7.19 / 7.19.1 failure: SSL: handshake timed out

[ilium007]

Not related to CA changes due to

check-certificate=no

Have you tried with some other URLs that are known to be working with cURL? There is high chance that this specific service has decided to implement some protections against AI and it resulted in MikroTik devices being blocked. The error provided is indicative of server ghosting client after initial TLS handshake request (which is enough to get JA3 fingerprint).

Thats what I assumed. Looking at other ISO related issues. Can ping, :resolve but can’t pass http/s traffic.

I don’t think this is rOS related now.