Shulou(Shulou.com)06/02 Report--

Problems in the installation of GODADDY certificates

1. Registered account

two。 Apply for a certificate

3. After entering the SSL certificate, select "manage" to open it and download the corresponding certificate according to your own needs.

4. The Nginx I downloaded here, one is the certificate, and the other gd_bundle-g2-g1.crt is downloaded and uploaded to the WEB server and then configured with nginx

As follows:

Listen 443 ssl

Server_name youdomain

Ssl on

Ssl_certificate / usr/https/ca/godaddy_youdomain.crt

Ssl_certificate_key / usr/https/ca/youdomain.key

Ssl_protocols SSLv2 SSLv3 TLSv1 TLSv1.2

Ssl_ciphers ECDHEMUR AES128MUG GCMMuSHA256 Flex ECDHEVE ECDH Von AESHV Highi A null LV A null L RC4 A null L RC4

Ssl_prefer_server_ciphers on

5. After reloading the nginx configuration, when you enter https://www.sslshopper.com for verification, you will find that it is still untrusted, as shown below:

The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain .for error.

6. Confirmed by google because the certificate chain is broken, the solution is as follows:

Save gd_bundle-g2-g1.crt and your certificate as a file for the browser to climb up the certificate chain.

Cat youdomain.crt gd_bundle-g2-g1.crt > > youdomain_combined.crt

Modify nginx configuration file

Change the name of the ssl_certificate / usr/https/ca/godaddy_youdomain.crt; certificate to the merged file name youdomain_combined.crt and reload the nginx configuration, and then test the error prompt to disappear

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.