[atlas] TLS error when the certificate is expired?

On 2018/04/15 15:33 , Stephane Bortzmeyer wrote:
> I'm reasonably certain that it has been possible to use 'sslcert'
> measurements even when the certificate is expired.
> 
> Today, I try to use 'sslcert' with trigger-happy.eu and it fails:
> 
>     "alert": {
>       "description": 40,
>       "level": 2
>     },
> 
> And no certificate in the JSON output (this is measurement #12166428)
> 
> 40 is the very general "handshake failure" of
> TLS. <https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-6>
> 
> Was there a change in Atlas recently? 

Hi Stephane,

What is typically the case is that the server side has all kinds of
restrictions on the ciphers that it is willing to accept.

I recently made some changes to support a server where the sslcert
measurement would also fail. With these changes 'trigger-happy.eu' is
happy as well.

At moment I have no clear idea when the next firmware will be released.
It may take a few months.

Philip