{"action":"created","issue":{"url":"https://api.github.com/repos/openssl/openssl/issues/5890","repository_url":"https://api.github.com/repos/openssl/openssl","labels_url":"https://api.github.com/repos/openssl/openssl/issues/5890/labels{/name}","comments_url":"https://api.github.com/repos/openssl/openssl/issues/5890/comments","events_url":"https://api.github.com/repos/openssl/openssl/issues/5890/events","html_url":"https://github.com/openssl/openssl/issues/5890","id":311803871,"number":5890,"title":"GlobalSign Certificates failing","user":{"login":"jjbeber","id":29125605,"avatar_url":"https://avatars0.githubusercontent.com/u/29125605?v=4","gravatar_id":"","url":"https://api.github.com/users/jjbeber","html_url":"https://github.com/jjbeber","followers_url":"https://api.github.com/users/jjbeber/followers","following_url":"https://api.github.com/users/jjbeber/following{/other_user}","gists_url":"https://api.github.com/users/jjbeber/gists{/gist_id}","starred_url":"https://api.github.com/users/jjbeber/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jjbeber/subscriptions","organizations_url":"https://api.github.com/users/jjbeber/orgs","repos_url":"https://api.github.com/users/jjbeber/repos","events_url":"https://api.github.com/users/jjbeber/events{/privacy}","received_events_url":"https://api.github.com/users/jjbeber/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-04-05T23:35:25Z","updated_at":"2018-04-06T12:37:19Z","closed_at":"2018-04-06T01:09:49Z","author_association":"NONE","body":"I'm facing this issue with GlobalSign certificates, they work well with Chrome and Firefox, but with tools that use OpenSSL (curl, python requests, urllib3) they fail.\r\n\r\nI'm not the maintainer of the sites, I'm just facing some problems with some APIs of the first domain. I don't know what to do, Can someone give me some help to understand what is going on?\r\n\r\n# The first domain\r\n\r\n## Curl\r\n```\r\n❯ curl -vvI https://mqlinuxext.serasa.com.br/         \r\n*   Trying 200.245.207.210...\r\n* TCP_NODELAY set\r\n* Connected to mqlinuxext.serasa.com.br (200.245.207.210) port 443 (#0)\r\n* ALPN, offering http/1.1\r\n* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH\r\n* successfully set certificate verify locations:\r\n*   CAfile: /etc/ssl/certs/ca-certificates.crt\r\n  CApath: /etc/ssl/certs\r\n* TLSv1.2 (OUT), TLS header, Certificate Status (22):\r\n* TLSv1.2 (OUT), TLS handshake, Client hello (1):\r\n* TLSv1.2 (IN), TLS handshake, Server hello (2):\r\n* TLSv1.2 (IN), TLS handshake, Certificate (11):\r\n* TLSv1.2 (OUT), TLS alert, Server hello (2):\r\n* SSL certificate problem: unable to get local issuer certificate\r\n* Closing connection 0\r\ncurl: (60) SSL certificate problem: unable to get local issuer certificate\r\nMore details here: https://curl.haxx.se/docs/sslcerts.html\r\n```\r\n## OpenSSL\r\n`❯ openssl s_client -connect mqlinuxext.serasa.com.br:443 -state -debug`: [gist link](https://gist.github.com/jjbeber/8a503cd5f6b5baf60c8997dd272b91ea)\r\n\r\n## Firefox\r\n![serasa_firefox](https://user-images.githubusercontent.com/29125605/38396590-37f12674-390f-11e8-890f-239d85c0ed21.png)\r\n![serasa_firefox_1](https://user-images.githubusercontent.com/29125605/38396596-41c31892-390f-11e8-883e-ca20e7bc6168.png)\r\n\r\n## Chrome\r\n![serasa_chrome](https://user-images.githubusercontent.com/29125605/38396593-3c3d7390-390f-11e8-8b84-730e4eb3a795.png)\r\n\r\n# Second domain\r\n\r\n## Curl\r\n```\r\n*   Trying 200.193.75.39...\r\n* TCP_NODELAY set\r\n* Connected to portal1.tupy.com.br (200.193.75.39) port 443 (#0)\r\n* ALPN, offering http/1.1\r\n* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH\r\n* successfully set certificate verify locations:\r\n*   CAfile: /etc/ssl/certs/ca-certificates.crt\r\n  CApath: /etc/ssl/certs\r\n* TLSv1.2 (OUT), TLS header, Certificate Status (22):\r\n* TLSv1.2 (OUT), TLS handshake, Client hello (1):\r\n* TLSv1.2 (IN), TLS handshake, Server hello (2):\r\n* TLSv1.2 (IN), TLS handshake, Certificate (11):\r\n* TLSv1.2 (OUT), TLS alert, Server hello (2):\r\n* SSL certificate problem: unable to get local issuer certificate\r\n* Closing connection 0\r\ncurl: (60) SSL certificate problem: unable to get local issuer certificate\r\nMore details here: https://curl.haxx.se/docs/sslcerts.html\r\n```\r\n\r\n## OpenSSL\r\n`openssl s_client -connect portal1.tupy.com.br:443 -state -debug`:  [gist link](https://gist.github.com/jjbeber/05b8b5216761608b3ee6bc9ad8ce17ad)\r\n\r\n## Firefox\r\n![tupy_firefox](https://user-images.githubusercontent.com/29125605/38396703-e0035670-390f-11e8-90dc-9cbccd33d589.png)\r\n![tupy_firefox_2](https://user-images.githubusercontent.com/29125605/38396704-e1f057f8-390f-11e8-8fc4-1d08abf2176d.png)\r\n\r\n## Chrome\r\n![tupy_chrome](https://user-images.githubusercontent.com/29125605/38396706-e40c204e-390f-11e8-9577-bcb7be08b4ff.png)"},"comment":{"url":"https://api.github.com/repos/openssl/openssl/issues/comments/379240220","html_url":"https://github.com/openssl/openssl/issues/5890#issuecomment-379240220","issue_url":"https://api.github.com/repos/openssl/openssl/issues/5890","id":379240220,"user":{"login":"richsalz","id":7332500,"avatar_url":"https://avatars0.githubusercontent.com/u/7332500?v=4","gravatar_id":"","url":"https://api.github.com/users/richsalz","html_url":"https://github.com/richsalz","followers_url":"https://api.github.com/users/richsalz/followers","following_url":"https://api.github.com/users/richsalz/following{/other_user}","gists_url":"https://api.github.com/users/richsalz/gists{/gist_id}","starred_url":"https://api.github.com/users/richsalz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/richsalz/subscriptions","organizations_url":"https://api.github.com/users/richsalz/orgs","repos_url":"https://api.github.com/users/richsalz/repos","events_url":"https://api.github.com/users/richsalz/events{/privacy}","received_events_url":"https://api.github.com/users/richsalz/received_events","type":"User","site_admin":false},"created_at":"2018-04-06T12:37:19Z","updated_at":"2018-04-06T12:37:19Z","author_association":"CONTRIBUTOR","body":"I was just asking questions to help figure out what you had already done, that's all.\r\n"}}
{"actor":{"display_login":"richsalz"}}