unable to load client certificat

解决方法可以跳过看最后！！！o(￣︶￣)o

终端执行

openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert MyPushChat.pem -key MyPushChatKey.pem

报错：

unable to load client certificate private key file
140735947195336:error:0906D06C:PEM routines:PEM_read_bio:no start line:/BuildRoot/Library/Caches/com.apple.xbs/Sources/libressl/libressl-22.50.2/libressl/crypto/pem/pem_lib.c:704:Expecting: ANY PRIVATE KEY

目前还不知道什么原因造成的，正在研究。。。

哈哈哈哈哈哈o(￣︶￣)o OK了，打印如下

openssl s_client -connect gateway.sandbox.push.apple.com:2195
CONNECTED(00000007)
depth=1 C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2012 Entrust, Inc. - for authorized use only", CN = Entrust Certification Authority - L1K
verify error:num=20:unable to get local issuer certificate
verify return:0
140735947195336:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:/BuildRoot/Library/Caches/com.apple.xbs/Sources/libressl/libressl-22.50.2/libressl/ssl/s3_pkt.c:1133:SSL alert number 40
140735947195336:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:/BuildRoot/Library/Caches/com.apple.xbs/Sources/libressl/libressl-22.50.2/libressl/ssl/s23_lib.c:124:
---
Certificate chain
 0 s:/C=US/ST=California/L=Cupertino/O=Apple Inc./CN=gateway.sandbox.push.apple.com
   i:/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2012 Entrust, Inc. - for authorized use only/CN=Entrust Certification Authority - L1K
 1 s:/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2012 Entrust, Inc. - for authorized use only/CN=Entrust Certification Authority - L1K
   i:/O=Entrust.net/OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)/OU=(c) 1999 Entrust.net Limited/CN=Entrust.net Certification Authority (2048)
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/L=Cupertino/O=Apple Inc./CN=gateway.sandbox.push.apple.com
issuer=/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2012 Entrust, Inc. - for authorized use only/CN=Entrust Certification Authority - L1K
---
Acceptable client certificate CA names
/C=US/O=Apple Inc./OU=Apple Certification Authority/CN=Apple Root CA
/C=US/O=Apple Inc./OU=Apple Worldwide Developer Relations/CN=Apple Worldwide Developer Relations Certification Authority
/CN=Apple Application Integration 2 Certification Authority/OU=Apple Certification Authority/O=Apple Inc./C=US
/C=US/ST=CA/L=Cupertino/O=Apple Inc./OU=Internet Software and Services/CN=iCloud Test/emailAddress=APNS-Dev@group.apple.com
/C=US/ST=California/L=Cupertino/O=Apple Inc./CN=gateway.sandbox.push.apple.com
/C=US/O=Apple Inc./OU=Apple Certification Authority/CN=Apple Application Integration Certification Authority
---
SSL handshake has read 4113 bytes and written 338 bytes
---
New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : DES-CBC3-SHA
    Session-ID: 
    Session-ID-ctx: 
    Master-Key: 60FC1E3D80911B5BDDE92DA518E362D0DBFDD3D984821DADC2EFD2827EEB57264049079AE54BB69088143BC032D947B6
    Start Time: 1526560744
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---
openssl s_client -connect gateway.sandbox.push.apple.com:2195
CONNECTED(00000007)
depth=1 C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2012 Entrust, Inc. - for authorized use only", CN = Entrust Certification Authority - L1K
verify error:num=20:unable to get local issuer certificate
verify return:0
140735947195336:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:/BuildRoot/Library/Caches/com.apple.xbs/Sources/libressl/libressl-22.50.2/libressl/ssl/s3_pkt.c:1133:SSL alert number 40
140735947195336:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:/BuildRoot/Library/Caches/com.apple.xbs/Sources/libressl/libressl-22.50.2/libressl/ssl/s23_lib.c:124:
---
Certificate chain
 0 s:/C=US/ST=California/L=Cupertino/O=Apple Inc./CN=gateway.sandbox.push.apple.com
   i:/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2012 Entrust, Inc. - for authorized use only/CN=Entrust Certification Authority - L1K
 1 s:/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2012 Entrust, Inc. - for authorized use only/CN=Entrust Certification Authority - L1K
   i:/O=Entrust.net/OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)/OU=(c) 1999 Entrust.net Limited/CN=Entrust.net Certification Authority (2048)
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/L=Cupertino/O=Apple Inc./CN=gateway.sandbox.push.apple.com
issuer=/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2012 Entrust, Inc. - for authorized use only/CN=Entrust Certification Authority - L1K
---
Acceptable client certificate CA names
/C=US/O=Apple Inc./OU=Apple Certification Authority/CN=Apple Root CA
/C=US/O=Apple Inc./OU=Apple Worldwide Developer Relations/CN=Apple Worldwide Developer Relations Certification Authority
/CN=Apple Application Integration 2 Certification Authority/OU=Apple Certification Authority/O=Apple Inc./C=US
/C=US/ST=CA/L=Cupertino/O=Apple Inc./OU=Internet Software and Services/CN=iCloud Test/emailAddress=APNS-Dev@group.apple.com
/C=US/ST=California/L=Cupertino/O=Apple Inc./CN=gateway.sandbox.push.apple.com
/C=US/O=Apple Inc./OU=Apple Certification Authority/CN=Apple Application Integration Certification Authority
---
SSL handshake has read 4113 bytes and written 338 bytes
---
New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : DES-CBC3-SHA
    Session-ID: 
    Session-ID-ctx: 
    Master-Key: 60FC1E3D80911B5BDDE92DA518E362D0DBFDD3D984821DADC2EFD2827EEB57264049079AE54BB69088143BC032D947B6
    Start Time: 1526560744
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---

直接复制下面这两行，两行，两行命令行
*注意：这里是两行代码

openssl s_client -connect gateway.sandbox.push.apple.com:2195
-cert MyPushChatCert.pem -key MyPushChatKey.pem