LJR: bugs - December 3rd, 2017

December 3rd, 2017

December 3rd, 2017
07:55 am
[do_]

[Link]

$ openssl s_client -showcerts -connect lj.rossia.org:443
Всё заебись, видим летс инкрипт )

А вот теперь так:

$ openssl s_client -servername lj.rossia.org -showcerts -connect lj.rossia.org:443
CONNECTED(00000003)
depth=0 C = AU, ST = Some-State, O = Internet Widgits Pty Ltd
verify error:num=18:self signed certificate
verify return:1
depth=0 C = AU, ST = Some-State, O = Internet Widgits Pty Ltd
verify error:num=10:certificate has expired
notAfter=Nov 12 12:46:03 2014 GMT
verify return:1
depth=0 C = AU, ST = Some-State, O = Internet Widgits Pty Ltd
notAfter=Nov 12 12:46:03 2014 GMT
verify return:1
Read more... )
GET / HTTP/1.1
Host: lj.rossia.org

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.10.3 (Ubuntu)
Date: Sun, 03 Dec 2017 00:52:04 GMT
Content-Type: text/html
Content-Length: 170
Connection: keep-alive
Location: http://blocked.mts.ru/?host=lj.rossia.org

<html>
<head><title>302 Found</title></head>
<body bgcolor="white">
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.10.3 (Ubuntu)</center>
</body>
</html>

Дело за малым -- заставить браузер не слать -servername
(но, похоже, именно этого современные браузеры и не умеют)

(7 comments | Leave a comment)

Previous Day 2017/12/03
[Archive]
Next Day
Powered by LJ.Rossia.org