nginx ingress - 使用完整中间链CA证书生成SSL证书时出现意外错误：证书无效

Question

我在kubernetes 1.9集群上运行nginx ingress。使用内部签名证书作为应用程序URL，我已经包括root＆amp;中间证书部分TLS分泌。

从我的nginx日志文件中，我经常看到此消息。

backend_ssl.go:139] unexpected error generating SSL certificate with full intermediate chain CA certs: Invalid certificate.

如何获取有关此错误消息的更多详细信息？

错误消息：

E0129 01:11:39.582118       7 backend_ssl.go:139] unexpected error generating SSL certificate with full intermediate chain CA certs: Invalid certificate.
E0129 01:11:39.582689       7 backend_ssl.go:139] unexpected error generating SSL certificate with full intermediate chain CA certs: Invalid certificate.
E0129 01:11:39.583031       7 backend_ssl.go:139] unexpected error generating SSL certificate with full intermediate chain CA certs: Invalid certificate.
E0129 01:11:39.583308       7 backend_ssl.go:139] unexpected error generating SSL certificate with full intermediate chain CA certs: Invalid certificate.

Answer 1

某些证书不支持它。您需要设置--enable-ssl-chain-completion = false。然后停止