出于测试目的,我创建了一个自签名ssl vhost。这个vhost在mozilla firefox上工作得很好,但不能在所有其他浏览器上工作。这是vhost:
ServerAdmin webmaster@localhost
ServerName mysubdomain.domain.tld
ServerAlias mysubdomain.domain.tld
DocumentRoot /my/own/ssl_test/
<Directory />
Options FollowSymLinks -Indexes
AllowOverride ALL
</Directory>
ErrorLog ${APACHE_LOG_DIR}/error.log
LogLevel warn
CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined
SSLEngine on
SSLCertificateFile /etc/apache2/ssl/apache.crt
SSLCertificateKeyFile /etc/apache2/ssl/apache.key
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory /usr/lib/cgi-bin>
SSLOptions +StdEnvVars
</Directory>
BrowserMatch "MSIE [2-6]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown发布于 2015-04-17 23:00:50
证书没有公用名。也许这就是Chrome不喜欢它的原因。
比较:
$ echo | openssl s_client -connect vds2584.sivit.org:443 2>/dev/null | openssl x509 -noout -text | grep Subject.*CN至:
$ echo | openssl s_client -connect google.com:443 2>/dev/null | openssl x509 -noout -text | grep Subject.*CN
Subject: C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.google.comhttps://stackoverflow.com/questions/29678847
复制相似问题