Tag Archives: ssl

【メモ】八月豆知识

证书掉chain

  • apache: 证书本体和chain可以分开,所以直接在httpd.conf设置 SSLCertificateChainFile即可。
  • nginx: 证书本体与chain必须合体。根据nginx wiki原话:

    if you have a chain of certificates — by having intermediate certificates between the server certificate and the CA root certificate — they’re not specified separately like you would do for Apache. Instead you’ll need to concatenate all the certificates, starting with the server certificate, and going deeper in the chain running through all the intermediate certificates. This can be done with “cat chain.crt >> mysite.com.crt” on the command line.

  • 又,startssl申请的免费证书的chain通常叫sub.class1.server.ca.pem。如果证书提示不掉chain,twidere即使不勾选强制ssl通信也能读取tweet。

Continue reading

【系列】VPS搬家记 二日目

中期工作

  1. 转移数据库
  2. 部署新的wordpress(或者直接copy老的也行)
  3. 向nginx的vhost配置中添加rewrite规则

    以后再安装一键lnmp安装包,我就剁手!

啊,请原谅我的失态。本文并不是为了黑lnmp一键安装包什么的,毕竟人家免费做东西给你用也是有所付出嘛……

可是尼玛这个一键安装包真的坑了我很久有木有,有木有啊!!!

事情是这个样子的。
Continue reading