如何生成与Microsoft证书服务的SSL证书，然后安装/将其配置为与Apache的工作？ [英] How do I generate an SSL Certificate with Microsoft Certificate Services and then install / configure it to work with Apache?

问题描述

我已经生成的证书请求，提交给Microsoft证书服务程序。它颁发证书。我下载到conf / SSL / server.cert

I've generated a certificate request, submitted it to the Microsoft Certificate Services program. It issues the certificate. I downloaded it to conf/ssl/server.cert

我配置它的Apache使用

I configured it in apache to using

SSLCertificateFile conf/ssl/server.cert
SSLCertificateKeyFile conf/ssl/server.key

当我开始使用这个配置服务器，我得到

When I start the server with this config I get

安全连接失败
到192.168.1.100的连接的过程中出错。

Secure Connection Failed An error occurred during a connection to 192.168.1.100.

证书类型不批准申请。 （错误code：sec_error_inadequate_cert_type）
您要查看该页面无法显示，因为所接收到的数据的真实性无法核实。

Certificate type not approved for application. (Error code: sec_error_inadequate_cert_type) The page you are trying to view can not be shown because the authenticity of the received data could not be verified.

• 请联系网站所有者通知他们这个问题。

如果我下载CA证书，以

If I download the CA Certificate and install it with

SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key
SSLCACertificateFile conf/ssl/cacert.crt

服务器无法启动。

The server fails to start.

它工作正常，如果我生成一个自签名证书的安装，但我需要它来自Microsoft证书服务，所以它不会发出警告有关证书的内部用户。

It works fine if I generate a self signed certificate an install it, but I need it to come from Microsoft Certificate Services so it won't warn internal users about the certificate.

推荐答案

听起来像是你的证书不允许使用的服务器。 IIRC，你可以在浏览器中查看证书，并查找使用或一些这样的语言，它应该说（其中可能还有其他的东西）SSL服务器。

Sounds like your cert isn't allowed to be used for a server. IIRC, you can view the certificate in a browser and look for Usage or some such language, and it should say SSL Server (possibly among other things).

这篇关于如何生成与Microsoft证书服务的SSL证书，然后安装/将其配置为与Apache的工作？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！