質問: rt.lsd.co.za verify return:1 --- certificate chain 0 s:/o=lsd.co.za/cn=rt.lsd.co.za i:/o=lsd.co.za/cn=certificate authority --- server certificate -----begin certificate----- miidizccanogawibagicak4wdqyjkozihvcnaqelbqawndesmbaga1uechmjtfne lknpllpbmr4whaydvqqdexvdzxj0awzpy2f0zsbbdxrob3jpdhkwhhcnmtcwmjax mdkxmdmxwhcnmtkwmjaymdkxmdmxwjarmriweaydvqqkewlmu0quq08uwkexftat bgnvbamtdhj0lmxzzc5jby56ytccasiwdqyjkozihvcnaqebbqadggepadccaqoc ggebajdkurtleard+eennuc914crmuwfqbdrq51kzo/8brmlgukqkbouupqzhopy v4/pn1i14uecfhuwu1bw9al20w1tmrefibx6/oe9d0rfrt7+b3fvri4pjgiue6ss 12y8xazldsmuuirradon3q6szxkazxmbxnur1ub0cgyxvardrw544wntpu0tfkkz zancq++nnnttgwqevt/uogucprr3ybiptcg5thjmo5pxqhbewy/e55xfsnzgmugi 7aoshuhejne0inw9yatfa9htfhd+vwcpg/cogi5ys86lbq1gulcn2uangkepjuxd nnezsm/bxtzbvp0htgbe1tas610caweaaaobrzcbrdafbgnvhsmegdawgbqlfxhn 0le+dcgfqjcczj2dghzygza7bggrbgefbqcbaqqvmc0wkwyikwybbquhmaggh2h0 dha6ly9kb24ubhnklmnvlnphojgwl2nhl29jc3awdgydvr0paqh/baqdagtwmb0g a1udjqqwmbqgccsgaqufbwmbbggrbgefbqcdajadbgnvhq4efgqujiydqnts9kan mihz9r3vbk1fgbgwdqyjkozihvcnaqelbqadggebablmrbze/eieb89ihwmnaycf znoxvibzpzoy8qevzbwqz85kn2ytgyqxlvku3duxmjzh+xd4bhmt24hvks28fqfx zzeno0tjjxkowadhtlhzde5yps+yvbwxb0xe65glghwutlh+psxfj7dwmm9cvsm2 ik0ijcw8xxxcwntu8v+7ghs97lp8rsya/fvqbjiktvkrto4fppulyaixynszcddb kvujwazfdvicbwebbkrzbuu3jjv9vsk7zflelrff0hcugywjykf8lmrlg994x8jf fvwlfuuzeisevlidzxlrsozihojbclqc2pwutlquvfcca+9gpnqbc50hlapzb+i= -----end certificate----- subject=/o=lsd.co.za/cn=rt.lsd.co.za issuer=/o=lsd.co.za/cn=certificate authority --- no client certificate ca names sent peer signing digest: sha512 server temp key: ecdh, p-256, 256 bits --- ssl handshake has read 1622 bytes and written 454 bytes --- new, tlsv1/sslv3, cipher is ecdhe-rsa-aes256-gcm-sha384 server public key is 2048 bit secure renegotiation is supported compression: none expansion: none no alpn negotiated ssl-session: protocol : tlsv1.2 cipher : ecdhe-rsa-aes256-gcm-sha384 session-id: 04a8b44739ca7d3fe553734af99193176a5a849784ae03dbd6c87aba7fa5dacc session-id-ctx: master-key: 153ef67a35ce63e1ba4317424b1a2abfd17c26cce2e78a3ed215979b383a0abcf4d5bc035abfc1f6bf11780ac1836fac key-arg : none psk identity: none psk identity hint: none srp username: none tls session ticket lifetime hint: 300 (seconds) tls session ticket: 0000 - 28 83 96 6e ba 76 6f d6-58 dd 27 78 29 92 94 3d (..n.vo.x.'x)..= 0010 - 39 be 32 04 02 9a 8c 56-3f f9 49 c2 87 14 31 a5 9.2....v?.i...1. 0020 - 74 ef ce 06 4c b8 99 fe-35 90 f1 07 29 0b 60 f7 t...l...5...).`. 0030 - 51 b0 2d 78 5d 6a 7c 84-ca 4d 51 d0 d2 ae 9b 2e q.-x]j|..mq..... 0040 - 8f f5 79 8a ab c3 3c bb-66 fc 51 5c a3 10 ca 1f ..y...<.f.q\.... 0050 - f2 1d c5 59 4e 98 e4 9e-89 27 15 d0 89 86 e8 23 ...yn....'.....# 0060 - 85 f5 78 f4 48 26 9f 96-f5 27 01 fc c2 e2 c5 c7 ..x.h&...'...... 0070 - 76 bf 35 f1 25 23 b9 fe-c5 93 30 1c 26 94 fa 81 v.5.%#....0.&... 0080 - b8 5f d1 06 50 9e 98 85-54 08 7f e6 07 16 1c 20 ._..p...t...... 0090 - 96 1c 23 6c fb 21 0f 3c-f6 62 97 e5 81 63 71 95 ..#l.!.<.b...cq. 00a0 - c9 15 49 72 c1 33 d5 db-96 de cc a2 65 4e d2 de ..ir.3......en.. 00b0 - fb ce 73 25 3c 65 2d 7c-a8 60 68 93 fe e2 67 5c ..s%<e-|.`h...g\ 00c0 - 78 59 72 43 4b ba e2 68-9f 69 1e 8a 11 40 25 2c xyrck..h.i...@%, start time: 1486113094 timeout : 300 (sec) verify return code: 0 (ok) --- 私は何が悪いのかを理解しようとするのに途方に暮れています。任意のヒント?caの公開証明書:-----begin certificate----- miidhtccam2gawibagibatanbgkqhkig9w0baqsfada0mriweaydvqqkewlmu0qu q08uwkexhjacbgnvbamtfunlcnrpzmljyxrlief1dghvcml0etaefw0xmjeymdyx nde1ntjafw0ymdeymdyxnde1ntjamdqxejaqbgnvbaotcuxtrc5dty5aqteembwg a1ueaxmvq2vydglmawnhdgugqxv0ag9yaxr5miibijanbgkqhkig9w0baqefaaoc aq8amiibcgkcaqea3khfpt0gcbxomax/mlrhdjwbjchbiqxdypc8nlsnlhbjyhyy htdc6eytf1j6jsy4jlwyh2brw7crzngtwpw4sukjvf1tuk+abwiaueznmxijr9fe azigc4gqpmbfh9exk514kmx1mkfnciaybiogby2ugefrkwvefs64dp/0wic2dxlv msiw+p8qx2qyvk57rofjv98pf5b2nc8uvoavlwu1lgyy7ydiph9q9ztu7cvhanoo xow6zy0blknfh6b6sm9hwqzlpfiy7xdsefpd7t8mrzyfz53yy3m4ob+6jkxiz+if knidhaf/kbssg6bm3f4e5djlrfdiz3ens+teiqidaqabo4ghmigemb8ga1udiwqy mbaafcv/ggfqst51yb+okjxmpz0ahnidma8ga1udeweb/wqfmambaf8wdgydvr0p aqh/baqdaghgmb0ga1uddgqwbbqlfxhn0le+dcgfqjcczj2dghzygza7bggrbgef bqcbaqqvmc0wkwyikwybbquhmaggh2h0dha6ly9kb24ubhnklmnvlnphojgwl2nh l29jc3awdqyjkozihvcnaqelbqadggebabgk6zy8f7g1wd73g4ddjdttdktgljcf gsohvgjmjks0rixcxsgsuxkfbh1skro+v4dgrlshqlgtxmzlywrfqvyyepxsu8v1 2o3wcbinkn2txokv4laifun5jdralkpuww0413243ms2vblkxjkupt4m6yw1x7zw j/ayuzedmtcfm5zdxckbssfeaxoygz14y+cnn+x7xpp0lugwas9jz07ao/bzkb4i kgipkks1v4gd75q5v18d2cwzpc9yf8p3797hfrwuadqz4v/ym6xya1n5uihmct+x 5wblufxj7gd+iy2ckax4akxqiqwh3pt9vxijihyv3wuma4muivnyimw= -----end certificate-----
回答: firefoxには、2016-08-23以降に発行された証明書にsubjectaltnameフィールドが必要であるという新しいポリシーがあります。 https://bugzilla.redhat.com/show_bug.cgi?id=140029 https://bugzilla.mozilla.org/show_bug.cgi?id=1324096