heroku - SSL 证书验证结果 : unable to get local issuer certificate (20)

标签 heroku openssl

我正在尝试使用 Windows 8 在 Heroku 上添加 SSL 证书。我指的是 Heroku's ssl-endpoint article添加它。一切正常,直到最后一步,但是当我进入时

curl -kvI https://www.example.com

它说
SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.

这是完整的输出:
* Adding handle: conn: 0x606458
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x606458) send_pipe: 1, recv_pipe: 0
* About to connect() to www.example.com port 443 (#0)
*   Trying 107.21.111.209...
* Connected to www.example.com (107.21.111.209) port 443 (#0)
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server key exchange (12):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using DHE-RSA-AES128-SHA
* Server certificate:
*        subject: C=US; ST=California; L=San Francisco; O=Heroku, Inc.; CN=*.her
okuapp.com
*        start date: 2014-01-21 00:00:00 GMT
*        expire date: 2017-05-19 12:00:00 GMT
*        issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=DigiCert SHA2 Hig
h Assurance Server CA
*        SSL certificate verify result: unable to get local issuer certificate (
20), continuing anyway.
> HEAD / HTTP/1.1
> User-Agent: curl/7.30.0
> Host: www.example.com
> Accept: */*
>
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
* Server Cowboy is not blacklisted
< Server: Cowboy
Server: Cowboy
< Connection: keep-alive
Connection: keep-alive
< X-Powered-By: Express
X-Powered-By: Express
< Accept-Ranges: bytes
Accept-Ranges: bytes
< Date: Thu, 02 Apr 2015 05:14:25 GMT
Date: Thu, 02 Apr 2015 05:14:25 GMT
< Cache-Control: public, max-age=0
Cache-Control: public, max-age=0
< Last-Modified: Tue, 31 Mar 2015 14:21:19 GMT
Last-Modified: Tue, 31 Mar 2015 14:21:19 GMT
< Etag: W/"9e3-2781781373"
Etag: W/"9e3-2781781373"
< Content-Type: text/html; charset=UTF-8
Content-Type: text/html; charset=UTF-8
< Content-Length: 2531
Content-Length: 2531
< Set-Cookie: connect.sid=s%3AiRH8B-WEim3II5fgpXfF1otZXeqvmdMi.ibAcnpY2ATqERWyMJ
3c%2BptFMqgQLwrFQvAoOW6zh9HM; Path=/; HttpOnly
Set-Cookie: connect.sid=s%3AiRH8B-WEim3II5fgpXfF1otZXeqvmdMi.ibAcnpY2ATqERWyMJ3c
%2BptFMqgQLwrFQvAoOW6zh9HM; Path=/; HttpOnly
< Via: 1.1 vegur
Via: 1.1 vegur

<
* Connection #0 to host www.example.com left intact

这里有什么问题?先感谢您。

最佳答案

我合并了两个 SSL 证书,然后将其上传到 heroku。结合两个 SSL 证书的命令是:

cat certificate.crt gd_bundle.crt > combine.crt

它将结合 certificate.crtgd_bundle.crt创建 combine.crt

关于heroku - SSL 证书验证结果 : unable to get local issuer certificate (20),我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/29405685/

相关文章:

javascript - 为 Hubot 添加 Post 支持

ruby-on-rails - cname重定向导致heroku中的网络钓鱼警告

node.js - Heroku、node.js、服务器崩溃并出现错误 : Most middleware (like logger) is no longer bundled with Express and must be installed separately

php - 验证上传的文件是否为有效的 PEM 文件

ssl - 邮件服务器的 SSL 证书无效

heroku - 无法使用应用名称访问 Heroku 控制台

javascript - Multer 尝试创建一个已存在的新文件夹

c - 如何使用最新的 openssl 编译 curl

openssl - M2Crypto Engine 类方法中的 'name' 是什么

apache - 使用 Apache 的双向 SSL 身份验证 - CA 证书