Certificat problem with github.com on app update

Trying to upgrade apps from GUI or occ fail with

“CustomMessage”: “cURL error 60: SSL: no alternative certificate subject name matches target hostname ‘github.com’ (see libcurl - Error Codes ) for https://github.com/nextcloud-releases/notes/releases/download/v5.0.0/notes-v5.0.0.tar.gz”

“CustomMessage”: “cURL error 60: SSL: no alternative certificate subject name matches target hostname ‘github.com’ (see libcurl - Error Codes ) for https://github.com/nextcloud-releases/contacts/releases/download/v8.4.4/contacts-v8.4.4.tar.gz”

Any clue?

What operating system and version are you using? I’ve seen something similar (but not 1:1 the same error) when the root CA used by GitHub were missing from the system because everything was too old. Another idea: MITM for network security on a corporate network.

What will be shown when you execute the following?

curl -Iv https://github.com/nextcloud-releases/notes/releases/download/v5.0.0/notes-v5.0.0.tar.gz

And please edit your post to use the support template.

Debian 13, original message adapted.

Problem found: github.com doesn’t have ipv6(!), it was our tayga who did nat64 and used our certificate :frowning:

Possibility to force update in ipv4?

With curl I could get it but not with occ …

many possibilities:

  • if there is no dns answer for ipv6 the system automatically uses ipv4..
  • and if some system performs nat64 it should not simply use a random TLS cert but pass the original one (TLS/SSL inspection is evil)
  • or you should make your Nextcloud OS trust your MITM certificate..