Ubuntu 18.04 curl возвращает SSL_ERROR_SYSCALL
Все это прекрасно работает в 16.04. Я выполняю ту же настройку в 18.04, cntlm работает как мой прокси, CA-сертификаты обновлены с корпоративным корневым сертификатом. Chrome, Firefox, wget и т. Д. Работают с https без проблем. Завиток с другой стороны всегда терпит неудачу при переходе на https. Я также попытался перейти непосредственно к прокси-серверу, задавая переменные среды (например: https_proxy = https://my_username:my_password@my.corp.proxy:8080/), и я получаю ту же ошибку ssl.
18.04 керлинг:
curl -v https://ubuntu.com
* Rebuilt URL to: https://ubuntu.com/
* Trying 127.0.0.1...
* TCP_NODELAY set
* Connected to 127.0.0.1 (127.0.0.1) port 3128 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: /etc/ssl/certs
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to 127.0.0.1:3128
* Closing connection 0
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to 127.0.0.1:3128
16.04 керл пробега:
curl -v https://ubuntu.com
* Rebuilt URL to: https://ubuntu.com/
* Trying 127.0.0.1...
* Connected to 127.0.0.1 (127.0.0.1) port 3128 (#0)
* Establish HTTP proxy tunnel to ubuntu.com:443
> CONNECT ubuntu.com:443 HTTP/1.1
> Host: ubuntu.com:443
> User-Agent: curl/7.47.0
> Proxy-Connection: Keep-Alive
>
< HTTP/1.1 200 Connection established
< Connection: close
<
* Proxy replied OK to CONNECT request
* found 152 certificates in /etc/ssl/certs/ca-certificates.crt
* found 620 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256
* server certificate verification OK
* server certificate status verification SKIPPED
* common name: ubuntu.com (matched)
* server certificate expiration date OK
* server certificate activation date OK
* certificate public key: RSA
* certificate version: #3
* subject: businessCategory=Private Organization,jurisdictionOfIncorporationCountryName=GB,serialNumber=06870835,C=GB,L=London,O=Canonical Group Ltd,OU=James Troup,CN=ubuntu.com
* start date: Mon, 06 Aug 2018 00:00:00 GMT
* expire date: Wed, 21 Aug 2019 12:00:00 GMT
* issuer: REDACTED
* compression: NULL
* ALPN, server did not agree to a protocol
> GET / HTTP/1.1
> Host: ubuntu.com
> User-Agent: curl/7.47.0
> Accept: */*
>
< HTTP/1.1 301 Moved Permanently
< Date: Thu, 14 Feb 2019 02:09:17 GMT
< Server: Apache/2.2.22 (Ubuntu)
< Location: https://www.ubuntu.com/
< Vary: Accept-Encoding
< Content-Length: 308
< Content-Type: text/html; charset=iso-8859-1
< Proxy-Connection: Keep-Alive
< Connection: Keep-Alive
< Age: 0
<
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://www.ubuntu.com/">here</a>.</p>
<hr>
<address>Apache/2.2.22 (Ubuntu) Server at ubuntu.com Port 443</address>
</body></html>
* Connection #0 to host 127.0.0.1 left intact
1 ответ
Так что это была полная ошибка ID-10T. Я помещал в https:// в окружении https_proxy. cntlm не выполняет https... изменил его на http:// и теперь все работает.