无法验证ssl证书
我无法验证我的一个客户的网站管理员帐户 谷歌表示“验证失败-与服务器的连接超时。” 当我尝试设置URL时,我发现以下错误。有人能帮我解决这个问题吗无法验证ssl证书,ssl,wget,Ssl,Wget,我无法验证我的一个客户的网站管理员帐户 谷歌表示“验证失败-与服务器的连接超时。” 当我尝试设置URL时,我发现以下错误。有人能帮我解决这个问题吗 [pdurgapal]$ wget https://atlanticdiscountstore.com --2017-06-28 11:48:48-- https://atlanticdiscountstore.com Resolving atlanticdiscountstore.com... 188.241.58.18 Connecting t
[pdurgapal]$ wget https://atlanticdiscountstore.com
--2017-06-28 11:48:48-- https://atlanticdiscountstore.com
Resolving atlanticdiscountstore.com... 188.241.58.18
Connecting to atlanticdiscountstore.com|188.241.58.18|:443... connected.
ERROR: cannot verify atlanticdiscountstore.com’s certificate, issued by “/CN=baldwincountyunited.com”:
Self-signed certificate encountered.
ERROR: certificate common name “baldwincountyunited.com” doesn’t match requested host name “atlanticdiscountstore.com”.
To connect to atlanticdiscountstore.com insecurely, use ‘--no-check-certificate’.
[pdurgapal]$
您必须使用一个非常旧的wget版本,它不支持SNI。使用支持SNI的适当客户端时,可以验证证书。除此之外,在成功完成TLS握手后,服务器的响应速度非常慢,但这不是您所问的问题 要演示问题,请在没有SNI的情况下访问站点:
$ openssl s_client -connect atlanticdiscountstore.com:443 |\
openssl x509 -text
...
Subject: CN=baldwincountyunited.com
...
X509v3 Subject Alternative Name:
DNS:baldwincountyunited.com, DNS:mail.baldwincountyunited.com, DNS:www.baldwincountyunited.com
对于SNI:
$ openssl s_client -connect atlanticdiscountstore.com:443 \
-servername atlanticdiscountstore.com |\
openssl x509 -text
...
Subject: ... CN=*.atlanticdiscountstore.com
...
X509v3 Subject Alternative Name:
DNS:*.atlanticdiscountstore.com, DNS:atlanticdiscountstore.com
在那一页上第一次再见的时间是42秒。该网站加载时间太长,这可能是谷歌暂停连接的原因。可能是重复的