Bug 5422 - [Anolis23 GA][软件兼容性] 宝塔软件在本机安装后,使用curl命令连接面板地址,报错 curl: (60) SSL certificate problem: unable to get local issuer certificate
Summary: [Anolis23 GA][软件兼容性] 宝塔软件在本机安装后,使用curl命令连接面板地址,报错 curl: (60) SSL certificate ...
Status: RESOLVED WONTFIX
Alias: None
Product: Anolis OS 23
Classification: Anolis OS
Component: BaseOS Packages (show other bugs) BaseOS Packages
Version: unspecified
Hardware: All Linux
: P3-Medium S3-normal
Target Milestone: ---
Assignee: happy_orange
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-06-06 16:46 UTC by Janos
Modified: 2023-06-19 11:49 UTC (History)
12 users (show)

See Also:


Attachments
网页访问截图 (1.41 MB, image/png)
2023-06-19 11:46 UTC, happy_orange
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Janos alibaba_cloud_group 2023-06-06 16:46:07 UTC
[缺陷描述]:
  宝塔软件在本机安装后,使用curl命令连接面板地址,报错 curl: (60) SSL certificate problem: unable to get local issuer certificate


[重现环境]:
环境信息:线上ecs
OS:Anolis 23 x86_64/aarch64

# cat /etc/os-release
NAME="Anolis OS"
VERSION="23"
ID="anolis"
VERSION_ID="23"
PLATFORM_ID="platform:an23"
PRETTY_NAME="Anolis OS 23"
ANSI_COLOR="0;31"
HOME_URL="https://openanolis.cn/"
BUG_REPORT_URL="https://bugzilla.openanolis.cn/"

KERNEL:
# uname -r
5.10.134-14.an23.x86_64


[重现步骤]:
# 安装宝塔
wget -O install.sh http://download.bt.cn/install/install_6.0.sh
sh install.sh ed8484bec

# 使用curl命令连接软件生成的登录页面
curl https://{ip}:{port}/1fb0a065

[期望结果]:
curl命令执行成功

[实际结果]:
curl命令执行失败,提示如下:

# curl https://{ip}:{port}/1fb0a065
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
Comment 1 Janos alibaba_cloud_group 2023-06-06 18:30:25 UTC
经测试,an8环境有相同问题,疑似 SSL策略配置问题
Comment 2 happy_orange alibaba_cloud_group 2023-06-19 11:46:33 UTC
Created attachment 787 [details]
网页访问截图

经过验证,是宝塔服务器端应该更新证书,请使用网页版直接访问面板,并忽略证书。

地址:
Congratulations! Installed successfully!
==================================================================
外网面板地址: https://116.62.179.157:23131/cad3662e
内网面板地址: https://172.25.100.99:23131/cad3662e

因已开启面板自签证书,访问面板会提示不匹配证书,请参考以下链接配置证书
https://www.bt.cn/bbs/thread-105443-1-1.html
==================================================================
Time consumed: 0 Minute!
Comment 3 happy_orange alibaba_cloud_group 2023-06-19 11:49:30 UTC
可以使用网页版进行访问哈。