URenko / Accesser

🌏一个解决SNI RST导致维基百科、Pixiv等站点无法访问的工具 | A tool for solving SNI RST
GNU General Public License v3.0
865 stars 77 forks source link

请问['upos-sz-mirror08c.bilivideo.com'] don't march either of是什么错误 #177

Closed conanlm closed 1 month ago

conanlm commented 1 month ago

公司把许多视频网站封了,我想上b站 添加了b站相关地址,页面能加载,但是视频会报这个错,是什么问题啊

                    WARNING  [ 6324] ['upos-sz-mirror08c.bilivideo.com'] don't march either of          __init__.py:148                              subjectAltName: (('DNS', 'n.cdnhwc3.com'), ('DNS',                                                                      'appgallery.huawei.com'), ('DNS', '*.n.cdnhwc3.com'), ('DNS',                                                           '*.cntv.myhwcdn.cn'), ('DNS', '*.cdnhwc3.com'), ('DNS', '*.hicloud.com'),                                               ('DNS', '*.dt.hicloud.com'), ('DNS', '*.data.hicloud.com'), ('DNS',                                                     '*.data.dbankcloud.cn'), ('DNS', '*.data.dbankcloud.com'), ('DNS',                                                      '*.dt.dbankcloud.com'), ('DNS', '*.dt.dbankcloud.cn'), ('DNS',                                                          '*.dbankcloud.cn'), ('DNS', '*.dbankcloud.com'), ('DNS',                                                                '*.huawei.com.cn'), ('DNS', '*.cloud.huawei.com'), ('DNS',                                                              '*.cloud.huawei.com.cn'), ('DNS', '*.hispace.hicloud.com'), ('DNS',                                                     '*.hispace.dbankcloud.cn'), ('DNS', '*.hispace.dbankcloud.com'), ('DNS',                                                '*.push.dbankcloud.com'), ('DNS', '*.push.hicloud.com'), ('DNS',                                                        '*.push.dbankcloud.cn'), ('DNS', '*.ads.huawei.com'), ('DNS',                                                           '*.op.cloud.huawei.com'), ('DNS', '*.ads.huawei.com.cn'), ('DNS',                                                       '*.platform.hicloud.com'), ('DNS', '*.platform.dbankcloud.com'), ('DNS',                                                '*.platform.dbankcloud.cn'), ('DNS', '*.cloud.hicloud.com'), ('DNS',                                                    '*.cloud.dbankcloud.com'), ('DNS', '*.cloud.dbankcloud.cn'), ('DNS',                                                    '*.wallet.dbankcloud.com'), ('DNS', '*.iap.dbankcloud.com'), ('DNS',                                                    '*.dianping.com'), ('DNS', '*.dpfile.com'), ('DNS', '*.meituan.net'),                                                   ('DNS', '*.zservey.net')), subject: ((('countryName', 'CN'),),                                                          (('stateOrProvinceName', 'Jiangsu'),), (('localityName', 'Nanjing'),),                                                  (('organizationName', 'Huawei Software Technologies Co., Ltd.'),),                                                      (('commonName', 'n.cdnhwc3.com'),)).     
jonm58 commented 1 month ago

RyoMoffster 你是怎么加进去的?

Xihihhh commented 1 month ago

域名多,而且应该没啥安全问题,干脆直接关闭证书校验:

修改config.toml中 check_hostname 的值为 false,即 check_hostname = false

conanlm commented 1 month ago

RyoMoffster 你是怎么加进去的?

我是在PAC文件 var domains里面添加 "bilibili.com": 1, "hdslb.com": 1, "i1.hdslb.com": 1, "bilivideo.com": 1,

Xihihhh commented 1 month ago

"hdslb.com": 1,

加了一级域名,其子域名也会走 Accesser,不必再加 i1.hdslb.com

conanlm commented 1 month ago

"hdslb.com": 1,

加了一级域名,其子域名也会走 Accesser,不必再加 i1.hdslb.com

开始我是只加了hdslb.com,还是访问不了,所以尝试加了 i1.hdslb.com

Xihihhh commented 1 month ago

"hdslb.com": 1,

加了一级域名,其子域名也会走 Accesser,不必再加 i1.hdslb.com

开始我是只加了hdslb.com,还是访问不了,所以尝试加了 i1.hdslb.com

访问不了是因为证书校验问题,关闭校验就行了

conanlm commented 1 month ago

"hdslb.com": 1,

加了一级域名,其子域名也会走 Accesser,不必再加 i1.hdslb.com

开始我是只加了hdslb.com,还是访问不了,所以尝试加了 i1.hdslb.com

访问不了是因为证书校验问题,关闭校验就行了

这是我fork https://github.com/conanlm/Accesser 的地址 还是不行,b站页面能打开了,但是hdslb.com地址还是加载不了 图片_lanxin_20240716104856

jonm58 commented 1 month ago

"hdslb.com": 1,

加了一级域名,其子域名也会走 Accesser,不必再加 i1.hdslb.com

开始我是只加了hdslb.com,还是访问不了,所以尝试加了 i1.hdslb.com

访问不了是因为证书校验问题,关闭校验就行了

这是我fork https://github.com/conanlm/Accesser 的地址 还是不行,b站页面能打开了,但是hdslb.com地址还是加载不了 图片_lanxin_20240716104856

修改DNS为114.114.114.114之类的

conanlm commented 1 month ago

"hdslb.com": 1,

加了一级域名,其子域名也会走 Accesser,不必再加 i1.hdslb.com

开始我是只加了hdslb.com,还是访问不了,所以尝试加了 i1.hdslb.com

访问不了是因为证书校验问题,关闭校验就行了

这是我fork https://github.com/conanlm/Accesser 的地址 还是不行,b站页面能打开了,但是hdslb.com地址还是加载不了 图片_lanxin_20240716104856

修改DNS为114.114.114.114之类的

是 config.toml里的 dns吗

jonm58 commented 1 month ago

"hdslb.com": 1,

加了一级域名,其子域名也会走 Accesser,不必再加 i1.hdslb.com

开始我是只加了hdslb.com,还是访问不了,所以尝试加了 i1.hdslb.com

访问不了是因为证书校验问题,关闭校验就行了

这是我fork https://github.com/conanlm/Accesser 的地址 还是不行,b站页面能打开了,但是hdslb.com地址还是加载不了 图片_lanxin_20240716104856

修改DNS为114.114.114.114之类的

是 config.toml里的 dns吗

是的

conanlm commented 1 month ago

"hdslb.com": 1,

加了一级域名,其子域名也会走 Accesser,不必再加 i1.hdslb.com

开始我是只加了hdslb.com,还是访问不了,所以尝试加了 i1.hdslb.com

访问不了是因为证书校验问题,关闭校验就行了

这是我fork https://github.com/conanlm/Accesser 的地址 还是不行,b站页面能打开了,但是hdslb.com地址还是加载不了 图片_lanxin_20240716104856

修改DNS为114.114.114.114之类的

是 config.toml里的 dns吗

是的

还是不太行,午休期间是可以正常访问的。 不开软件正常访问,打开软件,就加载不正常了

jonm58 commented 1 month ago

CORS? 还是*.hdslb.com的IP被屏蔽了?

conanlm commented 1 month ago

CORS? 还是*.hdslb.com的IP被屏蔽了?

image

jonm58 commented 1 month ago

加上这些试试看

s1.hdslb.com
s2.hdslb.com
s3.hdslb.com
i0.hdslb.com
i1.hdslb.com
i2.hdslb.com
i3.hdslb.com

去掉hdslb.com

jonm58 commented 1 month ago

用Accesser访问www.gov.cn可能也有这个问题

conanlm commented 1 month ago

加上这些试试看

s1.hdslb.com
s2.hdslb.com
s3.hdslb.com
i0.hdslb.com
i1.hdslb.com
i2.hdslb.com
i3.hdslb.com

去掉hdslb.com

没什么变化

jonm58 commented 1 month ago

你测试一下 https://s1.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png https://s2.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png https://s3.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png https://i0.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png https://i1.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png https://i2.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png https://i3.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png

找个可以使用的hdslb.com使用[http_redirect]进行替换

conanlm commented 1 month ago

你测试一下 https://s1.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png https://s2.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png https://s3.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png https://i0.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png https://i1.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png https://i2.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png https://i3.hdslb.com/bfs/space/6bcf4599696f7aec0bd6ebd3693beb82c7fedb25.png

找个可以使用的hdslb.com进行替换

是在不开软件时,打开上面页面吗,都打不开啊😭 开着软件,也打不开

jonm58 commented 1 month ago

在开软件时,打开上面页面

conanlm commented 1 month ago

在开软件时,打开上面页面

开着也不行,这个有没有涉及到缓存啊,会不会产生影响 其实我不是很懂这个原理😅

jonm58 commented 1 month ago

在[http_redirect]里 "s1.hdslb.com/" = "i0.hdslb.com/" "s2.hdslb.com/" = "i0.hdslb.com/" "s3.hdslb.com/" = "i0.hdslb.com/" "i1.hdslb.com/" = "i0.hdslb.com/" "i2.hdslb.com/" = "i0.hdslb.com/" "i3.hdslb.com/" = "i0.hdslb.com/"

在[alter_hostname]里 "i0.hdslb.com" = "xn--6iq3kq43dsq8aeuj.alicdn.com"

在[cert_verify]里 "i0.hdslb.com" = ["alicdn.com"]

在[hosts]里 "i0.hdslb.com" = "121.194.10.88"

conanlm commented 1 month ago

有部分可以了,但是视频还是加载不出来 image

jonm58 commented 1 month ago

在[alter_hostname]里 "upos-sz-mirror08c.bilivideo.com" = "appgallery.huawei.com" "upos-sz-mirror08h.bilivideo.com" = "appgallery.huawei.com" "upos-sz-mirrorcos.bilivideo.com" = "xn--()-o13aus685jthap52adx4b1ccrsrl91bxbdwr5apudf51i.cdn.myqcloud.com" "upos-sz-mirrorcosb.bilivideo.com" = "luna_say_maybe.a.yximgs.com" "upos-sz-mirrorbos.bilivideo.com" = "xn--n8jz80g4b554aznsbs2alsg.a.bdydns.com" "upos-sz-mirrorhw.bilivideo.com" = "xn--cckea33a.ctcdn.cn" "upos-sz-mirrorhwb.bilivideo.com" = "yellow_big_bang!.ctcdn.cn"

在[cert_verify]里 "upos-sz-mirror08c.bilivideo.com" = ["appgallery.huawei.com"] "upos-sz-mirror08h.bilivideo.com" = ["appgallery.huawei.com"] "upos-sz-mirrorcos.bilivideo.com" = ["cdn.myqcloud.com"] "upos-sz-mirrorcosb.bilivideo.com" = ["a.yximgs.com", "a.etoote.com", "a.yximgs.com"] "upos-sz-mirrorbos.bilivideo.com" = ["a.bdydns.com"] "upos-sz-mirrorhw.bilivideo.com" = ["ctcdn.cn"] "upos-sz-mirrorhwb.bilivideo.com" = ["ctcdn.cn"]

在[hosts]里 "upos-sz-mirror08c.bilivideo.com" = "121.194.10.211" "upos-sz-mirror08h.bilivideo.com" = "121.194.10.211" "upos-sz-mirrorcos.bilivideo.com" = "61.240.216.135" "upos-sz-mirrorcosb.bilivideo.com" = "116.162.124.9" "upos-sz-mirrorbos.bilivideo.com" = "182.140.225.41" "upos-sz-mirrorhw.bilivideo.com" = "118.123.20.59" "upos-sz-mirrorhwb.bilivideo.com" = "220.163.254.25"

conanlm commented 1 month ago

在[alter_hostname]里 "upos-sz-mirror08c.bilivideo.com" = "appgallery.huawei.com" "upos-sz-mirror08h.bilivideo.com" = "appgallery.huawei.com" "upos-sz-mirrorcos.bilivideo.com" = "xn--()-o13aus685jthap52adx4b1ccrsrl91bxbdwr5apudf51i.cdn.myqcloud.com" "upos-sz-mirrorcosb.bilivideo.com" = "luna_say_maybe.a.yximgs.com" "upos-sz-mirrorbos.bilivideo.com" = "xn--n8jz80g4b554aznsbs2alsg.a.bdydns.com" "upos-sz-mirrorhw.bilivideo.com" = "xn--cckea33a.ctcdn.cn" "upos-sz-mirrorhwb.bilivideo.com" = "yellow_big_bang!.ctcdn.cn"

在[cert_verify]里 "upos-sz-mirror08c.bilivideo.com" = ["appgallery.huawei.com"] "upos-sz-mirror08h.bilivideo.com" = ["appgallery.huawei.com"] "upos-sz-mirrorcos.bilivideo.com" = ["cdn.myqcloud.com"] "upos-sz-mirrorcosb.bilivideo.com" = ["a.yximgs.com", "a.etoote.com", "a.yximgs.com"] "upos-sz-mirrorbos.bilivideo.com" = ["a.bdydns.com"] "upos-sz-mirrorhw.bilivideo.com" = ["ctcdn.cn"] "upos-sz-mirrorhwb.bilivideo.com" = ["ctcdn.cn"]

在[hosts]里 "upos-sz-mirror08c.bilivideo.com" = "121.194.10.211" "upos-sz-mirror08h.bilivideo.com" = "121.194.10.211" "upos-sz-mirrorcos.bilivideo.com" = "61.240.216.135" "upos-sz-mirrorcosb.bilivideo.com" = "116.162.124.9" "upos-sz-mirrorbos.bilivideo.com" = "182.140.225.41" "upos-sz-mirrorhw.bilivideo.com" = "118.123.20.59" "upos-sz-mirrorhwb.bilivideo.com" = "220.163.254.25"

大善人啊,可以加载视频了 这么耐心,把配置写好给我,真的好久没遇到这么好的人了😹

我还想学习一下,要是不复杂,能说明一下alter_hostname 和 cert_verify 两个参数是怎么获得的吗? 以后我要是再加其他地址,就不麻烦大家了

jonm58 commented 1 month ago

图片

conanlm commented 1 month ago

图片

谢谢🙏

jonm58 commented 1 month ago

图片

谢谢🙏

关闭issue

Xihihhh commented 1 month ago

运行日志 don't match either of 后面的一大堆域名选一个也行。

奇怪,我这只要关闭证书校验再用国内 DNS 就可以了,不会有”don't match either of “提示。🤔

URenko commented 1 month ago

可能 DNS 返回不同的 IP 对应的 CDN 提供商有不同的要求。 没贴 DNS 相关日志不好验证。

另外 http_redirect 只用于 HTTP 而非 HTTPS,一般都不用