blocks|key|639340|text|不知何故，这个问题是因为丢失了证书链。从证书提供者收到证书链，并使用所有3(键，证书主体和证书链)，同时上传到ACM，所有工作良好。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|639341|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Somehow the issue was because of the missing cert chain. Received cert chain from the cert provider and used all 3 (key,cert body &amp; cert chain) while uploading it on ACM and all worked fine.

blocks|key|1104633|text|证书主体应采用此格式|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|1104634|-----BEGIN+CERTIFICATE-----
#Your+GlobalSign+SSL+Certificate#
-----END+CERTIFICATE-----
-----BEGIN+CERTIFICATE-----
#GlobalSign+Intermediate+Certificate#
-----END+CERTIFICATE-----|code-block|syntax|javascript|1104635|证书链应采用以下格式：|1104636|您完成的文件应采用以下格式：|1104637|-----BEGIN+CERTIFICATE-----
#Your+GlobalSign+SSL+Certificate#
-----END+CERTIFICATE-----
-----BEGIN+CERTIFICATE-----
#GlobalSign+Intermediate+Certificate#
-----END+CERTIFICATE-----
-----BEGIN+CERTIFICATE-----
#GlobalSign+Root+Certificate#
-----END+CERTIFICATE-----|1104638|请注意，以上所有内容都需要转换为PEM格式，以便AWS接受它。|1104639|例：openssl+x509+-inform+PEM+-in+yourCertContainingTheAbove3Cert.cer|CODE|1104640|entityMap^0|0|A|0|0|0|B|0|0|0|0|2|1S|0^^$0|@$1|2|3|4|5|6|7|X|8|@$9|Y|A|Z|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|10|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|11|8|@$9|12|A|13|B|C]]|D|@]|E|$]]|$1|M|3|N|5|6|7|14|8|@]|D|@]|E|$]]|$1|O|3|P|5|H|7|15|8|@]|D|@]|E|$I|J]]|$1|Q|3|R|5|6|7|16|8|@]|D|@]|E|$]]|$1|S|3|T|5|6|7|17|8|@$9|18|A|19|B|U]]|D|@]|E|$]]|$1|V|3|-4|5|6|7|1A|8|@]|D|@]|E|$]]]|W|$]]

Cert Body should be in this format

<pre><code>-----BEGIN CERTIFICATE-----
#Your GlobalSign SSL Certificate#
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
#GlobalSign Intermediate Certificate#
-----END CERTIFICATE-----
</code></pre>

Cert chain should be in this format:

Your completed file should be in this format:

<pre><code>-----BEGIN CERTIFICATE-----
#Your GlobalSign SSL Certificate#
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
#GlobalSign Intermediate Certificate#
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
#GlobalSign Root Certificate#
-----END CERTIFICATE-----
</code></pre>

Note that all of the above needs to be converted to PEM format for AWS to accept it. 

eg: <code>openssl x509 -inform PEM -in yourCertContainingTheAbove3Cert.cer</code>

blocks|key|2568272|text|证书体输入(server.crt)|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2568273|证书私钥输入(server.key)|2568274|证书链输入(server.ca-bundle)|2568275|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

Certificate body enter (server.crt)

Certificate private key enter (server.key)

Certificate Certificate chain enter (server.ca-bundle)

blocks|key|1104661|text|您必须找到一个名为My_CA_Bundle.txt或类似于它的文件。一旦您的证书获得批准，您将从证书提供程序获得它。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1104662|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

You have to find a file with a name My_CA_Bundle.txt or similar to it.
You will get it from the certificate provider as soon as you certificate gets approved.

blocks|key|2568317|text|我最初没有证书链，只是证书本身和私钥。因为我的是通配符(*.example.com)，所以我和火狐一起去了一个在无AWS平台上工作的url+(another.example.com)，点击了锁，连接安全->更多信息的->视图证书，在这里--得到丢失的链的链接：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2568318|​|2568319|📷|atomic|offset|length|2568320|2568321|entityMap|0|IMAGE|mutability|IMMUTABLE|imageUrl|https://developer.qcloudimg.com/http-save/yehe-900000/24478bf95004db7f1c10f2bc723d12b9.jpg|imageAlt^0|0|0|0|1|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|T|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|U|8|@]|9|@$G|V|H|W|1|X]]|A|$]]|$1|I|3|C|5|6|7|Y|8|@]|9|@]|A|$]]|$1|J|3|-4|5|6|7|Z|8|@]|9|@]|A|$]]]|K|$L|$5|M|N|O|A|$P|Q|R|-4]]]]

I did not have Certificate chain initially, just certificate itself and private key. As mine was wildcard (*.example.com), I went with Firefox to an url (another.example.com) that was working on none-AWS platform, clicked the lock, Connection Secure -&gt; More information -&gt; View certificate and here you go - the link to get the missing Chain:
<a href="https://i.stack.imgur.com/3yVlP.jpg" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/3yVlP.jpg" alt="missing Chain" /></a>

I receive this error when I try to import a certificate on AWS ACM.

<blockquote>
 Provided certificate is not a valid self signed. Please provide either a valid self-signed certificate or certificate chain.
</blockquote>

The certificated I have are initially in .pfx format and I use sslshopper: <a href="https://www.sslshopper.com/ssl-converter.html" rel="noreferrer">https://www.sslshopper.com/ssl-converter.html</a> to convert them into pem. There is only certificate body and private key present in the converted pem format and no certficate chain. Can this be the reason of this error. 
But I thought cert chain is optional .

The format of private key and cert body seems to be correct and is enclosed between 

<pre><code>---Begin cert body/privateKey
---End cert body/privateKey
</code></pre>

<a href="https://i.stack.imgur.com/oNkva.jpg" rel="noreferrer"><img src="https://i.stack.imgur.com/oNkva.jpg" alt="error"></a>

What can be the issue here ?

The cert body and the cert private key seems to be ok to me as it clearly shows me the name,expiry date etc once I paste the contents into the respective fields (please refer the green content in the attached screenshot.)

Provided certificate is not a valid self signed. Please provide either a valid self-signed certificate or certificate chain

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

当我试图在AWS ACM上导入证书时，我会收到此错误。如果证书不是有效的自签名证书。请提供有效的自签名证书或证书链.我拥有的证书最初是.pfx格式的，我使用sslshopper：将它们转换为pem。转换后的pem格式中只有证书主体和私钥，没有证书链。这是造成这个错误的原因吗。但我认为证书链是可选的。私钥和证书正文的格式...

问如果证书不是有效的自签名证书。请提供有效的自签署证书或证书链。
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如果证书不是有效的自签名证书。请提供有效的自签署证书或证书链。EN