CodePudding user response:
Just upload domain CA not upload the root CA and intermediate CA?Refer to https://www.jinbo123.com/6016.html
CodePudding user response:
Today I also encountered this problem, different android, iOS WeChat client cannot open the page, but test the android QQ browser, PC browser works,At that time with spring boot direct configuration HTTPS (refer to the spring in the boot startup HTTPS - RO_wsy column - blog channel - CSDN.NET
http://blog.csdn.net/ro_wsy/article/details/51319963), the application in the configuration file. The properties of increased
Server port: 443
Server. The SSL. Key - store: the classpath: cert. P12
Server. The SSL. Key - store - password: mypassword
Server. The SSL. KeyStoreType: as PKCS12
Then I changed to use nginx listening port 443, as the HTTPS server, put forward the request to the local spring boot server, the method of normal, in WeChat browsers can normal visit, nginx configuration is as follows:
HTTP {
//some default configuration, omit
Server {//the increasing number of configuration items
Server_name ~. *;
Listen, 443;
ssl on;
Ssl_certificate/XXXX fullchain. Pem;
Ssl_certificate_key/XXXX privkey. Pem;
The location/{
Proxy_pass http://127.0.0.1:8089;
Proxy_http_version 1.1;
Proxy_set_header X_FORWARDED_PROTO HTTPS.
proxy_set_header X-Real-IP $remote_addr;
Proxy_set_header X - Forwarded - For $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
}
}
}
Added: certificate of production, is a reference to the Let 's Encrypt use tutorials, free SSL certificate, make your site to embrace the HTTPS - village head diary - https://zhuanlan.zhihu.com/p/24996258 zhihu column, made of Certbot, then in the spring the boot, the pem certificate into the p12 format:
Openssl as pkcs12 - export - out cert. P12 - in cert. Pem - inkey privkey. Pem - passin pass: mypassword - passout pass: mypassword
Problems, then use the nginx way, then the normal,
CodePudding user response:
How to solve?CodePudding user response:
Nginx before I also have this problem, no problem, are the two files, apache has three original files, chain file also to write in the conf file of SSL, solve,CodePudding user response:
Hope can pass