Read about ssl certificate problem invalid certificate chain, The latest news, videos, and discussion topics about ssl certificate problem invalid certificate chain from alibabacloud.com
to the website based on the environment of our website. Lao Jiang is not deployed in this article. Later, he will use a separate article to deploy the StartSSL certificate to two common website environments: Apache and Nginx.V. Summary of StartSSL Free SSL certificate applicationThe process of applying for the StartSSL Free
SSL protocol and digital certificate principles
1st Floor
Handshake and communication over the SSL protocolTo better understand and understand the SSL protocol, we will introduce the handshake protocol of the SSL protocol. SS
Handshake and communication over the SSL protocol
To better understand and understand the SSL protocol, we will introduce the handshake protocol of the SSL protocol. SSL uses both public key encryption and symmetric encryption. Although symmetric encryption is faster than public key encryption, public key encryption pr
;return to Https://example.com$request_uri;}
Four, reliable Third-party SSL issuing agency
As we all know, some NIC agencies have burst into a scandal over the issuance of certificates for Google domain names, so it is important to select a reliable Third-party SSL issuer.
At present, the general market for small and medium-sized owners and enterprises of the SSL
separated by space or comma), the terms of confirmation, verify the domain name ownership (This step can choose the first way, manually select the root directory tomcat) will be displayed after successful execution congratulations! Your certificate and chain have been saved At/etc/letsencrypt/live/xxx.com/fullchain.pem. Your cert would expire on 2016-10-05. To obtain a new or tweaked version of this
Certificate Online ToolIf you are applying for the SSL certificate for the first time, if you are unfamiliar with how your server uses SSL certificates, we recommend that you use this set of tools, which support all SSL server certificat
At present, there are various types of websites. When we enter personal information on some websites, especially online banking transactions, how can we ensure that the websites you are facing are credible? By using the SSL Certificate of the website ID card, we can clearly understand whether the website is secure and trustworthy. Generally, the browser determines the security of these certificates. If we c
A complete SSL certificate is divided into four parts:
CA root certificate (Root CA)
Intermediate certificate (Intermediate Certificate)
Domain name Certificate
Certificat
Currently, many websites or services are implemented based on SSL and can be accessed only after certificates are downloaded and installed. If it can provide download, of course there are any problems.
However, if you do not have permission to download and it is not a CA certificate, it is only a self-Signed server certificate. Only know its port and address. If
After you enable Apache Mod_ssl, you need a certificate to function properly. Wrote a script to manipulate it. The first thing to make sure is that there are OpenSSL on the machine.
Copy Code code as follows:
#!/bin/sh
#
# The root directory for SSL certificate output.ssloutputroot= "/etc/apache_ssl"If [$#-eq 1]; ThenSsloutputroot=$1Fiif [!-D ${ss
In general, if you can find a certificate that is available, you can use it directly, except that some information about the certificate is incorrect or does not match the host that is deploying the certificate, but this does not affect the use of the browser prompt certificate.
You need to generate certificates manual
The following is a Java certificate: HTTPS and SSL application notes test. I hope this article will help you.
When a connection is obtained, like a normal browser, the server certificate is still verified to be trusted (issued by an authority or signed by an authority). If the server certificate is untrusted, the defau
-compatible versions, especially debian environment compatibility is better than CentOS.
For example, CentOS 6 64-bit environments do not support GIT, for more information, see "Linux CentOS 6 64-bit system installation Git tool environment tutorial" and "9 steps to upgrade CentOS 5 to Python 2.7.
The simplest is that the Debian environment is not supported. You can run "apt-get-y install git" to directly install the support. If CentOS runs "yum-y install git-core" directly.
The specific
get our domain name. Click Submit submission to see all domain name information, check no problem click Next to continue.
2, verify domain name information
Here you need to choose to verify personal information, here I choose to verify the mailbox, if we need to verify the domain name WHOIS before the privacy protection can be seen, because the mailbox is important, the following SSL
If our site projects are not important business sites, such as personal sites, blogs or simple projects need to use the SSL security certificate, in fact, the Internet currently provides a free SSL certificate enough for us to choose and use. In previous posts, Chiang has mentioned the perpetual free Let's Encrypt, Sta
Copy the corresponding SSL certificate file code from the certificate message or from the User CenterPaste the code into the TXT text fileThen save as a CER or CRT file, note that the code is ANSIIntermediate certificates and cross-certificates are also saved as CRT or CER files by the above methodOpen Iis> ManagementSelect the server you want to manageAfter sele
Https is also an ssl certificate. We generally think that https is secure, but the credit chain system of the SSL certificate is not secure. In particular, man-in-the-middle attacks are equally feasible in some countries where you can control CA root certificates. In additio
issue: The security certificate issued by this web site is not issued by a trusted certification authority.
The SSL certificate that the server is using is not issued through a formal global trust ca. Recommended purchase GlobalSign Ssl,geotrust SSL, Symante
)
③ Modify nginx Configuration
Listen 443;SERVER_NAME Zou. Lu;Index index.html index.htm index. php;Root/home/zoulu;Error_page 404 403 http://zou.lu;
SSL on;Ssl_certificate/root/zoulu/zou_lu.crt;Ssl_certificate_key/root/zoulu/zoulukey. pem;
Other configuration information is the same as that of a common site.Iv. Access test results
In Firefox English version/Chrome/Opera/Safari/IE 6, 7, 8 under all no pro
(accesslogvalve.java:931) at Org.apache.catalina.core.StandardEngineValve.invoke (standardenginevalve.java:118) at Org.apache.catalina.ha.tcp.ReplicationValve.invoke (replicationvalve.java:333) at Org.apache.catalina.connector.CoyoteAdapter.service (coyoteadapter.java:407) at Org.apache.coyote.http11.AbstractHttp11Processor.process (abstracthttp11processor.java:1004) at Org.apache.coyote . Abstractprotocol$abstractconnectionhandler.process (abstractprotocol.java:589) at Org.apache.tomcat.util.n
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.