[已解决]当前网站证书不可信且证书链长度为1

lsza

  这什么问题导致的？
当前网站证书不可信且证书链长度为1，可能是服务器没有配置完整证书链，是否信任并继续访问？

证书用的是https://assl.loovit.net/

只在手机QQ浏览器中出现过这毛病
已解决看二楼
配置：

1. <VirtualHost *:88>
   
2.   ServerAdmin [email protected]
   
3.   DocumentRoot "/data/wwwroot/lib"
   
4.   ServerName lib.*****.com
   
5.   
   
6.   SSLEngine on
   
7.   SSLCertificateFile "/usr/local/nginx/conf/ssl/lib.*****.com.crt"
   
8.   SSLCertificateKeyFile "/usr/local/nginx/conf/ssl/lib.*****.com.key"
   
9.   ErrorLog "/data/wwwlogs/lib.****.com_error_apache.log"
   
10.   CustomLog "/dev/null" common
    
11. <Directory "/data/wwwroot/lib">
    
12.   SetOutputFilter DEFLATE
    
13.   Options FollowSymLinks ExecCGI
    
14.   Require all granted
    
15.   AllowOverride All
    
16.   Order allow,deny
    
17.   Allow from all
    
18.   DirectoryIndex index.html index.php
    
19. </Directory>
    
20. </VirtualHost>
    

复制代码

1. server {
   
2.   listen 80;
   
3.   listen 443 ssl http2;
   
4.   ssl_certificate /usr/local/nginx/conf/ssl/lib.*****.com.crt;
   
5.   ssl_certificate_key /usr/local/nginx/conf/ssl/lib.*****.com.key;
   
6.   ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
   
7.   ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
   
8.   ssl_prefer_server_ciphers on;
   
9.   ssl_session_timeout 10m;
   
10.   ssl_session_cache builtin:1000 shared:SSL:10m;
    
11.   ssl_buffer_size 1400;
    
12.   add_header Strict-Transport-Security max-age=15768000;
    
13.   ssl_stapling on;
    
14.   ssl_stapling_verify on;
    
15.   server_name lib.*****.com;
    
16.   access_log off;
    
17.   index index.html index.htm index.php;
    
18.   root /data/wwwroot/lib;
    
19.   if ($ssl_protocol = "") { return 301 https://$server_name$request_uri; }
    
20.   
    
21.   
    
22.   location / {
    
23.     try_files $uri @apache;
    
24.   }
    
25.   location @apache {
    
26.     proxy_pass http://127.0.0.1:88;
    
27.     include proxy.conf;
    
28.   }
    
29.   location ~ .*\.(php|php5|cgi|pl)?$ {
    
30.     proxy_pass http://127.0.0.1:88;
    
31.     include proxy.conf;
    
32.   }
    
33.   location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|mp4|ico)$ {
    
34.     expires 30d;
    
35.     access_log off;
    
36.   }
    
37.   location ~ .*\.(js|css)?$ {
    
38.     expires 7d;
    
39.     access_log off;
    
40.   }
    
41.   location ~ /\.ht {
    
42.     deny all;
    
43.   }
    
44. }
    

复制代码

萌䒤萌

根证书（中级）合并进证书没？

萌䒤萌

证书邮件里有个链接 https://www.alphassl.com/support/install-root-certificate.html
复制链接中的证书添加到证书文件中

墨迹

证书链不完整