---

administrator@astra-77777:~$ sudo docker exec nsms-smp-gateway-service-1 sh -c '
echo "=== .NET VERSION ==="
dotnet --info 2>/dev/null | head -30

echo
echo "=== CONTAINER TIME ==="
date -u

echo
echo "=== CERTIFICATE VIA OPENSSL ==="
openssl s_client \
  -connect vpn.it-enigma-ufa.local:444 \
  -servername vpn.it-enigma-ufa.local \
  -verify_return_error \
  </dev/null 2>&1 | tail -50
'
sudo docker exec nsms-smp-gateway-service-1 sh -c '
curl -v --http1.1 --connect-timeout 5 \
  https://vpn.it-enigma-ufa.local:444/api/kc/version 2>&1 | \
  grep -E "Trying|Connected|subject:|issuer:|subjectAltName|SSL certificate|verify|GET|HTTP/"
'
=== .NET VERSION ===

=== CONTAINER TIME ===
Wed Sep 23 12:39:29 UTC 2026

=== CERTIFICATE VIA OPENSSL ===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-----END CERTIFICATE-----
subject=CN=prime.it-enigma-ufa.local, CN=*.it-enigma-ufa.local, CN=vpn.it-enigma-ufa.local
issuer=C=RU, ST=Bashkortostan, L=Ufa, O=pisa, OU=pisa, CN=popa, emailAddress=fifa
---
Acceptable client certificate CA names
C=RU, ST=Bashkortostan, L=Ufa, O=pisa, OU=pisa, CN=popa, emailAddress=fifa
Client Certificate Types: RSA sign, DSA sign, ECDSA sign
Requested Signature Algorithms: ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:Ed25519:Ed448:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA224:ECDSA+SHA1:RSA+SHA224:RSA+SHA1:DSA+SHA224:DSA+SHA1:DSA+SHA256:DSA+SHA384:DSA+SHA512:UNDEF:UNDEF:UNDEF:UNDEF:UNDEF:UNDEF:UNDEF:UNDEF:UNDEF:UNDEF:UNDEF:UNDEF
Shared Requested Signature Algorithms: ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:Ed25519:Ed448:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA224:RSA+SHA224:DSA+SHA224:DSA+SHA256:DSA+SHA384:DSA+SHA512
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 1689 bytes and written 448 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Protocol: TLSv1.2
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 
    Session-ID-ctx: 
    Master-Key: 7058A561232E56037F31830F6D78049964B6F555A1F0864270FD202B91A188F3CBBE400F4CAB14219E1F6B78A34C3528
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1790167169
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---
DONE
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0*   Trying 192.168.67.120:444...
* Connected to vpn.it-enigma-ufa.local (192.168.67.120) port 444 (#0)
*  subject: CN=prime.it-enigma-ufa.local; CN=*.it-enigma-ufa.local; CN=vpn.it-enigma-ufa.local
*  subjectAltName: host "vpn.it-enigma-ufa.local" matched cert's "*.it-enigma-ufa.local"
*  issuer: C=RU; ST=Bashkortostan; L=Ufa; O=pisa; OU=pisa; CN=popa; emailAddress=fifa
*  SSL certificate verify ok.
* using HTTP/1.1
> GET /api/kc/version HTTP/1.1
< HTTP/1.1 200 OK
administrator@astra-77777:~$