# TLS certificate errors — badssl.com provides endpoints with intentionally
# broken certificates. hxprobe uses the same stdlib ssl verification as
# latprobe and rejects them by default.
#
# Note: badssl.com may intermittently reset the connection instead of
# completing the TLS handshake. The error message will then read
# "[Errno 54] Connection reset by peer" rather than CERTIFICATE_VERIFY_FAILED,
# but hxprobe still correctly reports a tls/connect failure in either case.
#
# Requires internet access.
#
# Run: uv run python -m hxprobe -f configs/tls-errors.txt
# Expected exit code: 5

# Certificate has expired
https://expired.badssl.com/

# Certificate is self-signed (not trusted by the system CA store)
https://self-signed.badssl.com/

# Certificate chain is incomplete (intermediate CA missing)
https://incomplete-chain.badssl.com/
