apache - ssl apache vhost 仅在 firefox 中工作

Question

我创建了一个自签名的 ssl vhost 用于测试目的。此虚拟主机在 mozilla firefox 上运行良好，但在所有其他浏览器上均无法运行。这是虚拟主机:

ServerAdmin webmaster@localhost
ServerName mysubdomain.domain.tld
ServerAlias mysubdomain.domain.tld
DocumentRoot /my/own/ssl_test/
<Directory />
            Options FollowSymLinks -Indexes
            AllowOverride ALL
    </Directory>
    ErrorLog ${APACHE_LOG_DIR}/error.log
    LogLevel warn
    CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined
    SSLEngine on
    SSLCertificateFile /etc/apache2/ssl/apache.crt
    SSLCertificateKeyFile /etc/apache2/ssl/apache.key

    <FilesMatch "\.(cgi|shtml|phtml|php)$">
            SSLOptions +StdEnvVars
    </FilesMatch>
    <Directory /usr/lib/cgi-bin>
            SSLOptions +StdEnvVars
    </Directory>
    BrowserMatch "MSIE [2-6]" \
            nokeepalive ssl-unclean-shutdown \
            downgrade-1.0 force-response-1.0
    BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown

Answer 1

证书没有公用名。也许这就是 Chrome 不喜欢它的原因。

比较:

$ echo | openssl s_client -connect vds2584.sivit.org:443 2>/dev/null | openssl x509 -noout -text | grep Subject.*CN

到:

$ echo | openssl s_client -connect google.com:443 2>/dev/null | openssl x509 -noout -text | grep Subject.*CN
        Subject: C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.google.com