Subject: [Tools-implementation] On what we think we can move the service points for...

From: Robert Sparks <[email-masked]>
Date: Wed, 26 Aug 2020 09:08:46 -0500

I have an appliance (plex) running in a minimal install freebsd-11.3 iocage. In other words, I touched _very little_ after creating the cage - it's essentially a base install of an OS.

Last night, its normal health reporting email spit out this:
  
Certificate verification failed for /C=US/O=Cloudflare, Inc./CN=Cloudflare Inc ECC CA-3
34374374552:error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
fetch:https://www.ietf.org/timezones/data/leap-seconds.list: Authentication error

That's an anecdote for consideration when we start talking about changing the www.ietf.org URL space.

(The failure may have been transient, or it may be an issue with the fresh cage needing a better CA list, which it now has, but the failure isn't the important part of this message).

RjS