Flex 移动应用程序中的 https 证书存在问题
当我尝试从安全站点获取移动 Flex 应用程序中的数据时，我收到以下警报：
无法验证与此站点的安全连接。你还会吗 想要继续吗？您查看的证书与证书不符 您尝试查看的网站的名称。
对于每个呼叫，我都会收到弹出窗口。如果我继续单击“是”，该应用程序可以正常工作（但我想避免这种情况;-)）。
有什么想法吗？显然，请求来源的 url 与证书中定义的不同...但是，如果从移动应用程序（独立）调用，则 url 是什么？这不是一个错误，因为您可以单击“是”。所以更多的是客户给出警告。烦人的是你无法永远接受它......
When I try to get data in a mobile flex app from a secure site, I get following alert:
A secure connection with this site cannot be verified. Would you still
like to proceed? The certificate you are viewing does not match the
name of the site you are trying to view.
For each call, I get the popup. If I keep on clicking Yes, the app works fine (but I would like to avoid that ;-)).
Any ideas? Apparently, the url from where the request comes, is not the same as defined in the certificate... But what is the url if called from a mobile app (standalone)? It's neither an error, because you can click on yes. So it's more that the client gives a warning. The annoying thing is that you can't accept it permanently...
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（5）
每当证书不正确并且 Chrome 或 Firefox 都会向您发出警报并询问您是否要继续时，情况都是一样的。您不能代表您的用户接受有错误的证书。解决此问题的最简单方法是告诉网站所有者获取适当的证书。
This is the same whenever a cert is not correct and chrome or firefox alerts you and asks if you want to proceed. You cant accept a faulty cert on the behalf of your users. The easiest way to fix this is to tell the site owner to get a proper cert.
请咨询网站的系统管理员是否为您的域颁发了安装的证书。看来证书是为域
https:///xxxx颁发的，因为它安装在https://yyyy上，绕过测试是可以的，看来最后你必须纠正这个问题
Check with your system administrators of website whether certificate installed is issued for your domain. It appears that certificate is issued for a domain
https:///xxxxwhere as it is installed onhttps://yyyyBypassing is OK for testing , it seems finally you will have to get this corrected
根据我的经验，这只出现在自签名证书、过期证书以及通过证书中未标识的 URL 调用证书时。
对于大多数证书，它们与单个主机/域组合相关联，即 https://www.domain.com
意味着它们不能与任何其他域名托管服务商组合一起使用。甚至不是 http://domain.com 或 https://sub.domain.com。
有些证书将支持同一域（www.domain.com、sub.domain.com 等）上的不同主机。它们称为通配符证书。与普通的单域证书相比，它们非常昂贵。
我的猜测是，在浏览器中您正在调用 www.domain.com，但在 AIR 应用程序中您正在调用 domain.com 或调用其他主机。或者您已在浏览器中永久接受了不正确的证书。
我从来没有遇到过任何不正确地识别有效证书的问题。不是浏览器、Flex 应用程序、AIR 应用程序。曾经。
如果您在浏览器中查看证书，您应该能够看到它注册到哪个域/主机。确保您正在使用完全那个。任何变化都会导致错误。
In my experience this only comes up with self-signed certs, expired certs, and when you are calling the cert by a URL that is not identified in the cert.
With most certs they are associated with a single host/domain combination, i.e. https://www.domain.com
That means that they cannot be used with any other domain host combination. Not even http://domain.com or https://sub.domain.com.
There are certs that will support different hosts on the same domain (www.domain.com, sub.domain.com, etc). They are called wildcard cert. They are very expensive compared to normal single domain certs.
My guess is that in the browser you are calling www.domain.com but in your AIR app you are calling domain.com or calling some other host. That or you have permanently accepted the improper cert in the browser.
I have never have a problem with anything improperly identifying a valid cert. Not a browser, Flex app, AIR application. Ever.
If you view the cert in the browser you should be able to see what domain/host it is registered to. Make sure you are using exactly that. Any variation will cause the error.
作为临时解决方案，我在 URL 重写模块中添加了一些例外，以便移动应用程序可以使用 HTTP 进行通信。但它不再安全，所以我宁愿使用 HTTPS。
As a temporarily solution I added some exceptions to the URL Rewrite Module, so that communication by Mobile App can be done with HTTP. But it's no longer secure, so I would rather use HTTPS.
我也面临这个问题，简单的解决方案是修复证书问题。如果不可能，则不要使用 HTTPS，仅使用 HTTP。因此，您永远不会收到有关任何证书问题的任何投诉。
I have also faces this issue and simple solution is fixed the certificate issue. If not possible then forget about using the HTTPS use HTTP only. So you never get any complain about any certificate issue.