加密以后程序需要访问就不能采用修改配置的访问了。具体方法如下： $ openssl s_client -showcerts -connect YourDomainName OR HostIP:443 null 2>/dev/null|openssl x509 -outform PEM >ca.crt $ cat ca.crt | sudo tee -a /etc/ssl/certs/ca-certificates {"id":"/basic-0","cmd":"while [ true ] ; do echo 'Hello Marathon' ; sleep 5 ; d one","args":null,"user":null,"env":{},"instances":1,"cpus":0.1,"mem":10,"disk": 0,"executor":"","constraints":[],"uris":[] "maxLaunchDelaySeconds":360 0,"container":null,"healthChecks":[],"dependencies":[],"upgradeStrategy":{"mini mumHealthCapacity":1,"maximumOverCapacity":1},"labels":{},"acceptedResourceRole s":null,"version":"2015-12-28T05:33:05