Windows 10: curl: 60 schannel: CertGetCertificateChain trust error CERT_TRUST_IS_UNTRUSTED_ROOT

I have created a self-signed CA certificate ca.cer and an HTTPS server certificate signed by it.I'm using this curl version on Windows 11:curl 8.8.0 Windows libcurl/8.8.0 Schannel zlib/1.3 WinIDN Release-Date: 2024-05-22 Protocols: dict file ftp ftps http https imap imaps ipfs ipns mqtt pop3 pop3s smb smbs smtp smtps telnet tftp Features: alt-svc AsynchDNS HSTS HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM SPNEGO SSL SSPI threadsafe Unicode UnixSocketsI run 3 commands, and I'm expecting only the first one to fail.First: this one fails because ca.cer is not known to th

:)

 

Vpn ( trusted Vpn)

Hi everyone.
I am not an expert about Vpn and that's why I would like to know if someone could list me a few trusted Vpns, I would really appreciate any suggestion/ advice.

Thanks.

 

Intermittent SEC_E_INVALID_TOKEN (0x80090308) when performing SSH requests

I'm currently working with a client (a government institution) to automate some data gathering, and I've written some python scripts to gather data from a REST API. The client is behind a corporate firewall, which traps malicious traffic (viruses, EXE-files etc.), and they have a self-signed root CA certificate MITM setup, which may (or may not) be relevant.

I can get my script to run, but every now and then any ssh request from Python or curl throws a SEC_E_INVALID_TOKEN (0x80090308) error. As this happens with curl I don't believe the core issue has to do with the way my Python script is hitting the REST API, so for the purpose of this question my focus is on getting this to work with curl. Here's an example of the output when running curl against postman-echo.com:

For some reason, opening/refreshing any HTTPS page in Chrome or Internet Explorer (for example Wikipedia, the free encyclopedia) 'fixes' the issue for a period of time (about 15-20 minutes), and the same request succeeds:

This is of course not very satisfactory, as I'm unable to automate the process (I have 'fixed' it by pausing on error, asking the user to refresh a webpage in a browser, but this is not sustainable in the long term).

I need to have some notion about what's going on to be able to escalate this further within the organisation, and at the moment I really have no idea, so any help would be appreciated.

I've found these these questions relating to the same error code, which have not been resolved, and thus aren't helping unfortunately.

Edit: Found this with exactly the same issue, but also no resolution.

 

Vpn ( trusted Vpn)

Tired of Germany blocking many youtube videos? *Big Grin