public
Created

From my VPS in Shanghai I do not experience the SSL forgery being widely reported. https://news.ycombinator.com/item?id=5124784

  • Download Gist
curl-head-github.sh
Shell
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62
$ curl --head -v https://github.com/matthewrudy
* About to connect() to github.com port 443 (#0)
* Trying 207.97.227.239... connected
* Connected to github.com (207.97.227.239) port 443 (#0)
* successfully set certificate verify locations:
* CAfile: none
CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using RC4-SHA
* Server certificate:
* subject: businessCategory=Private Organization; 1.3.6.1.4.1.311.60.2.1.3=US; 1.3.6.1.4.1.311.60.2.1.2=California; serialNumber=C3268102; C=US; ST=California; L=San Francisco; O=GitHub, Inc.; CN=github.com
* start date: 2011-05-27 00:00:00 GMT
* expire date: 2013-07-29 12:00:00 GMT
* subjectAltName: github.com matched
* issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=DigiCert High Assurance EV CA-1
* SSL certificate verify ok.
> HEAD /matthewrudy HTTP/1.1
> User-Agent: curl/7.21.6 (i686-pc-linux-gnu) libcurl/7.21.6 OpenSSL/1.0.0e zlib/1.2.3.4 libidn/1.22 librtmp/2.3
> Host: github.com
> Accept: */*
>
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Server: GitHub.com
Server: GitHub.com
< Date: Sun, 27 Jan 2013 19:31:41 GMT
Date: Sun, 27 Jan 2013 19:31:41 GMT
< Content-Type: text/html; charset=utf-8
Content-Type: text/html; charset=utf-8
< Connection: keep-alive
Connection: keep-alive
< Status: 200 OK
Status: 200 OK
< X-Runtime: 112
X-Runtime: 112
< Set-Cookie: logged_in=no; domain=.github.com; path=/; expires=Thu, 27-Jan-2033 19:31:41 GMT
Set-Cookie: logged_in=no; domain=.github.com; path=/; expires=Thu, 27-Jan-2033 19:31:41 GMT
< Set-Cookie: _gh_sess=BAh7BzoPc2Vzc2lvbl9pZCIlYmE3NzI3YmRlYmU3Y2EwNWQ4ZWQyNjI5ZjQxMDg0Y2Q6EF9jc3JmX3Rva2VuIjEydUo5KzdYSWNXaXZ0STBCeXpoV3YxeDc2QzdHSUtVT096TXVjUTZtWUxvPQ%3D%3D--33bf206fe825dec56c84222ccb61d9a89fa50bfb; path=/; expires=Sun, 01-Jan-2023 00:00:00 GMT; secure; HttpOnly
Set-Cookie: _gh_sess=BAh7BzoPc2Vzc2lvbl9pZCIlYmE3NzI3YmRlYmU3Y2EwNWQ4ZWQyNjI5ZjQxMDg0Y2Q6EF9jc3JmX3Rva2VuIjEydUo5KzdYSWNXaXZ0STBCeXpoV3YxeDc2QzdHSUtVT096TXVjUTZtWUxvPQ%3D%3D--33bf206fe825dec56c84222ccb61d9a89fa50bfb; path=/; expires=Sun, 01-Jan-2023 00:00:00 GMT; secure; HttpOnly
< Cache-Control: private, max-age=0, must-revalidate
Cache-Control: private, max-age=0, must-revalidate
< Content-Length: 33789
Content-Length: 33789
< ETag: "bb470d0c8871301c0fa64659e233e4f8"
ETag: "bb470d0c8871301c0fa64659e233e4f8"
< X-Frame-Options: deny
X-Frame-Options: deny
< Strict-Transport-Security: max-age=2592000
Strict-Transport-Security: max-age=2592000
 
<
* Connection #0 to host github.com left intact
* Closing connection #0
* SSLv3, TLS alert, Client hello (1):
traceroute-github.sh
Shell
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
$ traceroute github.com
traceroute to github.com (207.97.227.239), 30 hops max, 60 byte packets
1 180.153.xxx.xxx (180.153.xxx.xxx) 1.023 ms 1.281 ms 1.287 ms
2 222.73.0.161 (222.73.0.161) 1.636 ms 1.513 ms 1.361 ms
3 222.73.87.105 (222.73.87.105) 6.031 ms 5.748 ms 222.73.87.121 (222.73.87.121) 1.931 ms
4 124.74.254.137 (124.74.254.137) 1.295 ms 124.74.166.117 (124.74.166.117) 1.416 ms 124.74.166.17 (124.74.166.17) 1.030 ms
5 61.152.86.58 (61.152.86.58) 1.546 ms 202.101.63.130 (202.101.63.130) 1.353 ms 1.201 ms
6 202.97.33.98 (202.97.33.98) 1.642 ms 202.97.50.246 (202.97.50.246) 1.633 ms 202.97.33.98 (202.97.33.98) 1.448 ms
7 202.97.34.98 (202.97.34.98) 2.636 ms 202.97.35.22 (202.97.35.22) 2.669 ms 202.97.33.122 (202.97.33.122) 1.681 ms
8 202.97.50.90 (202.97.50.90) 140.741 ms 140.569 ms 140.321 ms
9 202.97.51.10 (202.97.51.10) 136.379 ms 136.224 ms 136.046 ms
10 xe-4-3-1.edge1.SanJose3.Level3.net (4.71.114.101) 335.793 ms 335.602 ms 335.384 ms
11 vlan60.csw1.SanJose1.Level3.net (4.69.152.62) 576.833 ms 576.647 ms vlan80.csw3.SanJose1.Level3.net (4.69.152.190) 610.850 ms
12 ae-81-81.ebr1.SanJose1.Level3.net (4.69.153.9) 598.718 ms 599.036 ms ae-91-91.ebr1.SanJose1.Level3.net (4.69.153.13) 624.249 ms
13 ae-2-2.ebr2.NewYork1.Level3.net (4.69.135.186) 600.656 ms 601.020 ms 697.965 ms
14 * ae-6-6.ebr2.NewYork2.Level3.net (4.69.141.22) 722.009 ms 721.853 ms
15 ae-1-100.ebr1.NewYork2.Level3.net (4.69.135.253) 706.123 ms 712.175 ms *
16 ae-3-3.ebr2.Washington1.Level3.net (4.69.132.89) 698.717 ms 698.630 ms 699.059 ms
17 ae-62-62.csw1.Washington1.Level3.net (4.69.134.146) 699.765 ms 699.569 ms ae-72-72.csw2.Washington1.Level3.net (4.69.134.150) 706.649 ms
18 ae-3-80.edge1.Washington4.Level3.net (4.69.149.143) 703.538 ms ae-4-90.edge1.Washington4.Level3.net (4.69.149.207) 715.566 ms 715.478 ms
19 RACKSPACE-M.edge1.Washington4.Level3.net (4.53.112.46) 339.253 ms 338.908 ms 338.213 ms
20 vlan905.core5.iad2.rackspace.net (72.4.122.10) 338.354 ms 338.757 ms 338.096 ms
21 aggr301a-1-core5.iad2.rackspace.net (72.4.122.121) 439.950 ms 439.822 ms 440.068 ms
22 github.com (207.97.227.239) 338.745 ms 338.928 ms 338.565 ms

Please sign in to comment on this gist.

Something went wrong with that request. Please try again.