From nobody Thu Jan 13 17:48:10 2022
X-Original-To: freebsd-security@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id F36A61955964
	for <freebsd-security@mlmmj.nyi.freebsd.org>; Thu, 13 Jan 2022 17:48:25 +0000 (UTC)
	(envelope-from martin@lispworks.com)
Received: from mail.lispworks.com (mail.lispworks.com [46.17.166.21])
	by mx1.freebsd.org (Postfix) with ESMTP id 4JZX3F00c9z51v8
	for <FreeBSD-security@FreeBSD.org>; Thu, 13 Jan 2022 17:48:24 +0000 (UTC)
	(envelope-from martin@lispworks.com)
Received: from higson.cam.lispworks.com (higson.cam.lispworks.com [192.168.1.7])
	by lwfs1-cam.cam.lispworks.com (8.16.1/8.16.1) with ESMTP id 20DHmBSq020461;
	Thu, 13 Jan 2022 17:48:11 GMT
	(envelope-from martin@lispworks.com)
Received: from higson.cam.lispworks.com (localhost.localdomain [127.0.0.1]) by higson.cam.lispworks.com (8.14.4) id 20DHmBbP006307; Thu, 13 Jan 2022 17:48:11 GMT
Received: (from martin@localhost)
	by higson.cam.lispworks.com (8.14.4/8.14.4/Submit) id 20DHmAES006303;
	Thu, 13 Jan 2022 17:48:10 GMT
Date: Thu, 13 Jan 2022 17:48:10 GMT
Message-Id: <202201131748.20DHmAES006303@higson.cam.lispworks.com>
From: Martin Simmons <martin@lispworks.com>
To: Axel Rau <Axel.Rau@Chaos1.DE>
CC: FreeBSD-security@FreeBSD.org
In-reply-to: <B65E8153-5E72-4167-9C8F-0FBB052DB95F@Chaos1.DE> (message from
	Axel Rau on Wed, 12 Jan 2022 13:29:48 +0100)
Subject: Re: Random failures: "unable to get local issuer certificate"
References: <A1C37E54-1FF3-4486-AD6C-470B5F858634@Chaos1.DE>
 <3a5cd966011999f62c7d66a263f12500@patpro.net> <B65E8153-5E72-4167-9C8F-0FBB052DB95F@Chaos1.DE>
List-Id: Security issues <freebsd-security.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-security
List-Help: <mailto:security+help@freebsd.org>
List-Post: <mailto:security@freebsd.org>
List-Subscribe: <mailto:security+subscribe@freebsd.org>
List-Unsubscribe: <mailto:security+unsubscribe@freebsd.org>
Sender: owner-freebsd-security@freebsd.org
X-BeenThere: freebsd-security@freebsd.org
MIME-version: 1.0
Content-type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Rspamd-Queue-Id: 4JZX3F00c9z51v8
X-Spamd-Bar: ++
Authentication-Results: mx1.freebsd.org;
	dkim=none;
	dmarc=none;
	spf=none (mx1.freebsd.org: domain of martin@lispworks.com has no SPF policy when checking 46.17.166.21) smtp.mailfrom=martin@lispworks.com
X-Spamd-Result: default: False [2.90 / 15.00];
	 ARC_NA(0.00)[];
	 NEURAL_HAM_MEDIUM(-0.02)[-0.020];
	 FREEFALL_USER(0.00)[martin];
	 FROM_HAS_DN(0.00)[];
	 TO_DN_SOME(0.00)[];
	 RWL_MAILSPIKE_GOOD(0.00)[46.17.166.21:from];
	 NEURAL_SPAM_SHORT(1.00)[1.000];
	 MIME_GOOD(-0.10)[text/plain];
	 DMARC_NA(0.00)[lispworks.com];
	 AUTH_NA(1.00)[];
	 RCVD_COUNT_THREE(0.00)[3];
	 TO_MATCH_ENVRCPT_SOME(0.00)[];
	 MID_RHS_MATCH_FROMTLD(0.00)[];
	 RCPT_COUNT_TWO(0.00)[2];
	 NEURAL_SPAM_LONG(0.92)[0.917];
	 MLMMJ_DEST(0.00)[FreeBSD-security];
	 R_SPF_NA(0.00)[no SPF record];
	 RCVD_NO_TLS_LAST(0.10)[];
	 FROM_EQ_ENVFROM(0.00)[];
	 R_DKIM_NA(0.00)[];
	 MIME_TRACE(0.00)[0:+];
	 ASN(0.00)[asn:51055, ipnet:46.17.160.0/21, country:GB]
X-ThisMailContainsUnwantedMimeParts: N

>>>>> On Wed, 12 Jan 2022 13:29:48 +0100, Axel Rau said:
> 
> 
> > Am 12.01.2022 um 12:05 schrieb patpro@patpro.net:
> > 
> > may be (I have not tested) the result is different depending on DNS reply.
> 
> 
> I don’t think so, as I have local resolvers which should have cached the AAAAs.

Since sh.rustup.rs has multiple adddresses, the order in the DNS reply can
change each time it is resolved (even from a cache), so might be using a
different adddress each time.

__Martin