Today, Lao Zuo met a netizen who asked him what to do if his website certificate was not trusted. I also opened the website provided by him and saw that there was a prompt after opening it“ The site security certificate is not trusted "I have a look at the problem. It should be that he did not configure the certificate, but he told me that it was still good yesterday. Why is it like this today? He has not modified the SSL configuration file. So we continued to investigate.
Here Lao Zuo records the process of resolving the untrusted SSL certificate. And simply sort out the reasons and solutions for untrusted certificates.
First, check the certificate configuration file
Here Lao Zuo asks for the student's server configuration information, logs in to the file manager, and checks whether his SSL certificate configuration URL address corresponds to the file. Although he said that he had not processed files, he still needs to make sure that some people's website servers are not managed by him alone, and maybe someone has moved them.
Second, source of inspection certificate
Let's check the source of the SSL certificate. The certificate is purchased from abroad. I also often buy on this platform, which should be no problem, but I still go to the official background of the certificate to download the latest certificate, and there are three certificate files in total, two of which need to be merged. Here I also merge according to the rules. It can be confirmed that the certificate is authenticated and there is no problem.
Third, check whether the certificate is expired
It seems that the problem will be found, because when I check the certificate above, the certificate can be downloaded. But I saw that his certificate was actually expired, and it only expired for two days. It seems that this is the problem. His certificate is expired. We need to renew the certificate and download the certificate configuration again. After configuration, restart the NGINX engine to take effect.
Finally, the problem is solved. So the problem of SSL certificate distrust has finally been solved.
