SSL 证书不会保存
我正在尝试将 SSL 证书（来自 GoDaddy.com）安装到 IIS 7 上。我可以按照 此处，它显示在我的服务器证书列表中，但是一旦我离开服务器证书页面并返回到该页面，该证书就不再显示在列表中。
此证书还用在 Apache 机器上来验证我们的网站（我使用 IIS 作为 WCF 服务 API）。该证书被分配给 *.mydomain.com，因此我认为我可以将它用于 Apache 网站服务器 (www.mydomain.com) 以及我的 API (services.mydomain.com)。我的这个假设不正确吗？我是否需要执行与上面提到的安装说明不同的操作？
I am trying to install an SSL Certificate (from GoDaddy.com) onto IIS 7. I can add the certificate following the directions found here and it shows up in my list of Server Certificates but once I leave the Server Certificates page and return to it, the certificate no longer shows up in the list.
This certificate is also used on an Apache box to authenticate our website (I am using IIS for a WCF Service API). The certificate is assigned to *.mydomain.com so I thought I could use it for the Apache website server (www.mydomain.com) as well as my API (services.mydomain.com). Am I incorrect in this assumption? Do I need to do something different then the instructions I referenced above to install?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
Brian，
我假设您刚刚获取了 .cer 文件并将其导入到您的 IIS 框中。遗憾的是，这是不可能的，因为您的证书不包含私钥，因此它不会成为 IIS 中的选项。
您引用的 GlobalSign 指令很好，但前提是您在 IIS 服务器本身上创建了 CSR。
您需要做的是从 Apache 服务器的 .key 和 .cer 文件创建一个 PFX，然后您可以将此 PFX 导入到您的 IIS 服务器上，然后分配它以供使用。
所以用它来创建你的 PFX 文件；
https://support.globalsign.com /customer/portal/articles/1229676-back-up-certificate---apache-openssl
后面是；
https://support.globalsign.com/customer/portal/articles/1217281
至于其他人，如果您只有一个 .CER 文件，并且没有创建您需要私钥的请求。因此，创建一个新的 CSR 并请求相关 CA 重新颁发。
您无法在 IIS 中分配证书的事实是因为您没有与该证书对应的私钥。
Brian,
I assume you just grabbed the .cer file and imported this onto your IIS box. Sadly this is not possible as your certificate will not contain a private key so it won't be an option in IIS.
The GlobalSign instruction you referenced are fine but that is if you created the CSR on the IIS server itself.
What you will have to do is to create a PFX from from your .key and .cer files from the Apache server and then you can import this PFX onto your IIS Server followed by assigning it for use.
So use this to create your PFX file;
https://support.globalsign.com/customer/portal/articles/1229676-back-up-certificate---apache-openssl
Followed by;
https://support.globalsign.com/customer/portal/articles/1217281
As for everyone else if you just have a .CER file you and did not create the request you need a private key. So create a new CSR and request a reissue from your relevant CA.
The fact you cannot assign a certificate in IIS is because you do not have a private key that corresponds to the certificate.
您有两个选择：
如果您有权访问您首先创建证书的旧计算机，只需转到该计算机并从证书导出“.pfx”文件，然后在新计算机中您可以轻松导入它并完成。< /p>
如果您无法访问旧机器，那么您必须在卖方公司的帮助下重新颁发SSL证书。
希望这有帮助。
You have two options:
If you have access to the old machine you first created the certificate just go to that and export ".pfx" file from the certificate, then in the new machine you could easily import it and Done.
If you don't have access to the old machine, so you must reissue the SSL certificate with the help of the seller company.
Hope this help.
看看godaddy对于这个案例是如何回应的：
https://sg.godaddy.com/community/SSL-And-Security/completing-certificate-request-disappears-from-server/td-p/36299
但它不起作用。
我以我的方式尝试过：
- 使用 https://www.sslshopper.com/ssl-converter.html 来将我的 CRT 文件转换为 PFX 文件。
- 然后进入IIS ->服务器证书->导入->选择上一步中生成的 PFX 文件。
它对我有用。
See how godaddy response for this case:
https://sg.godaddy.com/community/SSL-And-Security/completing-certificate-request-disappears-from-server/td-p/36299
But it doesn't work.
I tried in my way :
- Use https://www.sslshopper.com/ssl-converter.html to convert my CRT file to PFX file.
- Then go to the IIS -> Server certificates -> Import -> Choose the generated PFX file in previous step.
It worked with me.