[Repository/Mirror] 深度官方源中域名解析到的某个IPv6地址的服务器证书与主机名不符
Tofloor
poster avatar
hotime
deepin
2023-07-24 00:36
Author

详情描述:

官方源/etc/apt/sources.list.d/devicemanager.list 内容如下:

deb https://pro-driver-packages.uniontech.com eagle non-free

在用户拥有可正常使用的IPv6地址时,sudo apt update数次(最多4次)后会遇到提示:

W: 无法下载 https://pro-driver-packages.uniontech.com/dists/eagle/InRelease  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2408:874f:1000:201:38::1c 443]

通过多次使用wget -6命令通过IPv6下载该文件
wget -6 https://pro-driver-packages.uniontech.com/dists/eagle/InRelease,可知:

域名pro-driver-packages.uniontech.com在使用IPv6的情况下,会被解析到下述的四个地址中:

2408:874f:b000:3:6c::63
2408:874f:b000:3:6c::5f
2408:874f:1000:201:38::1c
2408:872b:e02:101:37::

每次使用wget命令会解析到其中一个地址,当解析到2408:874f:1000:201:38::1c时,会提示:证书所有者与主机名 “pro-driver-packages.uniontech.com” 不符

请检查一下pro-driver-packages.uniontech.com的域名解析情况,2408:874f:1000:201:38::1c是否是贵方服务器的IP地址,如果是的话其对应服务器的证书所有者是否与主机名不符。

影响平台:

DeepinV20.x

DeepinV23

期望的结果:

IPv6网络下,系统自带apt源pro-driver-packages.uniontech.com可正常连接,sudo apt update无错误。


补充:终端信息显示如下

hotime@hotime-PC:~$ sudo apt update
请输入密码:
验证成功
命中:1 https://community-packages.deepin.com/beige beige InRelease
命中:2 https://community-packages.deepin.com/driver driver InRelease                                                                           
命中:3 https://proposed-packages.deepin.com/beige-testing unstable InRelease                                                                   
命中:4 https://pro-driver-packages.uniontech.com eagle InRelease                                                                               
命中:5 https://app-store-files.uniontech.com/230721181214428/appstorev23 beige InRelease                                                      
正在读取软件包列表... 完成                                       
正在分析软件包的依赖关系树... 完成
正在读取状态信息... 完成                 
所有软件包均为最新。
hotime@hotime-PC:~$ sudo apt update
命中:1 https://community-packages.deepin.com/beige beige InRelease
命中:2 https://community-packages.deepin.com/driver driver InRelease                                                                           
忽略:3 https://pro-driver-packages.uniontech.com eagle InRelease                                                                               
命中:4 https://proposed-packages.deepin.com/beige-testing unstable InRelease                                                                   
命中:5 https://app-store-files.uniontech.com/230721181214428/appstorev23 beige InRelease
忽略:3 https://pro-driver-packages.uniontech.com eagle InRelease
忽略:3 https://pro-driver-packages.uniontech.com eagle InRelease
错误:3 https://pro-driver-packages.uniontech.com eagle InRelease
  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2408:874f:1000:201:38::1c 443]
正在读取软件包列表... 完成
正在分析软件包的依赖关系树... 完成
正在读取状态信息... 完成                 
所有软件包均为最新。
W: 无法下载 https://pro-driver-packages.uniontech.com/dists/eagle/InRelease  Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected.  Could not handshake: Error in the certificate verification. [IP: 2408:874f:1000:201:38::1c 443]
W: 部分索引文件下载失败。如果忽略它们,那将转而使用旧的索引文件。
hotime@hotime-PC:~$ wget -6 https://pro-driver-packages.uniontech.com/dists/eagle/InRelease
--2023-07-23 18:01:20--  https://pro-driver-packages.uniontech.com/dists/eagle/InRelease
正在解析主机 pro-driver-packages.uniontech.com (pro-driver-packages.uniontech.com)... 2408:872b:e02:101:37::, 2408:874f:b000:3:6c::63, 2408:874f:b000:3:6c::5f, ...
正在连接 pro-driver-packages.uniontech.com (pro-driver-packages.uniontech.com)|2408:872b:e02:101:37::|:443... 已连接。
已发出 HTTP 请求,正在等待回应... 200 OK
长度:8386 (8.2K) [application/octet-stream]
正在保存至: “InRelease.6”

InRelease.6                         100%[===================================================================>]   8.19K  --.-KB/s  用时 0s      

2023-07-23 18:01:20 (80.5 MB/s) - 已保存 “InRelease.6” [8386/8386])

hotime@hotime-PC:~$ wget -6 https://pro-driver-packages.uniontech.com/dists/eagle/InRelease
--2023-07-23 18:01:22--  https://pro-driver-packages.uniontech.com/dists/eagle/InRelease
正在解析主机 pro-driver-packages.uniontech.com (pro-driver-packages.uniontech.com)... 2408:874f:b000:3:6c::63, 2408:874f:b000:3:6c::5f, 2408:874f:1000:201:38::1c, ...
正在连接 pro-driver-packages.uniontech.com (pro-driver-packages.uniontech.com)|2408:874f:b000:3:6c::63|:443... 已连接。
已发出 HTTP 请求,正在等待回应... 200 OK
长度:8386 (8.2K) [application/octet-stream]
正在保存至: “InRelease.7”

InRelease.7                         100%[===================================================================>]   8.19K  --.-KB/s  用时 0s      

2023-07-23 18:01:22 (110 MB/s) - 已保存 “InRelease.7” [8386/8386])

hotime@hotime-PC:~$ wget -6 https://pro-driver-packages.uniontech.com/dists/eagle/InRelease
--2023-07-23 18:01:23--  https://pro-driver-packages.uniontech.com/dists/eagle/InRelease
正在解析主机 pro-driver-packages.uniontech.com (pro-driver-packages.uniontech.com)... 2408:874f:b000:3:6c::5f, 2408:874f:1000:201:38::1c, 2408:872b:e02:101:37::, ...
正在连接 pro-driver-packages.uniontech.com (pro-driver-packages.uniontech.com)|2408:874f:b000:3:6c::5f|:443... 已连接。
已发出 HTTP 请求,正在等待回应... 200 OK
长度:8386 (8.2K) [application/octet-stream]
正在保存至: “InRelease.8”

InRelease.8                         100%[===================================================================>]   8.19K  --.-KB/s  用时 0s      

2023-07-23 18:01:23 (77.0 MB/s) - 已保存 “InRelease.8” [8386/8386])

hotime@hotime-PC:~$ wget -6 https://pro-driver-packages.uniontech.com/dists/eagle/InRelease
--2023-07-23 18:01:25--  https://pro-driver-packages.uniontech.com/dists/eagle/InRelease
正在解析主机 pro-driver-packages.uniontech.com (pro-driver-packages.uniontech.com)... 2408:874f:1000:201:38::1c, 2408:872b:e02:101:37::, 2408:874f:b000:3:6c::63, ...
正在连接 pro-driver-packages.uniontech.com (pro-driver-packages.uniontech.com)|2408:874f:1000:201:38::1c|:443... 已连接。
证书所有者与主机名 “pro-driver-packages.uniontech.com” 不符
hotime@hotime-PC:~$
Reply Favorite View the author
All Replies
hotime
deepin
2023-07-24 17:29
#1
Reply View the author
xuqi
deepin testing team
2023-07-24 17:39
#2
hotime
  • 收到,已经反馈稍后让运维他们分析下,感谢反馈~
Reply View the author
xuqi
deepin testing team
2023-07-25 00:38
#3
  • 经过运维和研发人员分析,ipv6支持目前还不完善,还是希望切换到ipv4使用~
Reply View the author
hotime
deepin
2023-07-25 01:07
#4
xuqi
  • 经过运维和研发人员分析,ipv6支持目前还不完善,还是希望切换到ipv4使用~

只要问题记录下了就行,慢慢完善不急的,深度团队加油~

kissing_heart

Reply View the author