Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

https certificate chain 等等 #2

Open
sophister opened this issue Sep 14, 2017 · 1 comment
Open

https certificate chain 等等 #2

sophister opened this issue Sep 14, 2017 · 1 comment

Comments

@sophister
Copy link
Owner

sophister commented Sep 14, 2017

通过 openssl 校验服务器证书配置的合法性:

openssl s_client -debug -connect api.we.com:443

https证书配置错误,Android下 webview 会报如下错误:

Failed to validate the certificate chain, error: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found

Firefox 中可能会报如下错误:

由于发布者未知,所以证书不可信。
服务器可能未发送合适的中间证书。
或许需要额外的根证书。

出现这种错误,可以到 firefox官方文档 进一步检查错误信息

证书中的 Certificate chain 区域,应该配置多条,最终指向操作系统新人的某个 root CA

参考这两篇文章:

@sophister
Copy link
Owner Author

https 介绍文章

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant