说明

K1000代理需要由已知根CA签名的有效SSL证书，才能使SSL代理与服务器通信正常运行。

原因

在K1000代理使用CA的列表来自Mozilla的根证书文件（certdata.txt），发现这里云集：http://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/certdata.txt ？raw = 1

解析度

从根CA购买证书时，需要确保K1000代理可识别根CA. 

在K1000代理使用CA的列表来自Mozilla的根证书文件（certdata.txt），发现这里云集：http://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/certdata.txt ？原料= 1

这里是从K1000代理的cacert.pem文件列表（这是用来验证为K1000服务器的SSL证书的根CA）。请确保您购买的是由这些根CA所签署的服务器证书：

AC Ra\xC3\xADz Certic\xC3\xA1mara S.A.

ACEDICOM Root

Actalis Authentication Root CA

AddTrust External Root

AddTrust Low-Value Services Root

AddTrust Public Services Root

AddTrust Qualified Certificates Root

AffirmTrust Commercial

AffirmTrust Networking

AffirmTrust Premium

AffirmTrust Premium ECC

America Online Root Certification Authority 1

America Online Root Certification Authority 2

ApplicationCA - Japanese Government

A-Trust-nQual-03

Autoridad de Certificacion Firmaprofesional CIF A62634068

Baltimore CyberTrust Root

Buypass Class 2 CA 1

Buypass Class 2 Root CA

Buypass Class 3 CA 1

Buypass Class 3 Root CA

CA Disig

Camerfirma Chambers of Commerce Root

Camerfirma Global Chambersign Root

Certigna

Certinomis - Autorité Racine

Certplus Class 2 Primary CA

certSIGN ROOT CA

Certum Root CA

Certum Trusted Network CA

Chambers of Commerce Root - 2008

CNNIC ROOT

Comodo AAA Services root

COMODO Certification Authority

COMODO ECC Certification Authority

Comodo Secure Services root

Comodo Trusted Services root

ComSign Secured CA

Cybertrust Global Root

Deutsche Telekom Root CA 2

DigiCert Assured ID Root CA

DigiCert Global Root CA

DigiCert High Assurance EV Root CA

Digital Signature Trust Co. Global CA 1

Digital Signature Trust Co. Global CA 3

DST ACES CA X6

DST Root CA X3

EBG Elektronik Sertifika Hizmet Sa\xC4\x9Flay\xc4\xb1\x63\xc4\xb1s\xc4\xb1

EC-ACC

EE Certification Centre Root CA

E-Guven Kok Elektronik Sertifika Hizmet Saglayicisi

Entrust Root Certification Authority

Entrust.net Premium 2048 Secure Server CA

Entrust.net Secure Server CA

ePKI Root Certification Authority

Equifax Secure CA

Equifax Secure eBusiness CA 1

Equifax Secure eBusiness CA 2

Equifax Secure Global eBusiness CA

Firmaprofesional Root CA

GeoTrust Global CA

GeoTrust Global CA 2

GeoTrust Primary Certification Authority

GeoTrust Primary Certification Authority - G2

GeoTrust Primary Certification Authority - G3

GeoTrust Universal CA

GeoTrust Universal CA 2

Global Chambersign Root - 2008

GlobalSign Root CA

GlobalSign Root CA - R2

GlobalSign Root CA - R3

Go Daddy Class 2 CA

Go Daddy Root Certificate Authority - G2

GTE CyberTrust Global Root

Hellenic Academic and Research Institutions RootCA 2011

Hongkong Post Root CA 1

IGC/A

Izenpe.com

Juur-SK

Microsec e-Szigno Root CA

Microsec e-Szigno Root CA 2009

NetLock Arany (Class Gold) Főtanúsítvány

NetLock Business (Class B) Root

NetLock Express (Class C) Root

NetLock Notary (Class A) Root

Network Solutions Certificate Authority

OISTE WISeKey Global Root GA CA

QuoVadis Root CA

QuoVadis Root CA 2

QuoVadis Root CA 3

Root CA Generalitat Valenciana

RSA Root Certificate 1

RSA Security 2048 v3

Secure Global CA

SecureSign RootCA11

SecureTrust CA

Security Communication EV RootCA1

Security Communication Root CA

Security Communication RootCA2

Sonera Class 2 Root CA

Staat der Nederlanden Root CA

Staat der Nederlanden Root CA - G2

Starfield Class 2 CA

Starfield Root Certificate Authority - G2

Starfield Services Root Certificate Authority - G2

StartCom Certification Authority

StartCom Certification Authority

StartCom Certification Authority G2

Swisscom Root CA 1

SwissSign Gold CA - G2

SwissSign Silver CA - G2

T\xc3\x9c\x42\xC4\xB0TAK UEKAE K\xC3\xB6k Sertifika Hizmet Sa\xC4\x9Flay\xc4\xb1\x63\xc4\xb1s\xc4\xb1 - S\xC3\xBCr\xC3\xBCm 3

Taiwan GRCA

TC TrustCenter Class 2 CA II

TC TrustCenter Class 3 CA II

TC TrustCenter Universal CA I

TC TrustCenter Universal CA III

TDC Internet Root CA

Thawte Premium Server CA

thawte Primary Root CA

thawte Primary Root CA - G2

thawte Primary Root CA - G3

Thawte Server CA

Trustis FPS Root CA

T-TeleSec GlobalRoot Class 3

TURKTRUST Certificate Services Provider Root 1

TURKTRUST Certificate Services Provider Root 2

TWCA Root Certification Authority

UTN DATACorp SGC Root CA

UTN USERFirst Hardware Root CA

ValiCert Class 1 VA

ValiCert Class 2 VA

Verisign Class 3 Public Primary Certification Authority

Verisign Class 3 Public Primary Certification Authority

Verisign Class 3 Public Primary Certification Authority - G2

Verisign Class 3 Public Primary Certification Authority - G3

VeriSign Class 3 Public Primary Certification Authority - G4

VeriSign Class 3 Public Primary Certification Authority - G5

Verisign Class 4 Public Primary Certification Authority - G3

VeriSign Universal Root Certification Authority

Visa eCommerce Root

Wells Fargo Root CA

WellsSecure Public Root Certificate Authority

XRamp Global CA Root