如何在GAE上设置中间证书？ [英] How to set the intermediate certificates on GAE?

问题描述

我已经为我的自定义域名购买了SSL认证，并且已经设置了我的GAE项目。
在大多数浏览器上都能正常工作，直到新的Firefox版本出来。
Firefox拒绝了我的SSL认证。我已经使用了SSL Checker，它给了我反馈。
$ b

证书在所有Web浏览器中都不可信，您可能需要安装一个Intermediate / chain证书把它连接到一个受信任的根证书，了解更多关于这个错误的信息，你可以通过遵循服务器平台的GoDaddy证书安装说明来解决这个问题，注意关于中间证书的部分。

我曾试图谷歌如何设置中间证书，但没有发现。
有没有人遇到同样的麻烦，并知道要解决它？

解决方案

它看起来像这些方向将帮助你。他们是为不同的CA，但逻辑应该是相同的。

lockquote

由于Google App Engine没有单独的选项来上传中级证书，您必须将此证书包含在公钥文件中。您可以通过在纯文本编辑器中打开您的网站的证书和GlobalSign的中间证书，然后从GlobalSign颁发的Web服务器证书文件末尾的中间证书中复制并粘贴所有内容。 Google AppEngine Docs

/ b>说这是正确的做法，但他们没有进入与另一个链接相同的细节水平。

如果主机证书需要中间证书或链接证书（许多证书颁发机构（CA）问题），则需要将中间证书或链接证书附加到公共证书文件的末尾。

I had bought a SSL certification for my custom domain and set up to my GAE project. It worked fine with most browsers until the new Firefox version comes out. Firefox denied my SSL certification. I had used the SSL Checker, it gave me the feedback.

"The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate. Learn more about this error. You can fix this by following GoDaddy's Certificate Installation Instructions for your server platform. Pay attention to the parts about Intermediate certificates."

I had tried to google how to set the intermediate certificates, but nothing found. Did anyone encounter the same trouble and know to solve it?

解决方案

It looks like these directions will help you out. They are for a different CA, but the logic should be the same.

Because Google App Engine does not have a separate option to upload an Intermediate Certificate, you have to include this certificate in the public key file. You can do this by opening the certificate for your website and the Intermediate Certificates from GlobalSign in a plain text editor and simply copy and paste all the content from the Intermediate Certificate at the end of the file of the webserver certificate that was issued by GlobalSign.

The Google AppEngine Docs say that this is the correct thing to do, but they don't go into the same level of detail as the other link.

If the host certificate requires an intermediate or chained certificate (as many Certificate Authorities (CAs) issue), you will need to append the intermediate or chained certificates to the end of the public certificate file.

这篇关于如何在GAE上设置中间证书？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！