Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
GCA and GRCA certificate that works with Android 7.0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
@audreyt

This comment has been minimized.

Copy link
Owner Author

@audreyt audreyt commented Dec 28, 2016

把上述兩個憑證貼在 .crt 檔後面(例如 *.pdis.nat.gov.tw 的萬用憑證,可在 https://talk.pdis.nat.gov.tw/ 看到),即可橋接至 Firefox on MacOS/Linux 和 Chrome on Android,不會出現 SSL warning。

@Jasontsai99

This comment has been minimized.

Copy link

@Jasontsai99 Jasontsai99 commented Dec 28, 2016

請問您提到的「貼」這個動作,是貼在哪裡 ? 我下載了這個gca-grca.cer匯入到中繼憑證中之後,
還是不能在firefox 與 Chrome on Android中瀏覽

@audreyt

This comment has been minimized.

Copy link
Owner Author

@audreyt audreyt commented Jan 22, 2017

感謝詢問,已經更新上述訊息,主要是要更改伺服器上的 .crt 檔設定。舉例來說,talk.pdis.nat.gov.tw 的 ssl.crt 是這樣: https://gist.github.com/audreyt/d84c08ca38ed839b99b1999a71a75845

目前已知 GCOS 和 IAAS 都已經循上述方式解決。

@sujunmin

This comment has been minimized.

Copy link

@sujunmin sujunmin commented Jul 4, 2017

請問測試的 Firefox 與 Chrome 有限定版本嗎? 因為我貼完了還是會說 SEC_ERROR_UNKNOWN_ISSUER

@audreyt

This comment has been minimized.

Copy link
Owner Author

@audreyt audreyt commented Jul 4, 2017

沒有限定版本,可以開 https://talk.pdis.nat.gov.tw/ 測試看看。

@sujunmin

This comment has been minimized.

Copy link

@sujunmin sujunmin commented Jul 5, 2017

還是會有 SEC_ERROR_UNKNOWN_ISSUER
2017-07-05 11-45-23
photo6260108777919457217
photo6260108777919457216

@audreyt

This comment has been minimized.

Copy link
Owner Author

@audreyt audreyt commented Aug 1, 2017

Android 7.0 已經解決,crt 檔更新如上,也可以在 http://gca.nat.gov.tw/download/GRCA1_5_GCA2.zip 下載。

重新設定方式,請參考: http://gca.nat.gov.tw/web2/form02.html

@audreyt

This comment has been minimized.

Copy link
Owner Author

@audreyt audreyt commented Jan 15, 2018

crt 再次更新,將 GRCA 1 to GRCA 1.5 的串鏈也加上了,Qualys SSL Labs 測試評等由 B 昇為 A

@audreyt

This comment has been minimized.

Copy link
Owner Author

@audreyt audreyt commented Nov 4, 2019

subject=/C=TW/O=\xE8\xA1\x8C\xE6\x94\xBF\xE9\x99\xA2/CN=\xE6\x94\xBF\xE5\xBA\x9C\xE4\xBC\xBA\xE6\x9C\x8D\xE5\x99\xA8\xE6\x95\xB8\xE4\xBD\x8D\xE6\x86\x91\xE8\xAD\x89\xE7\xAE\xA1\xE7\x90\x86\xE4\xB8\xAD\xE5\xBF\x83 - G1
issuer=/C=TW/O=Chunghwa Telecom Co., Ltd./CN=ePKI Root Certification Authority - G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

subject=/C=TW/O=Chunghwa Telecom Co., Ltd./CN=ePKI Root Certification Authority - G2
issuer=/C=TW/O=Chunghwa Telecom Co., Ltd./OU=ePKI Root Certification Authority
-----BEGIN CERTIFICATE-----
MIIHeDCCBWCgAwIBAgIQO+7gkY6Ihq1GD+iukQycujANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0
ZC4xKjAoBgNVBAsMIWVQS0kgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe
Fw0xNTExMTcwODUxMzVaFw0zNDEyMjAwMjMxMjdaMGMxCzAJBgNVBAYTAlRXMSMw
IQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEvMC0GA1UEAwwmZVBL
SSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQCkWR+gL9++4Pvp3LWJ/lqXA8k6d6eOXK/y4xg5
9ardD0bSaA9XnKdjYNNYzjXCp/aIwk9/Gyjp0KcAxBdNbeIPxQ4mIyCr9zoookwK
C8yOzuYAmlpADdRQGpvRDZyU+dvuXNDxigfNmitALEmkXWJfp2vf7lYIUPNCGGwx
sF7lnHOSvA7SDH3FOFe8u1jbJhkC7eNDhIpOVmvbraEx2cwiZ5Z4/3edzGTFMiBq
704w1SQl/Yh5r3Ea/tVLGxWIvBhwqr2tOApmMEbliYXVdiSpqbPmWWAPtKlTwjqd
RRrWruN3XsRiNjMvMMS/lfEtOKV16NFqky5Fh0tKot+/WCeaymIZql7UsYBJlt0r
7F+Pm+Cdl4j1hAOjr7Olcy1BuuUHt29rcff3yVqvaZmzL8hPQutsa3FneN8KrE/X
SoUARhrVzbif6pWdD3zRxgWF5gjeiBeB9tW1buqhHNdhquNZQomcWX6xfGQ03WEj
Kjm1EKv8hqlTGsXrauKATlmRwDiJ/rNd1vuR6dewfdl4CMz1K8wr4aHWlHPB/lH0
jH0KtZqKufXa4Mmz2I+qgoONaVMt/QAEGEqg2lTheYyJ63/1gueguXdNrvm6AjuI
dut8XbNaE9t8KRZrmdEd5Eghog1eAYjovvGYTT7HFlccX+EIbxxMWENW94BljHEO
ogRnTwIDAQABo4ICKzCCAicwHwYDVR0jBBgwFoAUHgz3tmfy4ZImCUXAVTkudz9C
SqIwHQYDVR0OBBYEFHJbuqpyOO4lkCS1lCL6CYjKiwr7MA4GA1UdDwEB/wQEAwIB
BjBABgNVHR8EOTA3MDWgM6Axhi9odHRwOi8vZWNhLmhpbmV0Lm5ldC9yZXBvc2l0
b3J5L0NSTF9TSEEyL0NBLmNybDCBiwYIKwYBBQUHAQEEfzB9MEQGCCsGAQUFBzAC
hjhodHRwOi8vZWNhLmhpbmV0Lm5ldC9yZXBvc2l0b3J5L0NlcnRzL0lzc3VlZFRv
VGhpc0NBLnA3YjA1BggrBgEFBQcwAYYpaHR0cDovL29jc3AuZWNhLmhpbmV0Lm5l
dC9PQ1NQL29jc3BHMXNoYTIwDwYDVR0TAQH/BAUwAwEB/zCB8wYDVR0gBIHrMIHo
MA0GCysGAQQBgbcjZAABMA0GCysGAQQBgbcjZAACMA0GCysGAQQBgbcjZAADMA0G
CysGAQQBgbcjZAAEMA0GCysGAQQBgbcjZAAJMA0GCysGAQQBgbcjZAAAMAkGB2CG
dgFkAAEwCQYHYIZ2AWQAAjAJBgdghnYBZAADMAkGB2CGdgFkAAQwCQYHYIZ2AWQA
ADAIBgZngQwBAgEwCAYGZ4EMAQICMAgGBmeBDAECAzA3BgVngQwBATAuMCwGCCsG
AQUFBwIBFiBodHRwczovL2VjYS5oaW5ldC5uZXQvcmVwb3NpdG9yeTANBgkqhkiG
9w0BAQsFAAOCAgEAKoxjhLg2AmSPebJThQ8d25w0xTAYN3iI4ZA7YjaazonVuF+/
tPz3oZIMCIcYacVXIoAYOZBigkwlWHgYety17DSplY4DSBAct2V6YhnBmLYUfsdf
YXJQRjbYNaNMrz2bORikq0VH5PyPZd3nQpXL7O+mqYsmakrjbCej2oL7Ma6lLxdw
Ty3kdCOuaaUBCT2f7uFGr6wMSZUD82ZUJ0enY8oAfRw94kA/TUtkuNNbxCwsr7Dy
+nlWI328n1VgnjcwFGUAbCRcmdufhHqe05Lvv1HABw5lsu6lHAfmiB1xc2akdA/e
hDd5BdcpUiZpFF9Cx1JhR7yvTGoYKFsmL2GSxG9DBr0jFjn+nXy8pg7abPJDk8n7
/RjPvmPr/G9PLrQctIb7Jgs5PODpR5okfXdZ93udP24X2IDMDCUme9S9YeoLL1+5
3LANfxwC83QVZubLbcbdhnqkIbu/wwmuZQc3/jsQ4uEbVy9XX9ufi3Eg9hHSGOeK
v9hAoqaw+xgdrG2+h0UUa4cTo1EuQ3/m/MUfz/g0JCLgAtn/n0f3WGuO+eQWB/Tf
o4++0BY0PhpFBcUj9LqMsVffYY4sPQVJFRHBhuAUgi9B8jsT2cNYNfTTzGSRpNs9
UigmFl5yxI7NSIZXftM2mdbT3pr5nB6sLkYxeqmQFArAKhm0SzNm8ClmgFg=
-----END CERTIFICATE-----

subject=/C=TW/O=Chunghwa Telecom Co., Ltd./OU=ePKI Root Certification Authority
issuer=/C=TW/O=Chunghwa Telecom Co., Ltd./OU=ePKI Root Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

@audreyt

This comment has been minimized.

Copy link
Owner Author

@audreyt audreyt commented Nov 4, 2019

2019/09/02 之後申請的憑證改用以上串鍊即可。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment