☰

ubuntu 18.04 無法連線到某些 HTTPS 站點

tag-icon • tag-icon networking 18.04 ssl
ubuntu 18.04 無法連線到某些 HTTPS 站點

我剛剛格式化了我的筆記型電腦並全新安裝了 Ubuntu 18.04。在安裝一些開發套件時，我發現使用 ruby​​gems 和 python pip 有問題。它給出了 SSL 相關的錯誤。我也無法造訪他們的網站。 （連線重置錯誤訊息）

安裝最新版本的 PIP 時發生錯誤

Connected to bootstrap.pypa.io (2a04:4e42::175) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
} [215 bytes data]
* TLSv1.2 (IN), TLS handshake, Server hello (2):
{ [112 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [3805 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [300 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [37 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to bootstrap.pypa.io:443 
* stopped the pause stream!
  0     0    0     0    0     0      0      0 --:--:--  0:00:01 --:--:--     0
* Closing connection 0
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to bootstrap.pypa.io:443

還有紅寶石：

gem update --system
ERROR:  While executing gem ... (Gem::RemoteFetcher::FetchError)
    Errno::ECONNRESET: Connection reset by peer - SSL_connect (https://api.rubygems.org/specs.4.8.gz)

編輯：

我什至無法使用curl 連接到curl 網站：

➜ curl -v https://curl.haxx.se/mail/archive-2015-08/0015.html
*   Trying 2a04:4e42::561...
* TCP_NODELAY set
* Connected to curl.haxx.se (2a04:4e42::561) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to curl.haxx.se:443 
* stopped the pause stream!
* Closing connection 0
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to curl.haxx.se:443

我嘗試更新 openssl 和 ca-certificates 軟體包，但出現相同的問題。 Openssl 版本：OpenSSL 1.1.0g 2017 年 11 月 2 日

有人知道發生了什麼事嗎？幾天前，虛擬機器中還沒有發生這種情況。

編輯在連接到同一網路並以相同方式配置的虛擬機器中再次測試，它可以工作！真的很奇怪。

謝謝。

答案1

我透過在我的機器上停用 ipv6 解決了這個問題。真的不知道為什麼，但它有效。

要在 Ubuntu 或 Linux Mint 上停用 ipV6，請按照以下教學操作：https://support.purevpn.com/how-to-disable-ipv6-linuxubuntu

在網路管理員中停用還不夠。

相關內容