tlmgr update fails on macOS 10.13.6

[Mojca Miklavec]

Hi,

On Tue, 12 Oct 2021 at 17:23, Andreas Scherer wrote:
> Am 06.10.21 um 09:30 schrieb Andreas Scherer:
> > Something bad has happened a few days ago:
>
> Thanks to Mojca's hint
> (https://trac.macports.org/wiki/ProblemHotlist#letsencrypt), I found a
> solution today:
...
> Trying to curl the file directly results in a certificate issue:
> Scherer-Mac-mini-neu:~ scherer$ curl
> https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb
> curl: (60) SSL certificate problem: certificate has expired
> More details here: https://curl.haxx.se/docs/sslcerts.html

To which server does https://mirror.ctan.org redirect you if you open
it in your browser?


I don't know how many mirrors rely on Let's encrypt certificates, but
I guess there is no simple way to blacklist some mirrors just for
(older) macOS versions?
(CTAN could at least ask the maintainers of these mirrors to remove
outdated certificates, so that it would at least work correctly on the
still-supported macOS versions like 10.14.)

Mojca