开发者

Grails SSL certificate error

开发者 https://www.devze.com 2023-04-12 07:03 出处:网络
I\'m using the acegi security plugin and I run the app -https. The cert is generated but I get a certificate warning when i visit the web page. I have then download the weak ssl plugin and added weaks

I'm using the acegi security plugin and I run the app -https. The cert is generated but I get a certificate warning when i visit the web page. I have then download the weak ssl plugin and added weaks开发者_开发百科sl.trustAll =true to Config.groovy. But still getting the same warning. Have I left out anything?


The warning is normal. You can just accept the self-signed certificate. The weakssl module allows the Grails server to trust itself even if it provides a self-signed certificate. It has no effect whatsoever on the client. (Think what a horrible security hole it would be if you could just install some code on the server and get a client to accept a self-signed certificate without a warning!)


To solve your problem you need to either

  • manually tell your browser the certificate is OK by adding the certificate to your truststore

or

  • get a certificate from a trusted CA (Certificate Authority) a list of trusted CAs is stored in your browser. To get a certififate from a CA you need to proof your identity and pay (a lot) some money.

so I recommend you just accept the untrusted certifcate unless you want to buy a CA certificate.

The config you changed tells only the server to accept all certificates. i.e. if your server is connecting to another server

0

精彩评论

暂无评论...
验证码 换一张
取 消