Apache SSL chrome error： NET：：ERR_CERT_AUTHORITY_INVALID

Question

我正在尝试在我的（wamp）apache服务器上安装letsencrypt ssl证书。在Windows Server 2012 x64计算机上运行。

这些是我做的具体步骤:

步骤1. openssl genrsa-outprivatekeyfilename.key2048 openssl req-new-keyprivatekeyfilename.key-sha256-configmyconf.cnf-outcsrfilename.csr

步骤2.用csrfilename.csr对https://www.sslforfree.com/生成的证书进行加密

步骤 3：重命名私钥文件名.key

步骤4:调整了httpd-ssl配置:< br > C:\ wamp \ bin \ Apache \ Apache 2 . 4 . 9 \ conf \ extra \ httpd-SSL . conf，C:\ wamp \ bin \ Apache \ Apache 2 . 4 . 9 \ conf \ original \ extra \ httpd-SSL . conf

将这些行添加到配置中并注释掉旧行：

SSLCertificateFile c：/wamp/bin/apache/apache2.4.9/conf/certificate/my-domain.crt SSLCertificateKeyFile c：/wamp/bin/apache/apache2.4.9/conf/certificate/my-domain.key SSLCertificateChainFile c：/wamp/bin/apache/apache2.4.9/conf/certificate/my-domain.ca-bundle

（我的中国网）

[req]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = no
[req_distinguished_name]
C = NL
ST = Noord-holland
L = Amsterdam
O = JDJ
OU = IT
CN = *.my-domain.com
[v3_req]
keyUsage = critical, digitalSignature, keyAgreement
extendedKeyUsage = serverAuth
subjectAltName = @alt_names
[alt_names]
DNS.1 = my-domain.com
DNS.2 = *.my-domain.com

我预计 ssl 证书可以正常工作，但它给出了错误：
https://i.imgur.com/syuuVoy.png
https://i.imgur.com/2jA2aTB.png
有人知道出了什么问题吗？谢谢。

我将my-domain.ca的内容添加到my-domain.crt，并注释掉conf文件中的SSL证书链文件。仍然是相同的错误。

还ssl_error.log显示：

[Fri Aug 16 11:21:06.642778 2019] [ssl:warn] [pid 5256:tid 364] AH01909: my-domain.com:443:0 server certificate does NOT include an ID which matches the server name    
[Fri Aug 16 11:21:06.814657 2019] [ssl:warn] [pid 5256:tid 364] AH01909: my-domain.com:443:0 server certificate does NOT include an ID which matches the server name

Answer 1

在443上运行了另一个程序。这导致了错误。从路由器设置中删除了它，ssl正常工作。