Date Tags Nginx

StarSSL是免费的好用的认证,但最新的firefox对其颁发的证书不能直接认证, 必须使用chain.

ssl  on;
ssl_certificate  /etc/nginx/ssl/security.crt;
ssl_certificate_key  /etc/nginx/ssl/security.key;

使用以下命令后,nginx就可以chain了

curl http://www.startssl.com/certs/sub.class1.server.ca.pem >>security.crt
curl http://www.startssl.com/certs/ca.pem >>security.crt