(base) hazel@Hazels-MBP-2 src % curl -sLv -X POST \
-H 'Content-Type: application/json' \
https://icp0.io/registrations \
--data @- <<EOF
{
"name": "app.unid.ooo"
}
EOF
* Trying 139.178.83.182:443...
* Connected to icp0.io (139.178.83.182) port 443 (#0)
* ALPN: offers h2
* ALPN: offers http/1.1
* CAfile: /Users/hazel/opt/anaconda3/ssl/cacert.pem
* CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN: server accepted h2
* Server certificate:
* subject: CN=boundary.dfinity.network
* start date: Feb 16 19:26:59 2023 GMT
* expire date: May 17 19:26:58 2023 GMT
* subjectAltName: host "icp0.io" matched cert's "icp0.io"
* issuer: C=US; O=Let's Encrypt; CN=R3
* SSL certificate verify ok.
* Using HTTP2, server supports multiplexing
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* h2h3 [:method: POST]
* h2h3 [:path: /registrations]
* h2h3 [:scheme: https]
* h2h3 [:authority: icp0.io]
* h2h3 [user-agent: curl/7.84.0]
* h2h3 [accept: */*]
* h2h3 [content-type: application/json]
* h2h3 [content-length: 28]
* Using Stream ID: 1 (easy handle 0x7fcc5800da00)
> POST /registrations HTTP/2
> Host: icp0.io
> user-agent: curl/7.84.0
> accept: */*
> content-type: application/json
> content-length: 28
>
* We are completely uploaded and fine
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 256)!
< HTTP/2 500
< server: nginx/1.21.3
< date: Sun, 19 Mar 2023 16:50:35 GMT
< content-length: 16
< access-control-allow-origin: *
< access-control-allow-methods: HEAD, POST
< access-control-allow-credentials: true
< access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-None-Match,If-Modified-Since,Cache-Control,Content-Type,Range,Cookie
< access-control-expose-headers: Accept-Ranges,Content-Length,Content-Range
< access-control-max-age: 600
<
* TLSv1.3 (IN), TLS alert, close notify (256):
* Closing connection 0
* TLSv1.3 (OUT), TLS alert, close notify (256):
unexpected error
(base) hazel@Hazels-MBP-2 src % dig TXT _canister-id.app.unid.ooo
; <<>> DiG 9.10.6 <<>> TXT _canister-id.app.unid.ooo
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19452
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;_canister-id.app.unid.ooo. IN TXT
;; ANSWER SECTION:
_canister-id.app.unid.ooo. 60 IN TXT "2ddhz-5aaaa-aaaam-abf4a-cai"
;; Query time: 84 msec
;; SERVER: 192.168.0.1#53(192.168.0.1)
;; WHEN: Sun Mar 19 13:02:59 EDT 2023
;; MSG SIZE rcvd: 94
(base) hazel@Hazels-MBP-2 src % dig TXT _acme-challenge.app.unid.ooo
; <<>> DiG 9.10.6 <<>> TXT _acme-challenge.app.unid.ooo
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52651
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;_acme-challenge.app.unid.ooo. IN TXT
;; ANSWER SECTION:
_acme-challenge.app.unid.ooo. 60 IN CNAME _acme-challenge.app.unid.ooo.icp2.io.
;; AUTHORITY SECTION:
icp2.io. 1060 IN SOA clay.ns.cloudflare.com. dns.cloudflare.com. 2304582871 10000 2400 604800 3600
;; Query time: 65 msec
;; SERVER: 192.168.0.1#53(192.168.0.1)
;; WHEN: Sun Mar 19 13:03:40 EDT 2023
;; MSG SIZE rcvd: 169
2ddhz-5aaaa-aaaam-abf4a-cai.icp0.io/.well-known/ic-domains
it’s only turned on for a canary… we haven’t rolled it out everywhere.
)
.