OSS SSL 访问异常

https 排查预热

oss 公有云目前已经全面覆盖了 https 协议，支持 http1.1 （后续回支持 http2 ）,以及通用的 TLS1.0 TLS 1.1 TLS 1.2 支持，下面简单说下遇到报错的几个场景。

openssl

• openssl s_client -connect taobao.com:443 -showcerts < /dev/null 2>&1

CONNECTED(00000003)
depth=2 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign Organization Validation CA - SHA256 - G2
verify return:1
depth=0 C = CN, ST = ZheJiang, L = HangZhou, O = "Alibaba (China) Technology Co., Ltd.", CN = *.tmall.com
verify return:1
---
Certificate chain
 0 s:/C=CN/ST=ZheJiang/L=HangZhou/O=Alibaba (China) Technology Co., Ltd./CN=*.tmall.com
   i:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Organization Validation CA - SHA256 - G2
-----BEGIN CERTIFICATE-----
MIILDjCCCfagAwIBAgIMKBLRByCqWyiycbAVMA0GCSqGSIb3DQEBCwUAMGYxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH
bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
RzIwHhcNMTcxMTIxMDUwNjAyWhcNMTgxMTIyMDUwNjAyWjB4MQswCQYDVQQGEwJD
TjERMA8GA1UECBMIWmhlSmlhbmcxETAPBgNVBAcTCEhhbmdaaG91MS0wKwYDVQQK
EyRBbGliYWJhIChDaGluYSkgVGVjaG5vbG9neSBDby4sIEx0ZC4xFDASBgNVBAMM
CyoudG1hbGwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRkn
Wzh/4IOVSVcPMjBmTRForLgcy2+kOhJUIJvoTSYQYAg5yh6MgzI/nm42itUnKeQO
RHyKcuppMHLUVNWdPlw4DIoEWAXDgEcItr2Qj20VzTS5w/o3I/M5Z2gYpZS0L2YM
ho2PzQuz+2tuuqOcva68/jT8krb1ZUEuTul2czeePU23db8UCU5miFWOugqCp2Qs
ZGdRZ4bFnr5MoMLPNdtb2VBEqXr9t0Mqynm689MhVDAoEeI1LuuqIfTu2kh5HTnk
uz5bsImeBD+aByWVYxbbSoklqZ+UjeMzc2LpVm+6ZflwYForM/eZXSnxE3rq16Lu
6ayMLrMapZXHaYMTcQIDAQABo4IHqDCCB6QwDgYDVR0PAQH/BAQDAgWgMIGgBggr
BgEFBQcBAQSBkzCBkDBNBggrBgEFBQcwAoZBaHR0cDovL3NlY3VyZS5nbG9iYWxz
aWduLmNvbS9jYWNlcnQvZ3Nvcmdhbml6YXRpb252YWxzaGEyZzJyMS5jcnQwPwYI
KwYBBQU