CENTOS 7:卷曲SSL错误:您正在尝试以相同的方式导入证书
我正在测试由MTL保护的Web服务。我已经发布了 客户端和服务器证书(用于测试目的),并将服务器证书添加到Trust Store。 以下命令在Ubuntu上起作用,但在CentOS 7:
curl --cert MY_CLIENT_CERTIFICATE.pem https://MY_URL
在CentOS 7(curlv。7.29)上,它返回:
cURL error 35: sl error: you are attempting to import a cert with the same issuer/serial as an existing cert
我是否正确理解curl不允许我使用同一发行人同时发布客户端和服务器证书?有解决方法吗?
I am testing a web service protected with mtls. I have issued both client and server certificates (for testing purposes) and added the server certificate to trust store.
The following command works on Ubuntu but not on Centos 7:
curl --cert MY_CLIENT_CERTIFICATE.pem https://MY_URL
On centos 7 (cURL v. 7.29), it returns:
cURL error 35: sl error: you are attempting to import a cert with the same issuer/serial as an existing cert
Do I understand it correctly that cURL does not allow me to issue both client and server certificates using the same issuer? Is there a workaround?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
而不是相同的发行人,而是相同的发行人和序列号:
...如果使用同一CA签发的不同证书,则 ,然后签发证书的签发过程:同一CA签发的不同证书必须具有不同的序列号。您需要修复此过程,而不是尝试解决此过程。
It is not about the same issuer but about the same issuer and serial number:
If the same serial number is used for different certificates issued by the same CA then the certificate issuing process is broken: different certificates issued by the same CA MUST have different serial numbers. You need to fix this process and not try to work around it.
更新
curl
修复了问题Updating
curl
fixed the problem