Curl error: Problem with the ssl ca cert (path access rights ?) Solution, curlcert
Curl error: Problem with the ssl ca cert (path access rights ?) .
Here is the CA problem: first, the CA that issues the server certificate is okay, so it should be a problem with the ca-bandle.crt that curl uses, this means that you ha
1. Use the ssl library that comes with python to obtain the Common Name of the certificate
Because the built-in ssl library is relatively weak, if you specify a ca certificate, the corresponding certificate data is usually returned blank, so you need to prepare the ca certificate first, you can use http://curl.haxx.se/
However, for ordinary personal sites, to date has not been said to use the SSL domain name certificate, but some similar to the consumer interaction and account security class site must be used, even if not for the site in search engine experience needs, but also the user's information is responsible. In previous posts, Lao left also shared several configurations of SSL
In the past, I heard people say that an IP address can be used to generate a certificate. Today, the example shows that IP addresses cannot be used.Scenario 1:
The name specified when the certificate is generated is IP Address
The example is an example of single-point logon. The configuration in Web. XML is as follows:
If the HTTPS protocol is specified in the above configuration and the name specified d
Certificate Signature requestOpenSSL req-New-key server. Key-out server. CSR-config OpenSSL. CNFJust write the primary domain name "common name ".
4. view the request fileOpenSSL req-text-noout-in server. CSRYou can see the following content:Certificate request:Data:Version: 0 (0x0)Subject: c = us, St = Texas, L = Fort Worth, O = my company, ou = my department,
, company) [Internet widgits Pty Ltd]:qingdaoeasysoft
Organizational unit Name (eg, section) []:D EV
Common name (eg, YOUR name) []:*. 5upm.com
Email Address []:chunsheng@cnezsoft.com
Please enter the following ' extra ' attributes
To is sent with your certificate request
A Challenge Password []:
An optional c
Issue: The security certificate issued by this web site is not issued by a trusted certification authority.The SSL certificate that the server is using is not issued through a formal, globally trusted ca. Recommended purchase GlobalSign Ssl,geotrust SSL, Symante SSL certificate, SS
issue: The security certificate issued by this web site is not issued by a trusted certification authority.
The SSL certificate that the server is using is not issued through a formal global trust ca. Recommended purchase GlobalSign Ssl,geotrust SSL, Symante SSL certificate, SSL
Common errors and workarounds for SSL certificatesIssue: The security certificate issued by this web site is not issued by a trusted certification authority.The SSL certificate that the server is using is not issued through a formal, globally trusted ca. Recommended purchase GlobalSign Ssl,geotrust
Issue: The security certificate issued by this web site is not issued by a trusted certification authority.The SSL certificate that the server is using is not issued through a formal, globally trusted ca. Recommended purchase GlobalSign Ssl,geotrust SSL, Symante SSL certificate, SS
Jks-java KeyStore Java KeyStoreOcsp-online Certificate Status Protocol Certificate online State agreement.San-subject Alternative name is the consumer alternative.Ssl-secure Sockets Layers Secure Sockets Layer protocol.Tls-transport Layer Security Secure Transport layer protocol.Ucc-unified Communications Certificate Unified Communication Certificate, also known as: Multi-domain certificate.Crl-certificate Revocation Lists Certificate Revocation Check
Jks-java KeyStore Java KeyStoreOcsp-online Certificate Status Protocol Certificate online State agreement.San-subject Alternative name is the consumer alternative.Ssl-secure Sockets Layers Secure Sockets Layer protocol.Tls-transport Layer Security Secure Transport layer protocol.Ucc-unified Communications Certificate Unified Communication Certificate, also known as: Multi-domain certificate.Crl-certificate Revocation Lists Certificate Revocation Check
Jks-java KeyStore Java KeyStoreOcsp-online Certificate Status Protocol Certificate online State agreement.San-subject Alternative name is the consumer alternative.Ssl-secure Sockets Layers Secure Sockets Layer protocol.Tls-transport Layer Security Secure Transport layer protocol.Ucc-unified Communications Certificate Unified Communication Certificate, also known as: Multi-domain certificate.Crl-certificate Revocation Lists Certificate Revocation Check
Jks-java KeyStore Java KeyStoreOcsp-online Certificate Status Protocol Certificate online State agreement.San-subject Alternative name is the consumer alternative.Ssl-secure Sockets Layers Secure Sockets Layer protocol.Tls-transport Layer Security Secure Transport layer protocol.Ucc-unified Communications Certificate Unified Communication Certificate, also known as: Multi-domain certificate.Crl-certificate Revocation Lists Certificate Revocation Check
The SSL certificate formats used by different platforms and languages are often different. Here we record some common conversion methods.
All are converted using OpenSSL or keytool. You do not need to implement the conversion using your own code. You can replace the corresponding file name in use.
-------------------------------------- I am a split line ---------
Many people in the process of writing a program because of the convenience or careless use of the program's reserved words, sometimes clearly the program is not wrong, is not properly executed. Do you know what are the common reserved words?
The following are all programming programs and table names can not be used, if used carelessly, you need the following method to solve
Error resolution when using user as database table
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.