libcurl2rtt包使用mbedtls加密证书问题

发布于 2020-06-18 09:18:44 浏览：2335 订阅该版

因为DNS服务还有问题,所以这里直接用了ip地址访问:118.31.15.152->[www.rt-thread.com](www.rt-thread.com)
1.-k跳过证书正常.
msh />curl --verbose -k --capath ./ [https://118.31.15.152/service/rt-thread.txt](https://118.31.15.152/service/rt-thread.txt)  
* timeout on name lookup is not supported
*   Trying 118.31.15.152:443...
* TCP_NODELAY set
* Connected to 118.31.15.152 () port 443 (#0)
* mbedTLS: Connecting to 118.31.15.152:443
* mbedTLS: Set min SSL version to TLS 1.0
* mbedTLS: Handshake complete, cipher is TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
* Dumping cert info:
* cert. version     : 3
* serial number     : 09:2F:6D:AE:96:EC:D7:D0:24:55:D2:F5:64:20:50:23
* issuer name       : C=US, O=DigiCert Inc, OU=www.digicert.com, CN=RapidSSL RSA CA 2018
* subject name      : CN=*.rt-thread.org
* issued  on        : 2020-06-05 00:00:00
* expires on        : 2021-06-05 12:00:00
* signed using      : RSA with SHA-256
* RSA key size      : 2048 bits
* basic constraints : CA=false
* subject alt name  : *.rt-thread.org, rt-thread.org
* key usage         : Digital Signature, Key Encipherment
* ext key usage     : TLS Web Server Authentication, TLS Web Client Authentication

* SSL connected
> GET /service/rt-thread.txt HTTP/1.1
> Host: 118.31.15.152
> User-Agent: curl/7.67.0-DEV
> Accept: */*
> 
* Mark bundle as not supporting multiuse
< HTTP/1.1 301 Moved Permanently
< Server: nginx/1.10.3 (Ubuntu)
< Date: Thu, 18 Jun 2020 01:11:34 GMT
< Content-Type: text/html
< Content-Length: 194
< Connection: keep-alive
< Location: [https://club.rt-thread.org/service/rt-thread.txt](https://club.rt-thread.org/service/rt-thread.txt)
< Strict-Transport-Security: max-age=1800; includeSubdomains; preload
< 
<html>
<head><title>301 Moved Permanently</title></head>
<body bgcolor="white">
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.10.3 (Ubuntu)</center>
</body>
</html>
* Connection #0 to host 118.31.15.152 left intact

2.我已经按照文档重新获取rt-thread的证书了,放到了/data目录下.可还是不行.
msh />curl --verbose --capath ./data/ [https://118.31.15.152/service/rt-thread.txt](https://118.31.15.152/service/rt-thread.txt)  
* timeout on name lookup is not supported
*   Trying 118.31.15.152:443...
* TCP_NODELAY set
* Connected to 118.31.15.152 () port 443 (#0)
* mbedTLS: Connecting to 118.31.15.152:443
* mbedTLS: Set min SSL version to TLS 1.0
* mbedTLS: Handshake complete, cipher is TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
* Cert verify failed: BADCERT_CN_MISMATCH
* Closing connection 0
curl: (60) Cert verify failed: BADCERT_CN_MISMATCH
More details here: [https://curl.haxx.se/docs/sslcerts.html](https://curl.haxx.se/docs/sslcerts.html)

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.