[CONTINUED] List download failed: no cached list available

[tobbi]

Please refer to this earlier topic for information:

List download failed: no cached list available

Please follow the below template, it will help us to help you! I'm trying to update pihole's blocklist. Yet I'm getting this error: [i] Target: https://malware-filter.gitlab.io/malware-filter/phishing-filter-hosts.txt [✗] Status: Connection Refused [✗] List download failed: no cached list available Expected Behaviour: [Replace this text with what you think should be happening. Please include as much detail as possible including, but not limited to: -operating system Raspbian Linux raspberry…

I was getting the error List download failed: no cached list available when trying to download updated block lists in gravity.

I'm still getting this error, but this time I have dug a little deeper:
I found another issue on the curl repository about the error that I was getting:
curl: (18) HTTP/2 stream 1 was not closed cleanly before end of the underlying stream

I then looked closer at the output:

* Send failure: Broken pipe
* OpenSSL SSL_write: Broken pipe, errno 32

which lead me to the topic of SSL certificates. I found this curl - SSL CA Certificates for adding SSL certificates to curl. I extracted the .pem file from gitlab.io using the command listed there:

curl -w %{certs} https://example.com > cacert.pem

And then re-attempted the download using

$ curl https://zerodot1.gitlab.io/CoinBlockerLists/hosts_browser --cacert ./gitlab.pem 

Which worked properly.

Now, for some reason, copying that pem certificate to /usr/local/share/ca-certificates/ and then running sudo update-ca-certificates doesn't appear to be changing anything or "installing" the certificate, so running the curl command above without the --cacert parameter still yields the error.

I'm kind of at a loss why my old raspberry pi won't honor the certificate authority it has saved, but at least I got the bottom of the issue.