嘗試分析
首先根據提示,我判斷是CA證書過時。因而對證書進行了更新html
update-ca-trustcurl
可是依然沒有解決問題。以後,嘗試了不少方法後,從新回來想一想,爲何不適用curl -v來獲取更多信息呢?因而使用該命令進行再次嘗試。url
[root@localhost ~]# curl https://www.baidu.com -vspa
NSS error -8179 (SEC_ERROR_UNKNOWN_ISSUER)firefox
參考:https://www.cnblogs.com/xuxinkun/p/5417836.htmlhtm
參考:https://stackoverflow.com/questions/275878/firefox-and-ssl-sec-error-unknown-issuerblog
Just had the same problem with a Comodo Wildcard SSL cert. ssl
After reading the docs the solution is to ensure you include the certificate chain file they send you in your config i.e.it
SSLCertificateChainFile /etc/ssl/crt/yourSERVERNAME.ca-bundleio