向证书注册机构申请了WEB服务器的ssl证书,用IE7访问一直提示不受信任的根证书,用IE6则是没问题。跟证书注册机构联系说要设置证书链,
apache中是设置SSLCertificateChainFile
多次测试,搞定,证书链是由根证书+一级证书....+本服务器证书构成:
cat 11.cer 22.cer UserCert.cer >chain.pem
SSLCertificateFile /etc/httpd/conf/UserCert.cer
SSLCertificateKeyFile /etc/httpd/conf/server.key
SSLCertificateChainFile /etc/httpd/conf/chain.pem