为什么钉钉用的 eagleeye 的证书不被信任呢？

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

已注册用户请登录

工单节点使用指南

• 请用平和的语言准确描述你所遇到的问题

• 厂商的技术支持和你一样也是有喜怒哀乐的普通人类，尊重是相互的

• 如果是关于 V2EX 本身的问题反馈，请使用反馈节点

这是一个创建于 975 天前的主题，其中的信息可能已经有所发展或是发生改变。

Trying 106.11.35.100...
TCP_NODELAY set
Connected to im.dingtalk.com (106.11.35.100) port 443 (#0)
ALPN, offering h2
ALPN, offering http/1.1
successfully set certificate verify locations:
CAfile: /etc/ssl/cert.pem CApath: none
TLSv1.2 (OUT), TLS handshake, Client hello (1):
TLSv1.2 (IN), TLS handshake, Server hello (2):
TLSv1.2 (IN), TLS handshake, Certificate (11):
TLSv1.2 (IN), TLS handshake, Server key exchange (12):
TLSv1.2 (IN), TLS handshake, Server finished (14):
TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
TLSv1.2 (OUT), TLS handshake, Finished (20):
TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
TLSv1.2 (IN), TLS handshake, Finished (20):
SSL connection using TLSv1.2 / ECDHE-RSA-CHACHA20-POLY1305
ALPN, server did not agree to a protocol
Server certificate:
subject: C=CN; ST=ZheJiang; L=HangZhou; O=Alibaba (China) Technology Co., Ltd.; CN=*.dingtalk.com
start date: Apr 19 01:31:03 2021 GMT
expire date: May 21 01:31:03 2022 GMT
issuer: C=US; ST=CA; O=EagleEye, Inc.
SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.

2 条回复 • 2021-08-18 16:04:02 +08:00

Kobayashi

2021-08-18 16:00:20 +08:00 via Android

你根证书有问题，本地找不到根证书公钥，把 ca-certificates 包装上。如果是自己编译的 curl 自行检查相关 ca 参数。

EPr2hh6LADQWqRVH

2021-08-18 16:04:02 +08:00

被劫持着呢你这个，啥玩意鹰眼系统