我有一些本地虚拟服务器在家里模拟 Intranet。我有充当根 CA 和中间 CA 的服务器。我有一个配置为使用带有中间 CA 签名证书的 HTTPS 的 Web 服务器。
问题:有没有办法在不安装根证书或证书链文件的情况下使用 HTTPS 在内网客户端的每个 Web 浏览器上?
No, the certificates must be installed into the CA root trust store on each individual system. If you have a domain with Windows clients you can use group policy objects to perform the distribution but other than that I'm afraid you'll need to do it the old fashioned way (which can be cumbersome depending upon the platform; like chromebooks).