20140930
V2EX  ›  SSL

关于 XOXO 卖的 SSL 证书的中级链接证书的疑问。

  •  
  •   20140930 · Oct 24, 2014 · 3853 views
    This topic created in 4221 days ago, the information mentioned may be changed or developed.
    我根据他邮件里提供的配置好。发现去https://sslcheck.globalsign.com检查了下显示中级证书
    Subject:
    CNAlphaSSL CA - SHA256 - G2
    OGlobalSign nv-sa
    CBE
    ??是个问号啊。但是电脑上我试了3种不同的浏览器都是显示绿色的
    而他自己的是globalsign的,都是显示绿色的勾,这个要怎么解决?
    11 replies    2014-10-24 19:56:51 +08:00
    wzxjohn
        1
    wzxjohn  
       Oct 24, 2014
    你发的东西哪来的问号。。。截图吧。。。
    20140930
        2
    20140930  
    OP
       Oct 24, 2014
    @wzxjohn 是不是要在中级链接证书下面添加GlobalSign Root R1 这个证书?
    -----BEGIN CERTIFICATE-----
    MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG
    A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv
    b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw
    MDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i
    YWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxT
    aWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDuaZ
    jc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavp
    xy0Sy6scTHAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz8kHp
    1Wrjsok6Vjk4bwY8iGlbKk3Fp1S4bInMm/k8yuX9ifUSPJJ4ltbcdG6TRGHRjcdG
    snUOhugZitVtbNV4FpWi6cgKOOvyJBNPc1STE4U6G7weNLWLBYy5d4ux2x8gkasJ
    U26Qzns3dLlwR5EiUWMWea6xrkEmCMgZK9FGqkjWZCrXgzT/LCrBbBlDSgeF59N8
    9iFo7+ryUp9/k5DPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8E
    BTADAQH/MB0GA1UdDgQWBBRge2YaRQ2XyolQL30EzTSo//z9SzANBgkqhkiG9w0B
    AQUFAAOCAQEA1nPnfE920I2/7LqivjTFKDK1fPxsnCwrvQmeU79rXqoRSLblCKOz
    yj1hTdNGCbM+w6DjY1Ub8rrvrTnhQ7k4o+YviiY776BQVvnGCv04zcQLcFGUl5gE
    38NflNUVyRRBnMRddWQVDf9VMOyGj/8N7yy5Y0b2qvzfvGn9LhJIZJrglfCm7ymP
    AbEVtQwdpf5pLGkkeB6zpxxxYu7KyJesF12KwvhHhm4qxFYxldBniYUr+WymXUad
    DKqC5JlR3XC321Y9YeRq4VzW9v493kHMB65jUr9TU/Qr6cf9tveCX4XSQRjbgbME
    HMUfpIBvFSDJ3gyICh3WZlXi/EjJKSZp4A==
    -----END CERTIFICATE-----
    Tink
        3
    Tink  
    PRO
       Oct 24, 2014
    @20140930 不用加吧,现在浏览器应该都信任了
    wzxjohn
        4
    wzxjohn  
       Oct 24, 2014
    @20140930 GlobalSign Root R1不用加。你按照
    https://sslcheck.globalsign.com
    给你写的证书链复制粘贴即可。
    20140930
        5
    20140930  
    OP
       Oct 24, 2014
    wzxjohn
        6
    wzxjohn  
       Oct 24, 2014
    在提示你证书链不对的那个地方有个链接点进去,然后蓝框框最下面有个链接点进去,里面就是你需要的证书链。
    20140930
        7
    20140930  
    OP
       Oct 24, 2014
    点进去就是他邮件里发给我自己的个人证书啊。没别的啊
    20140930
        8
    20140930  
    OP
       Oct 24, 2014
    https://t.williamgates.net/thumb-4207_5449AC60.jpg
    https://t.williamgates.net/image-F83E_5449AC60.jpg
    ...那个download我点进去也就是自己的个人证书,没什么不对的啊
    20140930
        9
    20140930  
    OP
       Oct 24, 2014
    @xoxo 求能通过https://sslcheck.globalsign.com检测Recommended certificate chain环节的中间证书链接。
    20140930
        10
    20140930  
    OP
       Oct 24, 2014
    貌似问他们客服也说没问题。估计是这个工具出问题了
    xierch
        11
    xierch  
       Oct 24, 2014
    我用这个工具显示的是
    Uncaught Error
    Cannot read property 'recommended' of undefined

    试试这个?
    https://www.ssllabs.com/ssltest/analyze.html
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   1050 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 37ms · UTC 23:02 · PVG 07:02 · LAX 16:02 · JFK 19:02
    ♥ Do have faith in what you're doing.