$ curl https://f-droid.org/ -v --http1.1
* host f-droid.org:443 was resolved.
* ipv6: 2a00:c6c0:0:155:1::1, 2a01:4f9:3b:546d::2
* ipv4: 37.218.243.72, 65.21.79.229
* trying [2a00:c6c0:0:155:1::1]:443...
* alpn: curl offers http/1.1
* tlsv1.3 (out), tls handshake, client hello (1):
* cafile: /data/data/com.termux/files/usr/etc/tls/cert.pem
* capath: /data/data/com.termux/files/usr/etc/tls/certs
* tlsv1.3 (in), tls handshake, server hello (2):
* tlsv1.3 (in), tls handshake, encrypted extensions (8):
* tlsv1.3 (in), tls handshake, certificate (11):
* tlsv1.3 (in), tls handshake, cert verify (15):
* tlsv1.3 (in), tls handshake, finished (20):
* tlsv1.3 (out), tls change cipher, change cipher spec (1):
* tlsv1.3 (out), tls handshake, finished (20):
* ssl connection using tlsv1.3 / tls_aes_256_gcm_sha384 / x25519 / rsassa-pss
* alpn: server accepted http/1.1
* server certificate:
* subject: cn=f-droid.org
* start date: feb 1 10:26:16 2025 gmt
* expire date: may 2 10:26:15 2025 gmt
* subjectaltname: host "f-droid.org" matched cert's "f-droid.org"
* issuer: c=us; o=let's encrypt; cn=r10
* ssl certificate verify ok.
* certificate level 0: public key type rsa (2048/112 bits/secbits), signed using sha256withrsaencryption
* certificate level 1: public key type rsa (2048/112 bits/secbits), signed using sha256withrsaencryption
* certificate level 2: public key type rsa (4096/152 bits/secbits), signed using sha256withrsaencryption
* connected to f-droid.org (2a00:c6c0:0:155:1::1) port 443
* using http/1.x
> get / http/1.1
> host: f-droid.org
> user-agent: curl/8.12.0
> accept: */*
>
* request completely sent off
* tlsv1.3 (in), tls handshake, newsession ticket (4):
* tlsv1.3 (in), tls handshake, newsession ticket (4):
* openssl ssl_read: ssl_error_syscall, errno 0
* closing connection #0
Curl: (56) openssl ssl_read: ssl_error_syscall, errno 0

$ curl https://f-droid.org/ -v --http2
* host f-droid.org:443 was resolved.
* ipv6: 2a00:c6c0:0:155:1::1, 2a01:4f9:3b:546d::2
* ipv4: 37.218.243.72, 65.21.79.229
* trying [2a00:c6c0:0:155:1::1]:443...
* alpn: curl offers h2,http/1.1
* tlsv1.3 (out), tls handshake, client hello (1):
* cafile: /data/data/com.termux/files/usr/etc/tls/cert.pem
* capath: /data/data/com.termux/files/usr/etc/tls/certs
* tlsv1.3 (in), tls handshake, server hello (2):
* tlsv1.3 (in), tls handshake, encrypted extensions (8):
* tlsv1.3 (in), tls handshake, certificate (11):
* tlsv1.3 (in), tls handshake, cert verify (15):
* tlsv1.3 (in), tls handshake, finished (20):
* tlsv1.3 (out), tls change cipher, change cipher spec (1):
* tlsv1.3 (out), tls handshake, finished (20):
* ssl connection using tlsv1.3 / tls_aes_256_gcm_sha384 / x25519 / rsassa-pss
* alpn: server accepted h2
* server certificate:
* subject: cn=f-droid.org
* start date: feb 1 10:26:16 2025 gmt
* expire date: may 2 10:26:15 2025 gmt
* subjectaltname: host "f-droid.org" matched cert's "f-droid.org"
* issuer: c=us; o=let's encrypt; cn=r10
* ssl certificate verify ok.
* certificate level 0: public key type rsa (2048/112 bits/secbits), signed using sha256withrsaencryption
* certificate level 1: public key type rsa (2048/112 bits/secbits), signed using sha256withrsaencryption
* certificate level 2: public key type rsa (4096/152 bits/secbits), signed using sha256withrsaencryption
* connected to f-droid.org (2a00:c6c0:0:155:1::1) port 443
* using http/2
* [http/2] [1] opened stream for https://f-droid.org/
* [http/2] [1] [:method: get]
* [http/2] [1] [:scheme: https]
* [http/2] [1] [:authority: f-droid.org]
* [http/2] [1] [:path: /]
* [http/2] [1] [user-agent: curl/8.12.0]
* [http/2] [1] [accept: */*]
> get / http/2
> host: f-droid.org
> user-agent: curl/8.12.0
> accept: */*
>
* request completely sent off
* tlsv1.3 (in), tls handshake, newsession ticket (4):
* tlsv1.3 (in), tls handshake, newsession ticket (4):
< http/2 200
< server: nginx/1.22.1
< date: sun, 23 feb 2025 16:29:24 gmt
< content-type: text/html
< content-length: 12204
< content-location: index.html.en
< vary: negotiate,accept-language,accept-encoding
< tcn: choice
< strict-transport-security: max-age=63072000
< permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), ch-ua=(), clipboard-read=(), clipboard-write=(), conversion-measurement=(), display-capture=(), document-domain=(), document-write=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), focus-without-user-activation=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker=(), speaker-selection=(), sync-xhr=(), trust-token-redemption=(), usb=(), wake-lock=(), webauthn=(), web-share=(), window-placement=(), vr=(), xr=(), xr-spatial-tracking=(),
< content-security-policy: default-src 'none';base-uri 'self';block-all-mixed-content;connect-src 'self';font-src 'self';form-action 'self' https://search.f-droid.org;frame-ancestors 'self';img-src 'self' https://f-droid.org;manifest-src 'self';media-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';
< referrer-policy: strict-origin
< x-content-type-options: nosniff
< x-frame-options: sameorigin
< x-xss-protection: 1; mode=block
< onion-location: http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/index.html.en
< last-modified: sun, 23 feb 2025 16:17:45 gmt
< etag: "2fac-62ed1905af107;74f-62ea4bda8d2c0
< cache-control: max-age=600, public, immutable, stale-while-revalidate=300
< expires: sun, 23 feb 2025 16:29:24 gmt
< content-language: en
< accept-ranges: bytes
<
* http/2 stream 1 was not closed cleanly: internal_error (err 2)
* connection #0 to host f-droid.org left intact
Curl: (92) http/2 stream 1 was not closed cleanly: internal_error (err 2)