如何为AWS负载均衡器生成证书链? [英] How to generate the Certificate Chain for AWS load balancer?

问题描述

我正在使用带SSL配置的Amazon Load Balancer.一切正常，但在Firefox上显示例外页面的除外.对用户而言，它看起来并不自我.

I'm using Amazon Load Balancer with SSL configuration. everything when fine except on Firefox that show the exception page. It looks not self to user.

此

This article suggest to put the Certificate Chain to the configuration section.

我的SSL提供者是Comodo(InstantSSL).他们仅提供两个文件.crt和.ca-bundle.

My SSL provider is Comodo (InstantSSL). They provide two files .crt and .ca-bundle only.

我如何生成证书链?

推荐答案

您可以将.crt和.ca-bundle文件组合在一起.这就是我们使用名为OpDemand的服务完成的工作，该服务由AWS支持.

You can cat the .crt and the .ca-bundle file together. That's what we wound up doing using a service called OpDemand, which is backed by AWS.

cat certfile.crt bundle.ca-bundle >> chain.crt

chain.crt应该是您要查找的文件.同样，顺序很重要. certificate.crt文件必须是第一个.

chain.crt should be the file you're looking for. Also, the order is important. The certificate.crt file has to be first.

这篇关于如何为AWS负载均衡器生成证书链?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！