Ngrok服务端报错Failed to read message: remote error: tls: bad certificate

秦羽 2022-07-09 PM 453℃ 0条

### 问题

Ngrok部署后，客户端一致连接不上

![](https://www.qinyu.cc/usr/uploads/2022/07/2026544601.png)

### 服务端报错

> [WARN] (ngrok/log.(*PrefixLogger).Warn:87) [tun:4b340f7] Failed to read message: remote error: tls: bad certificate

### 客户端报错

注：客户端启动时增加`-log=xxx.log`可记录日志用来排查问题，如`ngrok.exe -config=ngrok.cfg -log=xxx.log 8000`

> [EROR] (ngrok/log.Error:120) control recovering from failure x509: certificate relies on legacy Common Name field, use SANs instead

### 解决方法

在使用`openssl`生成证书时增加参数`-addext "subjectAltName = DNS:ngrok.xxx.com"`,`ngrok.xxx.com`为自己的域名
```
openssl x509 -req -in server.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out server.crt -days 5000 -addext "subjectAltName = DNS:ngrok.xxx.com"
```

若openssl版本不支持`addext`时可以用以下命令：

```
openssl x509 -req -in server.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out server.crt -days 5000 -extfile <(printf "subjectAltName=DNS:ngrok.xxx.com,DNS:ngrok.xxx.com")
```

### 参考

https://stackoverflow.com/questions/64814173/how-do-i-use-sans-with-openssl-instead-of-common-name

标签: ngrok, openssl

非特殊说明，本博所有文章均为博主原创。

如若转载，请注明出处：https://www.qinyu.cc/archives/172.html

上一篇 docker一键编译部署启动ngrok

下一篇 docker清理无用镜像和容器

Ngrok服务端报错Failed to read message: remote error: tls: bad certificate

评论啦~

栏目分类

标签云

友情链接申请

Ngrok服务端报错Failed to read message: remote error: tls: bad certificate

 评论啦~

 栏目分类

标签云

友情链接申请

评论啦~

栏目分类

标签云

友情链接申请