Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

同一个域名无法共存RSA+ECC双证书 #309

Closed
jearton opened this issue Feb 20, 2024 · 0 comments
Closed

同一个域名无法共存RSA+ECC双证书 #309

jearton opened this issue Feb 20, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@jearton
Copy link

jearton commented Feb 20, 2024

Describe the bug
我用一个域名先申请了RSA证书,再去申请ECC证书后,列表里会显示最新的ECC证书,原来的RSA证书没了。

To Reproduce
Steps to reproduce the behavior:

  1. 先创建一个阿里云DSN凭证
  2. 申请RSA证书
  3. 用同一个域名再申请ECC证书
  4. 原来的RSA证书不见了

Expected behavior
RSA证书和ECC证书应该同时存在才对

Screenshots
image

Info (please complete the following information):

  • Server OS: Ubuntu 22.04
  • Server Arch: x86
  • Nginx UI Version: 最新版
  • Your Browser: Chrome

Additional context
我猜是因为名称重复导致的,因为你这个列表页上都看不出是什么密钥类型。我建议名称上加上一个密钥类型后缀,比如 *.xxx.com_ec256 *.xxx.com_rsa2048,避免重复。如果连密钥类型都重复了,那么在生成的时候,就应该提前校验阻断,避免多余的无意义操作。

我为什么需要双证书,因为HTTPS网站只有使用了双证书,在MySSL里才能评级到A+级别。

修改建议:在名称上加后缀作区分,并且列表页透出密钥类型这一列。这样也可以兼容存量数据,不会影响兼容性。

@jearton jearton added the bug Something isn't working label Feb 20, 2024
@0xJacky 0xJacky added this to the v2.0.0-beta.19 milestone Feb 28, 2024
@0xJacky 0xJacky mentioned this issue Apr 30, 2024
8 tasks
@0xJacky 0xJacky moved this to Done in Nginx UI v2 Apr 30, 2024
@0xJacky 0xJacky closed this as completed Apr 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
Status: Done
Development

No branches or pull requests

2 participants