administrator@astra-77777:~$ sudo docker exec nsms-smp-gateway-service-1 sh -c '
echo "=== /etc/hosts ==="
grep -E "prime.it-enigma-ufa.local|vpn.it-enigma-ufa.local" /etc/hosts || true
echo
echo "=== DNS ==="
getent hosts vpn.it-enigma-ufa.local
echo
echo "=== CURL WITHOUT -k ==="
curl -v --connect-timeout 5 https://vpn.it-enigma-ufa.local:444/api/kc/version 2>&1 | tail -80
'
=== /etc/hosts ===
=== DNS ===
192.168.67.120 vpn.it-enigma-ufa.local
=== CURL WITHOUT -k ===
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Trying 192.168.67.120:444...
* Connected to vpn.it-enigma-ufa.local (192.168.67.120) port 444 (#0)
* ALPN: offers h2,http/1.1
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* CAfile: /etc/ssl/certs/ca-certificates.crt
* CApath: /etc/ssl/certs
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [80 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [1041 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [300 bytes data]
* TLSv1.2 (IN), TLS handshake, Request CERT (13):
{ [203 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Certificate (11):
} [7 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [37 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN: server accepted http/1.1
* Server certificate:
* subject: CN=prime.it-enigma-ufa.local; CN=*.it-enigma-ufa.local; CN=vpn.it-enigma-ufa.local
* start date: Sep 14 08:34:54 2026 GMT
* expire date: Sep 14 08:34:54 2027 GMT
* subjectAltName: host "vpn.it-enigma-ufa.local" matched cert's "*.it-enigma-ufa.local"
* issuer: C=RU; ST=Bashkortostan; L=Ufa; O=pisa; OU=pisa; CN=popa; emailAddress=fifa
* SSL certificate verify ok.
* using HTTP/1.1
} [5 bytes data]
> GET /api/kc/version HTTP/1.1
> Host: vpn.it-enigma-ufa.local:444
> User-Agent: curl/7.88.1
> Accept: */*
>
{ [5 bytes data]
< HTTP/1.1 200 OK
< Server: nginx
< Date: Wed, 23 Sep 2026 12:33:16 GMT
< Content-Type: application/json
< Transfer-Encoding: chunked
< Connection: keep-alive
< Expires: Wed, 23 Sep 2026 12:33:16 GMT
< Cache-Control: max-age=0
< Cache-Control: no-cache, no-store, must-revalidate
< Pragma: no-cache
< Expires: 0
<
{ [34 bytes data]
100 23 0 23 0 0 557 0 --:--:-- --:--:-- --:--:-- 560
* Connection #0 to host vpn.it-enigma-ufa.local left intact
{"version":"1.15.0.90"}administrator@astra-77777:~$
