert" target="_blank">www.digicert.com/CN=Dig<wbr>iCert</a> SHA2 Extended Validation Server CA</div><div>verify error:num=20:unable to get local issuer certificate</div><div>verify return:0</div><div>DONE</div><div> Validity</div><div> Not Before: Sep 5 00:00:00 2014 GMT</div><div> Not After : Sep 9 12:00:00 2016 GMT</div><div>$ dig <a href="http://pypi.python.org" target="_blank">pypi.python.org</a></div><div><br></div><div>; <<>> DiG 9.8.3-P1 <<>> <a href="http://pypi.python.org" target="_blank">pypi.python.org</a></div><div>;; global options: +cmd</div><div>;; Got answer:</div><div>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53800</div><div>;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0</div><div><br></div><div>;; QUESTION SECTION:</div><div>;<a href="http://pypi.python.org" target="_blank">pypi.python.org</a>. IN A</div><div><br></div><div>;; ANSWER SECTION:</div><div><a href="http://pypi.python.org" target="_blank">pypi.python.org</a>. 71355 IN CNAME <a href="http://prod.python.map.fastly.net" target="_blank">prod.python.map.fastly.net</a>.</div><div><a href="http://prod.python.map.fastly.net" target="_blank">prod.python.map.fastly.net</a>. 17 IN A 151.101.40.223</div><div><br></div><div>;; Query time: 82 msec</div><div>;; SERVER: 208.67.222.222#53(208.67.222.2<wbr>22)</div><div>;; WHEN: Wed Dec 7 19:09:43 2016</div><div>;; MSG SIZE rcvd: 89</div><div><br></div><div>$ curl -v <a href="https://pypi.python.org" target="_blank">https://pypi.python.org</a></div><div>* Rebuilt URL to: <a href="https://pypi.python.org/" target="_blank">https://pypi.python.org/</a></div><div>* Trying 151.101.40.223...</div><div>* Connected to <a href="http://pypi.python.org" target="_blank">pypi.python.org</a> (151.101.40.223) port 443 (#0)</div><div>* SSL certificate problem: Invalid certificate chain</div><div>* Closing connection 0</div><div>curl: (60) SSL certificate problem: Invalid certificate chain</div><div>More details here: <a href="http://curl.haxx.se/docs/sslcerts.html" target="_blank">http://curl.haxx.se/docs/sslce<wbr>rts.html</a></div><div><br></div><div>curl performs SSL certificate verification by default, using a "bundle"</div><div> of Certificate Authority (CA) public keys (CA certs). If the default</div><div> bundle file isn't adequate, you can specify an alternate file</div><div> using the --cacert option.</div><div>If this HTTPS server uses a certificate signed by a CA represented in</div><div> the bundle, the certificate verification probably failed due to a</div><div> problem with the certificate (it might be expired, or the name might</div><div> not match the domain name in the URL).</div><div>If you'd like to turn off curl's verification of the certificate, use</div><div> the -k (or --insecure) option.</div><div>$ </div></div></div>
<br></div></div>______________________________<wbr>_________________<br>
Baypiggies mailing list<br>
<a href="mailto:Baypiggies@python.org" target="_blank">Baypiggies@python.org</a><br>
To change your subscription options or unsubscribe:<br>
<a href="https://mail.python.org/mailman/listinfo/baypiggies" rel="noreferrer" target="_blank">https://mail.python.org/mailma<wbr>n/listinfo/baypiggies</a><br></blockquote></div></div>
</blockquote></div><br></div>