为什么钉钉用的 eagleeye 的证书不被信任呢？

phpfpm · 2021-08-18T07:49:48Z

curl https://im.dingtalk.com/ -vvv -k Trying 106.11.35.100... TCP_NODELAY set Connected to im.dingtalk.com (106.11.35.100) port 443 (#0) ALPN, offering h2 ALPN, offering http/1.1 successfully set certificate verify locations: CAfile: /etc/ssl/cert.pem CApath: none TLSv1.2 (OUT), TLS handshake, Client hello (1): TLSv1.2 (IN), TLS handshake, Server hello (2): TLSv1.2 (IN), TLS handshake, Certificate (11): TLSv1.2 (IN), TLS handshake, Server key exchange (12): TLSv1.2 (IN), TLS handshake, Server finished (14): TLSv1.2 (OUT), TLS handshake, Client key exchange (16): TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): TLSv1.2 (OUT), TLS handshake, Finished (20): TLSv1.2 (IN), TLS change cipher, Change cipher spec (1): TLSv1.2 (IN), TLS handshake, Finished (20): SSL connection using TLSv1.2 / ECDHE-RSA-CHACHA20-POLY1305 ALPN, server did not agree to a protocol Server certificate: subject: C=CN; ST=ZheJiang; L=HangZhou; O=Alibaba (China) Technology Co., Ltd.; CN=*.dingtalk.com start date: Apr 19 01:31:03 2021 GMT expire date: May 21 01:31:03 2022 GMT issuer: C=US; ST=CA; O=EagleEye, Inc. SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

For Existing Member Sign In

工单节点使用指南

• 请用平和的语言准确描述你所遇到的问题

• 厂商的技术支持和你一样也是有喜怒哀乐的普通人类，尊重是相互的

• 如果是关于 V2EX 本身的问题反馈，请使用反馈节点

This topic created in 1713 days ago, the information mentioned may be changed or developed.

curl https://im.dingtalk.com/ -vvv -k

Trying 106.11.35.100...
TCP_NODELAY set
Connected to im.dingtalk.com (106.11.35.100) port 443 (#0)
ALPN, offering h2
ALPN, offering http/1.1
successfully set certificate verify locations:
CAfile: /etc/ssl/cert.pem CApath: none
TLSv1.2 (OUT), TLS handshake, Client hello (1):
TLSv1.2 (IN), TLS handshake, Server hello (2):
TLSv1.2 (IN), TLS handshake, Certificate (11):
TLSv1.2 (IN), TLS handshake, Server key exchange (12):
TLSv1.2 (IN), TLS handshake, Server finished (14):
TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
TLSv1.2 (OUT), TLS handshake, Finished (20):
TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
TLSv1.2 (IN), TLS handshake, Finished (20):
SSL connection using TLSv1.2 / ECDHE-RSA-CHACHA20-POLY1305
ALPN, server did not agree to a protocol
Server certificate:
subject: C=CN; ST=ZheJiang; L=HangZhou; O=Alibaba (China) Technology Co., Ltd.; CN=*.dingtalk.com
start date: Apr 19 01:31:03 2021 GMT
expire date: May 21 01:31:03 2022 GMT
issuer: C=US; ST=CA; O=EagleEye, Inc.
SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.

2 replies • 2021-08-18 16:04:02 +08:00

Kobayashi

Aug 18, 2021 via Android

你根证书有问题，本地找不到根证书公钥，把 ca-certificates 包装上。如果是自己编译的 curl 自行检查相关 ca 参数。

EPr2hh6LADQWqRVH

Aug 18, 2021

被劫持着呢你这个，啥玩意鹰眼系统