Github pages 的 HTTPS 是不是出问题了？

[WoodenRobot]

所有的 github pages 页面开启 HTTPS 的话证书都变成下面这个了？什么情况？

[mnihyc]

劫持复现，又搞大动作

[explore365]

上海电信复现

[razeen]

+1 上海电信

➜ ~ curl -vvv https://go-acme.github.io/ -k -I
* Trying 185.199.109.153...
* TCP_NODELAY set
* Connected to go-acme.github.io (185.199.109.153) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/cert.pem
CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES128-GCM-SHA256
* ALPN, server did not agree to a protocol
* Server certificate:
* subject: C=CN; ST=GD; L=SZ; O=COM; OU=NSP; CN=SERVER; emailAddress=[e-mail]
* start date: Sep 26 09:33:13 2019 GMT
* expire date: Sep 23 09:33:13 2029 GMT
* issuer: C=CN; ST=GD; L=SZ; O=COM; OU=NSP; CN=CA; emailAddress=[e-mail]
* SSL certificate verify result: self signed certificate in certificate chain (19), continuing anyway.
> HEAD / HTTP/1.1
> Host: go-acme.github.io
> User-Agent: curl/7.64.1
> Accept: */*


➜ ~ traceroute go-acme.github.io
traceroute: Warning: go-acme.github.io has multiple addresses; using 185.199.111.153
traceroute to go-acme.github.io (185.199.111.153), 64 hops max, 52 byte packets
1 192.168.10.3 (192.168.10.3) 4.853 ms 5.880 ms 10.920 ms
2 58.32.0.1 (58.32.0.1) 7.142 ms 6.809 ms 4.067 ms
3 101.95.91.65 (101.95.91.65) 5.320 ms 5.360 ms
101.95.91.69 (101.95.91.69) 13.493 ms
4 101.95.88.49 (101.95.88.49) 7.511 ms
101.95.88.61 (101.95.88.61) 7.240 ms 6.595 ms
5 * 59.43.130.198 (59.43.130.198) 57.626 ms *
6 59.43.186.246 (59.43.186.246) 14.080 ms 28.236 ms
59.43.187.78 (59.43.187.78) 5.358 ms
7 59.43.248.238 (59.43.248.238) 30.597 ms 32.730 ms
59.43.189.82 (59.43.189.82) 34.298 ms
8 63.218.211.9 (63.218.211.9) 34.244 ms 37.515 ms 61.540 ms
9 63.218.174.217 (63.218.174.217) 34.487 ms 34.856 ms 33.423 ms
10 63.218.174.217 (63.218.174.217) 32.784 ms 40.958 ms 35.800 ms

[RyuZheng]

@zhenjiachen # 159 我也是 CNAME 到 github.io ，然后 DNS 那个选项卡里，显示的 Proxy Status 是 Proxied，SSL/TLS 选项卡里，我的 mode 选择的是 full，其他地方暂时没想到，你试试

[razeen]

github page 用 Cloudflare 的貌似不受影响。

[Astralis]

这应该是端口被劫持了吧？
https://s1.ax1x.com/2020/03/26/GpQHxK.png
https://s1.ax1x.com/2020/03/26/GpQT8x.png

[e8AsCM]

西北电信没有出现任何问题
但是访问 GitHub 和 Pages 还是一如既往的慢，不挂代理想要打开页面需要加载三十秒甚至一分钟，太慢了

[strongwong]

根据 qq 号下面 介绍的 138qb.cn 域名查到 →是广州名扬信息科技有限公司，这个公司貌似本身就是域名服务商？是他们员工搞得鬼？
https://imgchr.com/i/GpQqKO
https://imgchr.com/i/Gplaz6

[codevvvv9]

@hshpy 我把两个解析删除了，还是不行……

[desmondlau]

@jhdsgfww 济南联通复现，济南移动好像也 8 行（双宽带）

[codevvvv9]

@hshpy
192.30.252.154 ，
192.30.252.153 这两个解析有问题吗

[honeyshine75]

怪不得刚刚打不开网页，河北联通复现

[dndx]

@razeen 这个 `traceroute` 不准的，因为 ICMP 并没有劫持。

[razeen]

@dndx 是的==

[Yuannnnn]

北京联通复现

[1002xin]

北京联通，未复现，一切正常

[Ljcbaby]

金华电信复现

[hshpy]

@codevvvv9 你换成上面那 4 个 IP 中的一个。

[rioshikelong121]

不说复不复现了。。我比较疑惑的是，这种事情后续应该谁来处理？

[villivateur]

江苏电信，江苏移动，你们说的域名我这里都打不开，连接超时