开发者

SSL configuration with play framework and the chain file

I have configured play internal web-server with SSL with following configuration:

https.port=9443
certificate.key.file=conf/host.key
certificate.file=conf/host.cert

but the problem is that the newest firefox is unable to authenticate and gives the following message:

The certificate is not trusted because no issuer chain was provided.

in Apache2 y开发者_开发技巧ou can specify the chain file with SSLCertificateChainFile, anyone knows how to do it in play?

thanks!


Latest Update: Even after combining chain file with main cirtificate, firefox is complaining about untrusted connection. I am giving up. I will use Appache httpd in the front.

Finally, I was able to setup ssl with godaddy cirtificates, directly in play framework webserver.

In application.conf add the lines.

%prod.http.port=80
%prod.https.port=443
%prod.certificate.key.file=conf/hostname.key
%prod.certificate.file=conf/hostname.combined.crt

Combine the CA signed certificate and the bundle file into one.

openssl x509 -inform PEM -in hostname.crt -text > hostname.combined.crt
openssl x509 -inform PEM -in "sf_bundle.crt" -text >> hostname.combined.crt

And copy the following files to your conf folder (Don't put it in a sub-folder. It will not work)

sf_bundle.crt
hostname.crt
hostname.csr
hostname.key


In another forum, I came across a solution with which you can combine your certificate and chain file into one file. This way you don’t have to specify a separate chain file. Hope this helps. http://help.globalscape.com/help/eft5/admin/certificate_chaining.htm

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜