测试时还要再加上 -k 参数,不然会出现你上面的这个 ssl 证书错误。
我在你服务器上测试是成功的。
# curl -kv -g -6 "https://[2001:470:c:afd::2]:443/" -H "Host: app.xxxxxx.com" | head
* About to connect() to 2001:470:c:afd::2 port 443 (#0)
* Trying 2001:470:c:afd::2...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Connected to 2001:470:c:afd::2 (2001:470:c:afd::2) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* skipping SSL peer certificate verification
* SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
* Server certificate:
* subject: CN=AppNode Auto Generated Wildcard Certificate,OU=AppNode,O="Fuzhou Quyun Information Technology Co., Ltd",L=Fuzhou,ST=Fujian,C=CN
* start date: Apr 05 07:42:13 2018 GMT
* expire date: Apr 05 07:42:13 2038 GMT
* common name: AppNode Auto Generated Wildcard Certificate
* issuer: CN=AppNode Auto Generated Wildcard Certificate,OU=AppNode,O="Fuzhou Quyun Information Technology Co., Ltd",L=Fuzhou,ST=Fujian,C=CN
> GET / HTTP/1.1
> User-Agent: curl/7.29.0
> Accept: */*
> Host: app.xxxxxxx.com
>
< HTTP/1.1 200 OK
< Server: nginx/1.14.0
< Date: Fri, 13 Jul 2018 15:08:06 GMT
< Content-Type: text/html; charset=utf-8
< Transfer-Encoding: chunked
< Connection: keep-alive
< Access-Control-Allow-Origin: *
< Set-Cookie: PHPSESSID=jtg7j07j06i9nr3m3r821oa757; path=/
< Expires: Thu, 19 Nov 1981 08:52:00 GMT
< Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
< Pragma: no-cache
< Access-Control-Allow-Origin: *
<
{ [data not shown]
100 58933 0 58933 0 0 181k 0 --:--:-- --:--:-- --:--:-- 182k
* Connection #0 to host 2001:470:c:afd::2 left intact