Quiz: TLS

Question 8 of 10

Read the output

There is no `server` block on 443 for docs.lab.test yet, while app.lab.test has one — serving only its site certificate. Why does curl complain about the issuer rather than `Couldn't connect to server`?

$ curl https://docs.lab.test/
curl: (60) SSL certificate problem: unable to get local issuer certificate

The app server block answered on 443 — the default server for that port — and sent its certificate without the intermediate.
curl fell back from HTTPS to HTTP and got the docs server block's answer on 80.
nginx issued a temporary certificate for docs.lab.test on its own.
docs.crt sits in /etc/nginx/tls, and nginx served it.

Back A–D or ↵ Sign in to answer