证书链在Chrome中有效，在Firefox或Android中无效 [英] Certificate chain valid in Chrome, not Firefox or Android

问题描述

自从发现Firefox和其他浏览器的行为异常以来，我们最近不得不更新了电子商务网站的证书.办公室中大约有一半的计算机以及我的家用计算机抱怨证书链不完整(很奇怪，它不通用).我可以在Firefox证书查看器中查看链，并看到它没有链.

We had to update our certificate for our ecommerce website recently and ever since we've noticed weird behavior in Firefox and other browsers. About half the computers in the office, as well as my home computer complain that the certificate chain is not complete (Very odd it's not universal). I can view the chain in the Firefox certificate viewer and see that it doesn't have a chain.

与此同时，Chrome的链条看起来也不错.这使我相信，我们的证书安装没有问题，因为有一个链条可供读取，但是Firefox似乎看不到它.

Meanwhile Chrome's chain looks fine. This leads me to believe that there isn't an issue with our install of the certificate, as there's a chain there to be read, but Firefox can't seem to see it.

我应该注意，Android上的Chrome浏览器似乎也存在相同的问题. 那么这是我们的问题还是Firefox的问题?

I should note that it seems to have the same issue in Chrome on Android. So is this our problem or Firefox's?

推荐答案

通常情况下，服务器没有发送所有必要的中间证书. Chrome浏览器(桌面版)将获取它们. Firefox将使用从以前的连接到其他站点的连接缓存的任何中间证书，但不会获取丢失的证书，因此某些Firefox实例可能会工作，而其他实例则不会. Android上的Chrome也不会获取丢失的证书.

This is typically the case when the server does not send all necessary intermediate certificates. Chrome on Desktop will go and fetch them. Firefox will use any intermediate certificates cached from previous connections to other sites but will not fetch missing certificates, thus some Firefox instances might work while others not. Chrome on Android will also not fetch missing certificates.

该问题需要在服务器端解决.如果您在 SSLLabs 中检查服务器，则可能会看到有关链问题"的注释.添加必要的证书(它们在报告中列出)，直到您不再看到此注释，然后该注释也应与其他浏览器一起使用.

The issue needs to be fixed on the server side. If you check the server at SSLLabs you will probably see a note regarding "chain issues". Add the necessary certificates (they are listed at the report) until you don't see this note any longer and then it should work with the other browsers too.

这篇关于证书链在Chrome中有效，在Firefox或Android中无效的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！