香港 ECS https 访问抽风，还是电信太坑

[fhy1994]

手机开移动流量能访问 电脑电信老是抽风 哪位大佬帮忙测一下网站

blog.aiti.me

谢谢了

→ curl -v https://blog.aiti.me --resolve blog.aiti.me:443:13.107.4.50
* Added blog.aiti.me:443:13.107.4.50 to DNS cache
* About to connect() to blog.aiti.me port 443 (#0)
*   Trying 13.107.4.50...
* Connected to blog.aiti.me (13.107.4.50) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* Server certificate:
* 	subject: CN=www.bing.com
* 	start date: Jul 20 17:47:08 2017 GMT
* 	expire date: Jul 10 17:47:08 2019 GMT
* 	common name: www.bing.com
* 	issuer: CN=Microsoft IT TLS CA 5,OU=Microsoft IT,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
* NSS error -12276 (SSL_ERROR_BAD_CERT_DOMAIN)
* Unable to communicate securely with peer: requested domain name does not match the server's certificate.
* Closing connection 0
curl: (51) Unable to communicate securely with peer: requested domain name does not match the server's certificate.

[sunflyer]

难道你就没注意返回的原因是因为服务器证书不匹配你服务器的域名么？

[Devmingwang]

这不就是偷偷替换了证书了么（搞中间人攻击）或者是 DNS 解析到了一个错误的地址。

[bclerdx]

访问一切 OK。

[maojy1989]

上海移动也打不开你这个网站，跟我的之前表现的一样
https://www.v2ex.com/t/398699