google-app-engine - 如何在GAE上设置中间证书？

Question

我已经为我的自定义域购买了 SSL 认证并设置了我的 GAE 项目。在新的 Firefox 版本发布之前，它在大多数浏览器上运行良好。Firefox 拒绝了我的 SSL 认证。我使用了 SSL Checker，它给了我反馈。

“证书在所有 Web 浏览器中不受信任。您可能需要安装中间/链证书以将其链接到受信任的根证书。了解有关此错误的更多信息。您可以按照 GoDaddy 的证书安装说明解决此问题您的服务器平台。请注意有关中间证书的部分。”

我曾尝试用谷歌搜索如何设置中间证书，但没有找到。有没有人遇到同样的麻烦，知道如何解决？

Answer 1

看起来像these directions会帮你的。它们适用于不同的 CA，但逻辑应该相同。

Because Google App Engine does not have a separate option to upload an Intermediate Certificate, you have to include this certificate in the public key file. You can do this by opening the certificate for your website and the Intermediate Certificates from GlobalSign in a plain text editor and simply copy and paste all the content from the Intermediate Certificate at the end of the file of the webserver certificate that was issued by GlobalSign.

Google AppEngine Docs说这是正确的做法，但他们没有进入与其他链接相同级别的详细信息。

If the host certificate requires an intermediate or chained certificate (as many Certificate Authorities (CAs) issue), you will need to append the intermediate or chained certificates to the end of the public certificate file.