如何从 MacOS/Safari 排除 duckDNS 故障

根本原因

downwind.duckdns.org用于提供HTTPS 连接的证书已过期。

证据

卷曲：

$ curl -vvv https://downwind.duckdns.org
^[      *   Trying 104.6.85.206:443...
* Connected to downwind.duckdns.org (104.6.85.206) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* TLSv1.0 (OUT), TLS header, Certificate Status (22):
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS header, Certificate Status (22):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS header, Finished (20):
* TLSv1.2 (IN), TLS header, Supplemental data (23):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.2 (IN), TLS header, Supplemental data (23):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS header, Unknown (21):
* TLSv1.3 (OUT), TLS alert, certificate expired (557):
* SSL certificate problem: certificate has expired
* Closing connection 0
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.se/docs/sslcerts.html

OpenSSL：

$ openssl s_client -connect downwind.duckdns.org:443 -servername downwind.duckdns.org 2>/dev/null | openssl x509 -noout -dates

notBefore=Nov  6 00:09:24 2024 GMT
notAfter=Feb  4 00:09:23 2025 GMT

解决方案

更新证书。