Hi Charles,many thanks (and to Sergio) for reporting this and for providing such a deep insight into the issue.
I have added a patch to stenokeys.sh (the script that creates the CA, certs, etc.) so it sets sensible subjectAltNames [1].
Just uploaded a new version containing this patch. Let's see if that fixes the problem with the new curl version.
Cheers Sascha[1] https://salsa.debian.org/go-team/packages/stenographer/-/blob/master/debian/patches/0006-Enable-Subject-Alt-Name.patch?ref_type=heads
OpenPGP_signature.asc
Description: OpenPGP digital signature
