Quantcast
Channel: Active questions tagged https - Stack Overflow
Viewing all articles
Browse latest Browse all 1854

Why do my ubuntu server parsing The certificate of github does not correspond to the github website? [closed]

$
0
0

When I try

git clone https://github.com/xixi-cathy/regX.git

It returns an error shows "fatal: SSL: certificate subject name (*.inkafactura.com) does not match target host name 'github.com'".I investigated whether an external proxy was being used(like "echo $https_proxy"), but the results obtained still cannot rule out the possibility that no external proxy was employed.Belows are my curl and openssl output:

~$ curl -vI https://github.com* Host github.com:443 was resolved.* IPv6: (none)* IPv4: 140.82.11.4*   Trying 140.82.11.4:443...* Connected to github.com (140.82.11.4) port 443* ALPN: curl offers h2,http/1.1* TLSv1.3 (OUT), TLS handshake, Client hello (1):*  CAfile: /home/lc/miniconda3/ssl/cacert.pem*  CApath: none* TLSv1.3 (IN), TLS handshake, Server hello (2):* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):* TLSv1.3 (IN), TLS handshake, Certificate (11):* TLSv1.3 (IN), TLS handshake, CERT verify (15):* TLSv1.3 (IN), TLS handshake, Finished (20):* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):* TLSv1.3 (OUT), TLS handshake, Finished (20):* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519 / RSASSA-PSS* ALPN: server accepted http/1.1* Server certificate:*  subject: CN=*.inkafactura.com*  start date: Mar 24 03:53:24 2025 GMT*  expire date: Jun 22 03:53:23 2025 GMT*  subjectAltName does not match github.com* SSL: no alternative certificate subject name matches target host name 'github.com'* Closing connection* TLSv1.3 (OUT), TLS alert, close notify (256):curl: (60) SSL: no alternative certificate subject name matches target host name 'github.com'More details here: https://curl.se/docs/sslcerts.htmlcurl failed to verify the legitimacy of the server and therefore could notestablish a secure connection to it. To learn more about this situation andhow to fix it, please visit the web page mentioned above.
~$ openssl s_client -connect github.com:443 -showcerts 2>/dev/null | openssl x509 -noout -textCertificate:    Data:        Version: 3 (0x2)        Serial Number:            05:cf:98:68:ce:83:97:ab:d6:ac:f5:1e:5d:0e:57:c3:c8:67        Signature Algorithm: sha256WithRSAEncryption        Issuer: C=US, O=Let's Encrypt, CN=R11        Validity            Not Before: Mar 24 03:53:24 2025 GMT            Not After : Jun 22 03:53:23 2025 GMT        Subject: CN=*.inkafactura.com        Subject Public Key Info:            Public Key Algorithm: rsaEncryption                Public-Key: (2048 bit)                Modulus:                    00:aa:7b:6e:01:1f:ca:1e:d1:d3:f0:ae:c3:d9:b9:                    3d:da:b7:ba:3b:c0:4b:fb:1c:75:7a:d2:aa:1c:00:                    d0:05:8e:78:b3:ef:d9:08:73:08:cd:98:0b:e7:43:                    f7:60:ec:8e:78:02:3c:ea:5e:51:d5:13:32:0c:52:                    89:8c:2d:fe:c5:a4:72:0d:7a:2b:2a:93:38:a9:f3:                    62:fd:79:66:5a:a8:ae:e0:5f:70:df:42:1a:51:1b:                    00:b0:cc:db:ce:57:ba:3a:7d:bb:45:21:4f:32:66:                    03:02:f8:3b:db:3e:02:a4:e7:be:31:d4:49:40:79:                    00:3b:03:05:ae:4e:b9:f1:30:ee:a6:8e:8e:49:2c:                    24:3e:71:b4:4d:4d:23:80:6d:ed:ad:d2:f3:6a:6c:                    f4:6a:9f:3d:72:77:86:63:8a:79:37:62:21:27:24:                    bb:02:27:4c:94:86:5c:1d:34:8f:84:a7:b7:86:12:                    89:03:89:4a:1b:ab:ec:35:52:47:9f:45:2d:78:89:                    41:d0:7b:ed:ce:07:eb:7e:31:6b:85:3d:e4:33:3a:                    59:12:6a:13:25:f5:c5:e2:25:33:a0:15:46:42:43:                    15:a0:f3:35:0d:00:14:64:a8:5e:db:68:16:c0:5f:                    3f:b0:c3:92:e9:8c:d5:50:13:5d:65:25:31:98:1c:                    f6:29                Exponent: 65537 (0x10001)        X509v3 extensions:            X509v3 Key Usage: critical                Digital Signature, Key Encipherment            X509v3 Extended Key Usage:                 TLS Web Server Authentication, TLS Web Client Authentication            X509v3 Basic Constraints: critical                CA:FALSE            X509v3 Subject Key Identifier:                 AC:A2:56:A1:54:B5:66:CB:EC:57:43:C4:58:10:CB:A1:67:36:EC:E1            X509v3 Authority Key Identifier:                 C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9            Authority Information Access:                 OCSP - URI:http://r11.o.lencr.org                CA Issuers - URI:http://r11.i.lencr.org/            X509v3 Subject Alternative Name:                 DNS:*.inkafactura.com, DNS:inkafactura.com            X509v3 Certificate Policies:                 Policy: 2.23.140.1.2.1            X509v3 CRL Distribution Points:                 Full Name:                  URI:http://r11.c.lencr.org/104.crl            CT Precertificate SCTs:                 Signed Certificate Timestamp:                    Version   : v1 (0x0)                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50                    Timestamp : Mar 24 04:51:54.781 2025 GMT                    Extensions: none                    Signature : ecdsa-with-SHA256                                30:45:02:21:00:85:50:5A:DD:EC:2D:97:76:CA:98:9F:                                F9:A0:4D:46:3C:96:54:47:1A:96:E9:EA:12:B2:0B:72:                                4B:97:35:73:98:02:20:3F:7D:0E:EC:6B:F9:F8:A5:AA:                                0F:81:A1:CC:A3:23:64:26:78:DD:44:84:83:39:00:78:                                24:77:A7:13:76:ED:33                Signed Certificate Timestamp:                    Version   : v1 (0x0)                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08                    Timestamp : Mar 24 04:51:54.845 2025 GMT                    Extensions: none                    Signature : ecdsa-with-SHA256                                30:45:02:20:23:4F:64:F1:8A:C3:08:E7:94:12:1F:DD:                                07:EA:C5:86:9A:F6:AC:23:AD:50:2D:FF:53:B5:3A:C0:                                93:3E:DB:F7:02:21:00:B2:BF:30:83:FC:00:47:DF:65:                                E5:4A:05:DD:3E:AC:B5:B3:EC:EB:1D:A0:BB:56:4C:A5:                                A1:36:A8:95:CD:EE:B8    Signature Algorithm: sha256WithRSAEncryption    Signature Value:        b3:67:ab:20:6a:32:8d:a0:21:02:b7:bf:86:8a:26:fc:e5:e8:        c1:95:87:7c:63:56:5b:77:78:83:95:d4:49:5d:d8:65:f7:d2:        90:6d:84:39:54:0d:d3:a1:50:4f:f0:87:20:5e:a7:f0:77:65:        b2:35:29:fb:02:c2:08:4a:a5:09:ce:6e:fb:5c:fc:98:ae:0d:        c5:79:86:f7:d7:01:55:81:3f:6a:70:7d:81:26:4b:45:b7:5d:        f5:f1:cb:28:8f:55:54:42:b4:01:d8:e0:e9:84:eb:ee:20:dd:        5d:9d:84:ef:7d:b2:05:ff:67:9c:3e:72:0e:26:c1:01:55:3a:        eb:aa:c5:87:61:9e:99:f2:3c:01:e4:9f:54:75:f4:c6:7b:99:        79:85:ac:28:88:3e:df:af:6a:3c:73:8d:14:a6:d1:43:a1:31:        a9:27:3c:39:60:f3:02:94:1b:64:54:f8:47:e5:df:e1:cf:35:        3c:8c:24:d3:26:bd:6c:e4:88:55:a8:70:d5:e8:1e:28:79:80:        5f:dd:b3:f5:be:03:32:39:57:20:8f:63:cb:61:6b:1b:ab:c3:        3c:0e:92:e2:87:82:03:47:56:b7:db:26:92:65:de:1c:86:49:        76:c2:e0:56:4f:8d:dc:bf:a4:bb:6a:4f:0d:cf:2b:60:ee:2e:        fe:1a:8b:b4
~$ dig github.com; <<>> DiG 9.18.30-0ubuntu0.22.04.2-Ubuntu <<>> github.com;; global options: +cmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51473;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1;; OPT PSEUDOSECTION:; EDNS: version: 0, flags:; udp: 1232;; QUESTION SECTION:;github.com.                    IN      A;; ANSWER SECTION:github.com.             31      IN      A       20.205.243.166;; Query time: 13 msec;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP);; WHEN: Tue May 13 12:42:25 CST 2025;; MSG SIZE  rcvd: 55

Viewing all articles
Browse latest Browse all 1854

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>