Tan iyo markii aan Encrypt sameynay , mareegaha sirta ah ayaa noqday dhaqan caadi ah. Shahaadooyinka SSL sidoo kale waa kuwo aan laga maarmi karin horumarinta maxalliga ah (tusaale ahaan, navigator.geolocation waxay u baahan tahay encryption SSL maxalli ahaan). Tan iyo nooca Chrome 58, taageerada CN (Magaca Caadiga ah) waa la joojiyay, SAN (Magaca Beddelka Mawduuca) hadda waa qasab. Natiijo ahaan, Chrome mar dambe ma aqbalayso shahaadooyin SSL ah oo la sameeyay iyadoo la adeegsanayo habab dhaqameed .
In kasta oo aad isticmaali karto qalabka internetka sida ZeroSSL si aad u abuurto shahaadooyin, ama aad u habayso Chrome si uu u shaqeeyo iyada oo aan lahayn shahaadooyin ansax ah adoo adeegsanaya xuduudaha bilowga sida `--ignore-certificate-errors` ama calanka `chrome://flags/#allow-insecure-localhost`, waxaan rabnaa inaan abuurno shahaadooyin maxalli ah oo is-saxiix ah annagoo adeegsanayna OpenSSL oo ay ku jiraan SAN oo Chrome si buuxda u aqbalayo. Hal-line-kani wuxuu sameeyaa wax kasta oo lagama maarmaan ah (kaliya `www.tld.local` ayaa u baahan in lagu beddelo domainka la rabo).:
61b7be9883ad31712c52a59252a4c9c4
Maaddaama OpenSSL nasiib darro aysan lahayn doodo toos ah oo lagu caddeeyo SAN, feyl fayl ah ayaa marka hore la sameeyaa, OpenSSL ayaa loogu yeeraa iyada oo feylka markaa la tirtiro. Isticmaalayaasha Windows waxay si fudud u fulin karaan amarkan iyagoo gacan ka helaya Cygwin (iyo bash -c "...") ama WSL cusub. Labada feylood ee ka dhashay www.tld.local.key iyo www.tld.local.cert ayaa markaa lagu dooran karaa MAMP, tusaale ahaan:
Isticmaalayaasha Windows ayaa markaa ku hoos shubta "Maamul shahaadooyinka isticmaalaha" (certmgr) ee "hay'adaha caddeynta xididdada aaminay":
Ugu dambeyntii, dib u bilow Chrome (chrome: // dib u bilaabi) oo ku raaxee qufulka cagaaran:
