IE8 SSL证书问题，而其他浏览器像一个魅力 [英] IE8 SSL Cert Problems while other browsers work like a charm

问题描述

我购买了一个SSL证书，它应该与iE 5+配合使用，但它不会。我测试的所有其他浏览器工作完美 - 没有错误 - 只是我想要显示的网站。但是IE8和更小的版本显示在https ...（他们需要接受ssl证书）网站上的错误，并销毁在http版本的网站上的布局（没有https链接）。

I bought a SSL Cert which should work with iE 5+, but it doesn`t. All other browsers i tested work perfectly - no errors - just the site I want to display. But IE8 and smaller versions show an Error on the https...(they need to accept the ssl cert) site and destroy the layout on http version of the site (no https links included).

非SSL
minol-fb.de/facebook-suche /

Non SSL minol-fb.de/facebook-suche/

SSL
minol-fb.de/facebook- suche /

SSL minol-fb.de/facebook-suche/

好吧， IE8仍然使用自签名证书。

Ok it seems that browser < IE8 still use the self signed certificate..

推荐答案

您必须已配置多个证书使用服务器名称指示而不知道它。

You must have configured multiple certificates using Server Name Indication without knowing it.

自签名证书：

openssl s_client -showcerts -connect www.minol-fb.de:443

如果您使用此名称（使用服务器名称），则会获得正确的证书：

If you use this (with the server name), you get the correct certificate:

openssl s_client -showcerts -connect www.minol-fb.de:443 -servername www.minol-fb.de

您可能会得到与旧版本的IE不同的行为，因为你正在XP上测试它们。没有版本的IE支持SNI在Windows XP上不幸的是。

You probably get a different behaviour with older versions of IE because you're testing them on XP. No version of IE supports SNI on Windows XP unfortunately. Other browsers (with sufficiently recent versions) do, at least independently on the OS version they run on.

如果您不需要其他主机，您可以移除其他主机该配置，以便不必依赖于SNI。

If you don't need that other host, you can probably remove that configuration, so as not to have to rely on SNI at all.

这篇关于IE8 SSL证书问题，而其他浏览器像一个魅力的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！