这是一个创建于 3530 天前的主题，其中的信息可能已经有所发展或是发生改变。
我浏览器里强制使用https打开百度。。但是 页面不端reload。。
curl了一下。。结果直接把https劫持为http了。。
以下是案发时导出的证书：
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
之前也发过这个现象的帖子了。。求大家帮忙分析分析这到底是怎么回事？？
curl了一下。。结果直接把https劫持为http了。。
以下是案发时导出的证书：
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIQUaJj/aQaIJ2zTUqGhx++9jANBgkqhkiG9w0BAQUFADCB
tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm
VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTQwNjA5
MDAwMDAwWhcNMTUwNjA5MjM1OTU5WjCBqTELMAkGA1UEBhMCQ04xEDAOBgNVBAgT
B2JlaWppbmcxEDAOBgNVBAcUB2JlaWppbmcxOTA3BgNVBAoUMEJlaUppbmcgQmFp
ZHUgTmV0Y29tIFNjaWVuY2UgVGVjaG5vbG9neSBDby4sIEx0ZDElMCMGA1UECxQc
c2VydmljZSBvcGVyYXRpb24gZGVwYXJ0bWVudDEUMBIGA1UEAxQLKi5iYWlkdS5j
b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIv9cyg5A05R9mMJv9
Ie6a858Yztcb3G3iHuuliWVipvBZkQTNb4y0rsNhbOO5Ws/pSKMlMJxHYEG7FVfG
+zB8OynbN23j9Gez+ztAtVL+8j9NSkhphrBW6AU153MFFVDGWXGp9+IeiTsZIHiI
X7sh0WYLQE+78gYQvF8NXs50+ej6/2PtPnciLZCvo9uMQLkgKFq4YU+O2C9Fz22I
NpWFCNX+8QF+aU8kzrU6smrvDjcf5DoTwiuGCZtDB1UVozd9l1ez4PIpWu3NlxF3
NQcZTH0aP5Ae/quAGPs10ih/cD9BF61FckM1GqR17V87QPnOA9+yrpkxHSzdgg4i
GhPjAgMBAAGjggFkMIIBYDAWBgNVHREEDzANggsqLmJhaWR1LmNvbTAJBgNVHRME
AjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc2Qu
c3ltY2IuY29tL3NkLmNybDBlBgNVHSAEXjBcMFoGCmCGSAGG+EUBBzYwTDAjBggr
BgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGRYX
aHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMB8GA1UdIwQYMBaAFA1EXBZTRMGCfh0gqyX0AWPYvnmlMFcGCCsGAQUF
BwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NkLnN5bWNkLmNvbTAmBggrBgEF
BQcwAoYaaHR0cDovL3NkLnN5bWNiLmNvbS9zZC5jcnQwDQYJKoZIhvcNAQEFBQAD
ggEBAKKilycsYP6qOGzMsc8pRbYHqv4bB3kqRYPDA+ypyMhyR6fQBvfLn/U6Tca3
qF4shd8su5ScDOZA4szb5KOCJc0/nlHCbJ5BwdXvXrKeBOpCCBUB3ySk4NIwmhrJ
7FSVfwuDW01feIWAafU4iYHVdRe83CqzRwHFRyvzpvpiKyS9tQwszW+6j6up4KKO
HPVHp9CVXMiqB/7/HorzXyIGMm4xNYgPyVyN3sTgTg5uDmsvWLS9NxRjZTkefUYi
gLLwsiBJ5ZH9EEiLfto0FzLcH8hi4gpLrqUv7JVrydvxT/7vpz/j8T5eNxYTcqEb
tSHh9vhx1TEva3iDlS/Znxe4y0w=
-----END CERTIFICATE-----
之前也发过这个现象的帖子了。。求大家帮忙分析分析这到底是怎么回事？？
第 1 条附言 · 2015-03-21 09:29:40 +08:00
感谢各位。。
是我逗逼了。。
原来是我火狐的UA不改了为IE，忘记了改过来而造成的。。sorry。。造成了误会。。打扰咯。
是我逗逼了。。
原来是我火狐的UA不改了为IE，忘记了改过来而造成的。。sorry。。造成了误会。。打扰咯。
 |
1
Delbert 2015-03-21 09:17:31 +08:00  1
baidu 的https不是本来就是这样的吗？
 |
 |
2
Garwih 2015-03-21 09:18:39 +08:00 1
应该只有 IE or IE 内核的浏览器会跳转到 http 。
|
|
3
Delbert 2015-03-21 09:21:14 +08:00 1
从sfo 的vps上得到的结果：
 百度本来就这么设置的吧 |
|
4
Delbert 2015-03-21 09:24:33 +08:00 1
@Garwih 我这边测试结果是：
win7 64 IE11 Firefox Chrome WIN8.1 64 IE11 Firefox(Nightly) win7 64 IE8 上述访问https都没有跳转，页面正常加载。 |
 |
5
yfdyh000 2015-03-21 09:24:44 +08:00 1
就是这样+1。证书看上去没问题。
curl https://www.baidu.com -A "Firefox" 或 curl https://www.baidu.com -A "Chrome" 等有返回源码。 |
|
6
Delbert 2015-03-21 09:27:03 +08:00 1
页面不端reload。
↑ ↑ ↑ ↑ ↑ ↑↑↑↑↑↑ 表示看不懂，你想说reload还是没有reload。 |
 |
7
yanwen OP 感谢以上各位。。
我逗逼了。。 原来是我火狐的UA不改了为IE，忘记了改过来而造成的。。 |
Select Language