CENTOS 7:卷曲SSL错误:您正在尝试以相同的方式导入证书

发布于 2025-01-30 13:34:50 字数 417 浏览 6 评论 0原文

我正在测试由MTL保护的Web服务。我已经发布了 客户端和服务器证书(用于测试目的),并将服务器证书添加到Trust Store。 以下命令在Ubuntu上起作用,但在CentOS 7:

curl --cert MY_CLIENT_CERTIFICATE.pem https://MY_URL

在CentOS 7(curlv。7.29)上,它返回:

cURL error 35: sl error: you are attempting to import a cert with the same issuer/serial as an existing cert

我是否正确理解curl不允许我使用同一发行人同时发布客户端和服务器证书?有解决方法吗?

I am testing a web service protected with mtls. I have issued both client and server certificates (for testing purposes) and added the server certificate to trust store.
The following command works on Ubuntu but not on Centos 7:

curl --cert MY_CLIENT_CERTIFICATE.pem https://MY_URL

On centos 7 (cURL v. 7.29), it returns:

cURL error 35: sl error: you are attempting to import a cert with the same issuer/serial as an existing cert

Do I understand it correctly that cURL does not allow me to issue both client and server certificates using the same issuer? Is there a workaround?

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(2

離人涙 2025-02-06 13:34:50

... curl不允许我使用相同的发行人发行客户端和服务器证书

而不是相同的发行人,而是相同的发行人和序列号:

...您试图用与现有证书相同的发行人/序列化导入证书

...如果使用同一CA签发的不同证书,则 ,然后签发证书的签发过程:同一CA签发的不同证书必须具有不同的序列号。您需要修复此过程,而不是尝试解决此过程。

... cURL does not allow me to issue both client and server certificates using the same issuer

It is not about the same issuer but about the same issuer and serial number:

... you are attempting to import a cert with the same issuer/serial as an existing cert

If the same serial number is used for different certificates issued by the same CA then the certificate issuing process is broken: different certificates issued by the same CA MUST have different serial numbers. You need to fix this process and not try to work around it.

风筝有风,海豚有海 2025-02-06 13:34:50

更新curl修复了问题

Updating curl fixed the problem

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文