[GitHub] [apisix] idbeta commented on issue #2781: https plugins：curl: (60) Peer's certificate issuer has been marked as not trusted by the user.

[GitBox <gi...@apache.org>]

idbeta commented on issue #2781:
URL: https://github.com/apache/apisix/issues/2781#issuecomment-729522697


   @lilihongjava My environment is correct, but mine is the master branch, cc @spacewander 
   ```
   $ curl --resolve 'das.com:9443:127.0.0.1' https://das.com:9443 -v
   * Added das.com:9443:127.0.0.1 to DNS cache
   * Rebuilt URL to: https://das.com:9443/
   *   Trying 127.0.0.1...
   * TCP_NODELAY set
   * Connected to 127.0.0.1 (127.0.0.1) port 7890 (#0)
   * Establish HTTP proxy tunnel to das.com:9443
   > CONNECT das.com:9443 HTTP/1.1
   > Host: das.com:9443
   > User-Agent: curl/7.54.0
   > Proxy-Connection: Keep-Alive
   > 
   < HTTP/1.1 200 Connection established
   < 
   * Proxy replied OK to CONNECT request
   * ALPN, offering h2
   * ALPN, offering http/1.1
   * Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
   * successfully set certificate verify locations:
   *   CAfile: /etc/ssl/cert.pem
     CApath: none
   * TLSv1.2 (OUT), TLS handshake, Client hello (1):
   * TLSv1.2 (IN), TLS handshake, Server hello (2):
   * TLSv1.2 (IN), TLS handshake, Certificate (11):
   * TLSv1.2 (OUT), TLS alert, Server hello (2):
   * SSL certificate problem: self signed certificate
   * stopped the pause stream!
   * Closing connection 0
   curl: (60) SSL certificate problem: self signed certificate
   More details here: https://curl.haxx.se/docs/sslcerts.html
   ```


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org