为什么钉钉用的 eagleeye 的证书不被信任呢？

[phpfpm]

curl https://im.dingtalk.com/ -vvv -k

• Trying 106.11.35.100...
• TCP_NODELAY set
• Connected to im.dingtalk.com (106.11.35.100) port 443 (#0)
• ALPN, offering h2
• ALPN, offering http/1.1
• successfully set certificate verify locations:
• CAfile: /etc/ssl/cert.pem CApath: none
• TLSv1.2 (OUT), TLS handshake, Client hello (1):
• TLSv1.2 (IN), TLS handshake, Server hello (2):
• TLSv1.2 (IN), TLS handshake, Certificate (11):
• TLSv1.2 (IN), TLS handshake, Server key exchange (12):
• TLSv1.2 (IN), TLS handshake, Server finished (14):
• TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
• TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
• TLSv1.2 (OUT), TLS handshake, Finished (20):
• TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
• TLSv1.2 (IN), TLS handshake, Finished (20):
• SSL connection using TLSv1.2 / ECDHE-RSA-CHACHA20-POLY1305
• ALPN, server did not agree to a protocol
• Server certificate:
• subject: C=CN; ST=ZheJiang; L=HangZhou; O=Alibaba (China) Technology Co., Ltd.; CN=*.dingtalk.com
• start date: Apr 19 01:31:03 2021 GMT
• expire date: May 21 01:31:03 2022 GMT
• issuer: C=US; ST=CA; O=EagleEye, Inc.
• SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.

[Kobayashi]

你根证书有问题，本地找不到根证书公钥，把 ca-certificates 包装上。如果是自己编译的 curl 自行检查相关 ca 参数。

[EPr2hh6LADQWqRVH]

被劫持着呢你这个，啥玩意鹰眼系统