原因:SSL证书缺少根证书
如果你是自己上传的证书,那就是只设置了秘钥和域名证书
如果下载的SSL证书有三个文件
ca_bundle.crt 根证书
certificate.crt 域名证书
private.key 秘钥
如果是Apache服务器,则是这样设置
SSLEngine on
SSLCertificateFile /etc/ssl/certificate.crt
SSLCertificateKeyFile /etc/ssl/private.key
SSLCertificateChainFile /etc/ssl/ca_bundle.crt
如果是Nginx服务器,则要把 certificate.crt 和 ca_bundle.crt 文件合并
cat certificate.crt ca_bundle.crt certificate.crt
然后这样设置
ssl on;
ssl_certificate /etc/ssl/certificate.crt;
ssl_certificate_key /etc/ssl/private.key;