Cannot download https://www.cisa.gov/sites/default/files/csaf/provider-metadata.json

[bernhardreiter]

csaf_checker and isduba cannot download
https://www.cisa.gov/sites/default/files/csaf/provider-metadata.json

My web browsers Firefox and Chromium can, though. Even if I take a successful request from the browser copied as CURL command line, curl cannot access this file.

httpie's

https https://www.cisa.gov/sites/default/files/csaf/provider-metadata.json

works.

This is most likely some blocking on CISA's side, but it would be cool to know which option can make the tools in here and isduba download from that URL.

[bernhardreiter]

Isduba message: fetching "https://www.cisa.gov/sites/default/files/csaf/provider-metadata.json" failed: 403 Forbidden (403)

curl downloads a file with

You don't have permission to access "http://www.cisa.gov/sites/default/files/csaf/provider-metadata.json" on this server.
Reference #18.7f501302.1779280729.29a69ef
https://errors.edgesuite.net/18.7f501302.1779280729.29a69ef

(with changing reference number, of course)

[s-l-teichmann]

@bernhardreiter Have you tested another user agent?

[bernhardreiter]

@bernhardreiter Have you tested another user agent?

Yes, did not help.
(When I wrote

take a successful request from the browser copied as CURL command line

I got the user agent and many other headers from the browser to the curl command line options. So the firewall must use a different way to detect isduba, checker and curl.)

[bernhardreiter]

Some curl and isduba versions work, it could be related to the underlying operating system.