NetscalerSSL证书的导入和link
egzhe'g使用公网证书进行NetScaler环境的部署,经常会发现部分移动终端无法访问虚拟资源,提示证书错误,原因如下:
据传,目前国外证书颁发机构无法对个人或企业申请的证书直接颁发最高级别的顶级证书,
目前一般的做法是通过委托第三方子集证书颁发机构进行颁发。
以知名公网证书颁发机构VeriSign为例,顶级证书类型为G5,目前一般会通过G3机构进行证书的颁发。
用户采购证书后,系统会根据提交的csr文件提供证书文件,同时还会提供2个intermedia证书,如下是资生堂证书采购后收到的邮件:
您的SSL证书(适用于其它Web服务器)->NetScaler申请的服务器证书
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
企业型SSL中级证书->中级证书 G3 intermedia证书
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
企业型SSL交叉证书->顶级证书 G5
-----BEGIN CERTIFICATE-----
MIIEkDCCA/mgAwIBAgIQGwk7eGCW2je7pFGURsiWeDANBgkqhkiG9w0BAQUFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsT
LkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkw
HhcNMDYxMTA4MDAwMDAwWhcNMjExMTA3MjM1OTU5WjCByjELMAkGA1UEBhMCVVMx
FzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVz
dCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZv
ciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAz
IFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJAgIKXo1nmAMqudLO07cfLw8
RRy7K+D+KQL5VwijZIUVJ/XxrcgxiV0i6CqqpkKzj/i5Vbext0uz/o9+B1fs70Pb
ZmIVYc9gDaTY3vjgw2IIPVQT60nKWVSFJuUrjxuf6/WhkcIzSdhDY2pSS9KP6HBR
TdGJaXvHcPaz3BJ023tdS1bTlr8Vd6Gw9KIl8q8ckmcY5fQGBO+QueQA5N06tRn/
Arr0PO7gi+s3i+z016zy9vA9r911kTMZHRxAy3QkGSGT2RT+rCpSx4/VBEnkjWNH
iDxpg8v+R70rfk/Fla4OndTRQ8Bnc+MUCH7lP59zuDMKz10/NIeWiu5T6CUVAgMB
AAGjggFbMIIBVzAPBgNVHRMBAf8EBTADAQH/MDEGA1UdHwQqMCgwJqAkoCKGIGh0
dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTMuY3JsMA4GA1UdDwEB/wQEAwIBBjA9
BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVy
aXNpZ24uY29tL2NwczAdBgNVHQ4EFgQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwbQYI
KwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2UvZ2lmMCEwHzAHBgUrDgMCGgQU
j+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVyaXNpZ24uY29t
L3ZzbG9nby5naWYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v
b2NzcC52ZXJpc2lnbi5jb20wDQYJKoZIhvcNAQEFBQADgYEAo819HvfHdY1I51Y0
TACQdalRpVbBbbz+9VMi6ZiirJp+cB6zjjtF44aVMdptTPs0UICWzSTyQN8EP+Jl
zjQiYRXqZnBk0vFu88oYWWpBRn6C3hmwcDFWaQ0M5h2dcVjczN5i9eF6EALYetw7
+le9yemPRiE5n1FlTI46vihBcB0=
-----END CERTIFICATE-----
我们需要做的是将这三个证书保存后上传NetScaler,如名称分别为server,cer G3,cer G5,cer
将server,cer与server,key组合成server,pair,将G3,cer单独组合成G3,pair,将G5,cer单独组合成G5,pair。
同时,在Certificates页面,将server,pair和G3,pair做关联,再将G3,pair和G5,pair做关联
转载于:https://blog.51cto.com/10237709/1765219
NetscalerSSL证书的导入和link相关推荐
- IIS服务器证书的导入 IIS 5、IIS 6、IIS 7
IIS服务器证书的导入 IIS 5.IIS 6.IIS 7 Windows 2000 - Microsoft IIS Version 5.0 1.首先,将PFX文件复制到服务器c:\下.在" ...
- SAP 安全证书的导入
如果sap需要连接外部的系统 如聊天系统 Bold 360, 互相通调用 其REST API的话需要安全认证,外部系统一般有一个安全证书需要导入sap 系统 方可通读. STRUST 可以导入证书
- “无法建立到信任根颁发机构的证书链问题解决,根证书的导入方法
"无法建立到信任根颁发机构的证书链"问题解决,根证书的导入方法 安装NET FrameWork 4.6及以上版本时,若提示"无法建立到信任根颁发机构的证书链", ...
- Openssl生成自签名证书并导入浏览器脚本
Openssl生成自签名证书并导入浏览器 使用说明 1. 准备工作 2. 脚本 3. 导入浏览器 4. 使用证书 使用说明 环境:Centos 7 运行脚本后可以生成根证书.自签名证书(可以指定域名或 ...
- 自建CA证书以及导入到浏览器实现https安全连接
自建CA证书以及导入到浏览器实现https安全连接 安装 openssl(一般centos 系统都会自带安装好的了) 目录:/etc/pki/CA/ yum install openssl opens ...
- Web安全1.3:Arachni扫描器安装、Burpsuit激活及https证书的导入
文章目录 Web安全1.3:Arachni扫描器安装.使用+Burpsuit激活及https证书的导入 一.Arachni 扫描器安装.使用: 1.下载Arachni包: 2.解包: 3.运行 ara ...
- 安装SSL证书-解决导入证书时的ASN1 bad tag value met错误
原文:http://www.cnblogs.com/terrysun/archive/2011/03/02/1969180.html 以VeriSign的证书为例,首先到VeriSign的网站上www ...
- ca证书 linux 导入_Linux CA证书服务器搭建
Lab3.1 准备环境: 安装openssl工具 yum install –y openssl 修改/etc/pki/tls/openssl.cnf将 dir = ../../CA修改为/etc/pk ...
- 利用JDK自带的keytool生成SSL证书然后导入到SpringBoot
一:生成命令如下(这一步生成的暂不知道干嘛用的) E:\Desktop\Documents\证书>keytool -genkey -alias tomcat -keypass 12345678 ...
- java导入cer证书_java导入cer证书
在项目开发中,有时会遇到与SSL安全证书导入打交道的,如何把证书导入java中的cacerts证书库呢? 其实很简单,方法如下: 每一步:进入某个https://www.xxx.com开头的网站,把要 ...
最新文章
- 【go】sdk + idea-plugin 开发工具安装
- 哪个版本python适用于windows-何种版本的Python适合您
- 004_JSONArray对象公共方法
- 【视频课】零基础免费38课时深度学习+超60小时CV核心算法+15大Pytorch CV实践案例助你攻略CV...
- 迁移学习简介(tranfer learning)
- 【职场】职场上给的期权是什么,重要吗?
- Redis入门(二)之数据类型
- 从面试的这些细节就可判断公司的好坏
- C# 使用Bitmap类进行图片裁剪
- 在Linux中快速找到文件的几种方法
- 【Kafka】kafka console received unknown topic or partition error listOffset request
- 探讨一下常见支付系统的对外接口
- Installshield2010实现web部署和数据库安装示例
- 如何让背景图片固定在中间,滚动内容图片不动?
- CMU 15-213 Introduction to Computer Systems学习笔记(8) Machine-Level Programming-Advanced
- FORTAN中一个表达式多行
- mysql增加行_MySQL添加新行
- 理解以太坊 Serenity - 第二部分: Casper
- mysql的查询分析工具下载_万能数据库查询分析器(ODBC数据库查询分析工具)V7.03 最新版...
- 【文献阅读】Multi-state MRAM cells for hardware neuromorphic computing