简体   繁体   English

我可以仅从SSLCertificateKeyFile.key和SSLCertificateFile.crt文件创建ssl证书链吗?

[英]Can I create ssl certificate chain from only SSLCertificateKeyFile.key and SSLCertificateFile.crt files?

I have website, where I doesn't installed ssl certificate. 我有网站,但未安装ssl证书。 In apache.conf I have only two files: 在apache.conf中,我只有两个文件:

SSLCertificateFile /etc/ssl/certs/domainname.crt SSLCertificateFile /etc/ssl/certs/domainname.crt

SSLCertificateKeyFile /etc/ssl/private/domainname.key SSLCertificateKeyFile /etc/ssl/private/domainname.key

https://www.sslshopper.com/ssl-checker.html give me this error: https://www.sslshopper.com/ssl-checker.html给我这个错误:

The certificate is not trusted in all web browsers. 并非所有Web浏览器都信任该证书。 You may need to install an Intermediate/chain certificate to link it to a trusted root certificate. 您可能需要安装中间/链证书以将其链接到受信任的根证书。

In docs I have see that I must have this files to create a certificate chain: 在文档中,我看到必须具有以下文件才能创建证书链:

  • AddTrustExternalCARoot.crt AddTrustExternalCARoot.crt
  • ComodoUTNSGCCA.crt ComodoUTNSGCCA.crt
  • EssentialSSLCA_2.crt EssentialSSLCA_2.crt
  • domainname.crt 域名
  • UTNAddTrustSGCCA.crt UTNAddTrustSGCCA.crt

But in my /etc/ssl/ directory I have only domainname.crt file 但是在我的/ etc / ssl /目录中,我只有domainname.crt文件

Can I download other files from anywhere? 我可以从任何地方下载其他文件吗? Or I must buy new certificate with all files? 还是我必须购买所有文件的新证书?

我已经从https://github.com/cloudflare/cfssl_trust/tree/master/intermediate_ca下载了针文件,这是可行的

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM