If an SSL certificate exception occurs when you access Object Storage Service (OSS) over HTTPS, you can troubleshoot the error by referring to the following methods.
No SSL certificates are configured for the domain name
Problem description
Open a URL in a browser. An error is returned, indicating that your connection is not private. The following error message is also returned: NET::ERR_SSL_PROTOCOL_ERROR
.
Causes
No SSL certificates are configured for the domain name. You can run the telnet command to test the connectivity of port 443. If port 443 cannot be connected, it indicates that no SSL certificates are configured.
Solutions
Log on to the OSS console and upload an SSL certificate. For more information, see Host SSL certificates.
The SSL certificates expired
Problem description
Open a URL in a browser. An error is returned, indicating that your connection is not private. The following error message is also returned: NET::ERR_CERT_DATE_INVALID
.
Causes
The SSL certificate bound to the domain name expired. You can view the expiration time of the SSL certificate in the browser.
Solutions
Re-apply for an HTTPS certificate.
Log on to the OSS console and upload an SSL certificate. For more information, see Host SSL certificates.
The specified domain name does not match the domain name in the certificate
Problem description
Open a URL in a browser. An error is returned, indicating that your connection is not private. The following error message is also returned: NET::ERR_CERT_COMMON_NAME_INVALID
.
Causes
The specified domain name is not the same as the domain name in the certificate. For example, the access URL is https://example.aliyun.com/object
, but the domain name to which the specified certificate points is *.oss-cn-hangzhou.aliyuncs.com
.
Solutions
Log on to the OSS console and upload an SSL certificate. For more information, see Host SSL certificates.