ubuntu - 手动添加ssl证书到可信

Question

我有错误

curl https://xxx.voxlink.ru                       
curl: (60) SSL certificate problem: unable to get local issuer certificate

openssl 说下一步

:~# openssl s_client -connect xxx.voxlink.ru:443
CONNECTED(00000003)
depth=0 OU = Domain Control Validated, OU = PositiveSSL Wildcard, CN = *.voxlink.ru
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 OU = Domain Control Validated, OU = PositiveSSL Wildcard, CN = *.voxlink.ru
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:/OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*.voxlink.ru
   i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
---
...

我想从上面的链中手动将根证书添加到受信任列表中，并修复我服务器上此主机的 ssl 错误

我该怎么做？

Answer 1

我不确定，但此链接可能会对您有所帮助。 https://www.digicert.com/ssl-certificate-installation.htm

或者您也可以创建自己的自签名证书，为此试试这个: https://help.dreamhost.com/hc/en-us/articles/215089078-How-to-manually-create-a-CSR-for-a-self-signed-certificate

我已经为我的一个应用程序创建了自签名证书，但还没有完成 ssl 证书的手动安装。