<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Oct 13, 2021, at 00:29 , Mojca Miklavec <<a href="mailto:mojca.miklavec.lists@gmail.com" class="">mojca.miklavec.lists@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">I don't know how many mirrors rely on Let's encrypt certificates, but</span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">I guess there is no simple way to blacklist some mirrors just for</span><br style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 11px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">(older) macOS versions?</span></div></blockquote></div><br class=""><div class="">Since Safari works fine with mirrors using Let's Encrypt certs</div><div class="">on Mac OS 10.14, this is a really confusing problem to debug.</div><div class="">I just remembered this thread after coming to the same</div><div class="">realization on a couple of TeX Live Utility bug reports, and</div><div class="">thanks to Andreas and Mojca for figuring out the real cause.</div><div class=""><br class=""></div><div class="">For reference:</div><div class=""><a href="http://mirrors.ircam.fr" class="">mirrors.ircam.fr</a></div><div class=""><a href="http://ctan.math.ca" class="">ctan.math.ca</a></div><div class=""><br class=""></div><div class="">both use Let's Encrypt certs, and apparently need to fix the</div><div class="">certificate chain they're serving. What a mess.</div><div class=""><br class=""></div><div class="">thanks,</div><div class="">Adam</div><div class=""><br class=""></div></body></html>