opendns something wrong #9

New Issue

saavagebueno · 2025-11-20T04:18:40-05:00

saavagebueno commented

2025-11-20 04:18:40 -05:00

Originally created by @cnjack on GitHub (Aug 20, 2019).

~ curl https://diagnostic.opendns.com/myip
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

change https to http is ok

~ curl http://diagnostic.opendns.com/myip
xxx.xxx.xxx

Originally created by @cnjack on GitHub (Aug 20, 2019). ``` ~ curl https://diagnostic.opendns.com/myip curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: https://curl.haxx.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. ``` change https to http is ok ``` ~ curl http://diagnostic.opendns.com/myip xxx.xxx.xxx ```

saavagebueno closed this issue

2025-11-20 04:18:40 -05:00

saavagebueno commented

2025-11-20 04:18:41 -05:00

@qdm12 commented on GitHub (Aug 21, 2019):

Where do you use curl for opendns? Does it give the same error with Go? If so, it can be an issue with expired ca-certificates I think.

@qdm12 commented on GitHub (Aug 21, 2019): Where do you use `curl` for opendns? Does it give the same error with Go? If so, it can be an issue with expired ca-certificates I think.

saavagebueno commented

2025-11-20 04:18:41 -05:00

@cnjack commented on GitHub (Aug 21, 2019):

yes, got the same err from go

docker logs ddns-updater

will get the ssl certificate error

@cnjack commented on GitHub (Aug 21, 2019): yes, got the same err from go ``` docker logs ddns-updater ``` will get the ssl certificate error

saavagebueno commented

2025-11-20 04:18:41 -05:00

@qdm12 commented on GitHub (Aug 22, 2019):

Yes indeed, thanks for letting me know. It seems any wget gives an SSL error although i. e. Chromium loads the page just fine. I'm still investigating. I will however remove the openDns option because using http or unverified https allows a man in the middle attack and fiddling with domain names and their IPs is quite dangerous.

@qdm12 commented on GitHub (Aug 22, 2019): Yes indeed, thanks for letting me know. It seems any `wget` gives an SSL error although i. e. Chromium loads the page just fine. I'm still investigating. I will however remove the openDns option because using http or unverified https allows a man in the middle attack and fiddling with domain names and their IPs is quite dangerous.

saavagebueno commented

2025-11-20 04:18:41 -05:00

@cnjack commented on GitHub (Aug 23, 2019):

09-18-2019 ssl will be expired,I think it will be ok

@cnjack commented on GitHub (Aug 23, 2019): 09-18-2019 ssl will be expired,I think it will be ok

saavagebueno commented

2025-11-20 04:18:41 -05:00

@qdm12 commented on GitHub (Aug 23, 2019):

Ok hopefully they change their certificate provider. I will disable it for now. It seems related to the "Digicert SHA2 Secure Server CA" which is no longer trusted.

@qdm12 commented on GitHub (Aug 23, 2019): Ok hopefully they change their certificate provider. I will disable it for now. It seems related to the "Digicert SHA2 Secure Server CA" which is no longer trusted.

saavagebueno referenced this issue

2025-11-20 04:25:17 -05:00

[PR #9] [MERGED] Noip #570

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/ddns-updater#9