$ openssl s_client -showcerts -servername www.womenonweb.org -connect 67.213.76.19:443 -prexit CONNECTED(00000003) write:errno=104 --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 0 bytes and written 310 bytes Verification: OK --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 0 bytes and written 310 bytes Verification: OK --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- $ ssh 67.213.76.19 The authenticity of host '67.213.76.19 (67.213.76.19)' can't be established. ECDSA key fingerprint is SHA256:+GrhqgUB8gR9ohRoZVEsMqf6020cFKE9QKv4JaVzHLo. Are you sure you want to continue connecting (yes/no/[fingerprint])?
hecho con $ uname -a Linux mon7t 5.5.0-2-amd64 #1 SMP Debian 5.5.17-1 (2020-04-15) x86_64 GNU/Linux El lun, 27-04-2020 a las 20:37 +0200, Jose Legido escribió: > On Mon, 27 Apr 2020 at 19:58, blinge <bli...@riseup.net> wrote: > > > > On 27/4/20 16:43, Jose Legido wrote: > > > El misterio que me queda por resolver es lo de allot.com, me > > > gustaría saber un caso que le pase. > > > > > > Con vodafone es con quien usando firefox y entrando en > > womenonweb.org salta el error de SSL autofirmado donde el nombre > > común es allot.com/emailAdress=i...@allot.com > > > > ¿Quieres que ponga aquí el contenido del certificado? Indicame qué > > prueba quieres que haga con esta interface de red. > > > > > > Gracias por las pruebas! > ¿Podrías probar esto? > openssl s_client -showcerts -servername www.womenonweb.org -connect > 67.213.76.19:443 -prexit > > Y esto: > ssh 67.213.76.19 > El fingerprint que debería mostrar es este: > ECDSA key fingerprint is > SHA256:+GrhqgUB8gR9ohRoZVEsMqf6020cFKE9QKv4JaVzHLo. > > On Mon, 27 Apr 2020 at 17:22, Jose Legido <j...@legido.com> wrote: > > Hola. > > Aquí el pesao del SSL..... > > El error que da con curl depende de la versión de openssl no del > > certificado. > > Desde mi máquina con OpenSSL 1.1.1d me da error : > > curl: (35) error:1414D172:SSL > > routines:tls12_check_peer_sigalg:wrong signature type > > > > Y desde mi máquina pero con docker y una debian 9 y la versión de > > OpenSSL 1.1.0l funciona. > > Voy a ver que diferencia hay entre versiones de openssl que da > > error con este certificado > > > > Esto ya lo he resuelto, es porque con debian 10 ya no está soportado > SHA 1: > https://www.debian.org/releases/stable/amd64/release-notes/ch-information.en.html#openssl-defaults > > The default security level for TLS connections has also been > increased from level 1 to level 2 > > Que es el que tiene el certificado: > Peer signing digest: SHA1 > > > > > > > On Mon, 27 Apr 2020 at 20:03, blinge <bli...@riseup.net> wrote: > > traceroute womenonweb.org > > traceroute to womenonweb.org (67.213.76.19), 30 hops max, 60 byte > > packets > > 1 *****homerouter****** (192.168.1.1) 0.873 ms 1.072 ms 1.258 > > ms > > 2 * * * > > 3 172.29.39.105 (172.29.39.105) 40.667 ms 41.106 ms 41.118 ms > > 4 * * * > > 5 * * * > > 6 10.49.62.165 (10.49.62.165) 45.486 ms * 10.49.62.173 > > (10.49.62.173) 39.799 ms > > 7 * * * > > 8 ae7-100-xcr1.mal.cw.net (195.10.46.1) 37.289 ms 37.731 ms > > ae7-100-xcr1.mat.cw.net (195.10.44.1) 37.580 ms > > 9 ae1-xcr1.mal.cw.net (195.2.30.185) 30.416 ms as3257-gw- > > mal.cw.net > > (195.2.24.58) 75.853 ms 85.602 ms > > 10 as3257-gw-mal.cw.net (195.2.24.58) 80.722 ms 75.975 ms > > et-8-1-0.cr0-tor1.ip4.gtt.net (89.149.143.6) 197.872 ms > > 11 ip4.gtt.net (69.174.8.106) 188.121 ms et-8-1-0.cr0- > > tor1.ip4.gtt.net > > (89.149.143.6) 217.330 ms ip4.gtt.net (69.174.8.106) 182.766 ms > > 12 ip4.gtt.net (69.174.8.106) 157.245 ms ar1.yyz01.3z.ca > > (208.68.88.177) 162.228 ms ip4.gtt.net (69.174.8.106) 167.455 ms > > 13 67.213.76.19 (67.213.76.19) 168.052 ms ar1.yyz01.3z.ca > > (208.68.88.177) 413.055 ms 411.945 ms > > _______________________________________________ > > HackMeeting mailing list > > HackMeeting@listas.sindominio.net > > https://listas.sindominio.net/mailman/listinfo/hackmeeting > > _______________________________________________ > HackMeeting mailing list > HackMeeting@listas.sindominio.net > https://listas.sindominio.net/mailman/listinfo/hackmeeting _______________________________________________ HackMeeting mailing list HackMeeting@listas.sindominio.net https://listas.sindominio.net/mailman/listinfo/hackmeeting
