使用受信任的 CA 创建 SSL 证书
我不太确定这个问题是否适用于这个论坛，但如果确实如此，也许有人知道是否可以使用 Open SSL 创建 SSL 证书，浏览器不会抛出我们创建的 SSL 证书不受信任的警告消息？
I'm not quite sure if this question applies to this forum but if it does maybe someone knows if it is possible using Open SSL to create a SSL sertificate that browsers wouldn't throw warning messadges that our created SSL sertificate is untrusted?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
从技术上讲，如果您有 CA 的私钥来签署新创建的证书是可能的。由于您可能没有钥匙，所以答案可能是否定的。只需从其中一个 CA 购买证书即可。如果您进行最少的研究，您会发现一些 CA 提供非常实惠的价格。
Technically it is possible if you have CA's private key to sign the newly created certificate. As you probably don't have a key, the answer is probably no. Just go ahead and purchase a certificate from one of CAs. If you do minimal research, you will find that some CAs offer very affordable prices.
这可能在服务器故障时更好地处理，但我会告诉你，不你不能这样做。浏览器不喜欢您的证书的原因是您不是公认的证书颁发机构。因此，浏览器总是会警告您的证书不可信，因为浏览器不知道您是谁，也不知道为什么任何人都应该信任您。
编辑：正如 Alex K 指出的，您可以在您知道将访问您的网站的计算机上安装证书，这对于仅由有限数量的已知用户访问该网站的情况相当有效。机器。我的观点仍然是关于更广泛的分发。谢谢，亚历克斯。
This is probably better handled on server fault, but I will tell you that NO you cannot do this. The reason browsers don't like your certificate is that you are not a recognized certificate authority. As such, a browser will always warn about your certificate being untrustworthy, since the browser does not know who you are, or why anyone should trust you.
EDIT: As Alex K points out, you can install your certificate on machines you know will access your site, which works reasonably well for scenarios where the site will only be accessed by a limited number of known users/machines. My point still stands regarding wider distribution. Thanks, Alex.