首页 新闻 赞助 找找看

IIS站点配置https证书问题

0
悬赏园豆:30 [已解决问题] 解决于 2016-08-12 18:29

在IIS的Add Site Binding窗口,在SSL certificate中选择证书,点击OK时出现如下的提示:

One or more intermediate certificates in the certificate chain are missing. To resolve this issue, make sure that all of the intermediate certificates are installed. For more information, see http://support.microsoft.com/kb/954755

配置后,用Chrome访问会出现如下的提示:

This server could not prove that it is xxx.com; its security certificate is not trusted by your computer's operating system. This may be caused by a misconfiguration or an attacker intercepting your connection.

证书是由.key文件与.pem文件导出为.pfx文件,然后导入到IIS中的,详见: https://q.cnblogs.com/q/85088/

dudu的主页 dudu | 高人七级 | 园豆:31075
提问于:2016-08-12 13:25
< >
分享
最佳答案
0

这是由于在使用openssl命令将.key文件与.pem文件导出为.pfx文件时,缺少顶级根的证书文件(命令参数是-certfile CARoots.pem)。如果没有顶级根的证书文件,联系证书提供商。
完整命令:

openssl pkcs12 -inkey private-cert.key -in public-cert.pem -certfile CARoots.pem -export -out iiscert.pfx
dudu | 高人七级 |园豆:31075 | 2016-08-12 18:28
其他回答(1)
0

我也不会啊 0.0

收获园豆:30
小熊vs | 园豆:20 (初学一级) | 2016-08-12 15:49
清除回答草稿
   您需要登录以后才能回答,未注册用户请先注册