在 SharePoint Server 中設定編目程式有 SSL 憑證警告Configure the crawler in case of SSL certificate warnings in SharePoint Server

摘要:指定是否 SharePoint Server 2016 或 SharePoint Server 2013 編目程式會將網站編目網站的 Secure Sockets Layer (SSL) 憑證發生問題時。Summary: Specify whether a SharePoint Server 2016 or a SharePoint Server 2013 crawler will crawl a site if there is a problem with the site's Secure Sockets Layer (SSL) certificate.

當編目程式要求對網站進行編目所需的連線時,系統會產生警告,指出網站的 SSL 憑證有問題。根據預設,編目程式在此情況發生時不會對網站進行編目。基於安全考量,除非有此必要,否則強烈建議您不要變更編目程式的這項行為。When a crawler requests a connection to crawl a site, the system generates a warning if there is a problem with the site's SSL certificate. By default, the crawler does not crawl the site when this happens. For security reasons, we strongly recommend that you do not change this default crawler behavior unless you have sufficient reason to do so.

以下是發生 SSL 憑證問題的可能原因:An SSL certificate problem can occur for reasons such as the following:

  • 憑證已過期。The certificate is expired.

  • 憑證未經過受信任授權單位的簽署。The certificate is not signed by a trusted authority.

  • 憑證中的名稱不符合網站名稱。The name in the certificate does not match the site name.

    之所以發生名稱不符的情況,可能是因為有人試圖偽造網站的有效性,並誘騙使用者開啟網站中的文件或提供讓駭客得以存取系統的密碼與其他資訊。A name mismatch could be the result of an attempt to spoof the validity of a site and trick users into opening documents from the site or into providing passwords and other information that could allow a hacker to access the system.

但若您只是要對內部網站進行編目,則可能不想每次都看見 SSL 警告。例如,您可能已知道某些網站名稱與憑證名稱基於合理原因而不相符,例如,組織已變更伺服器名稱或網站名稱,或是組織將單一憑證用於多個網站。在這類情況下,變更預設的編目程式行為應該安全無虞,因此可以忽略 SSL 憑證警告。However, if you are only crawling internal sites, you might expect SSL warnings in certain cases. For example, you might know that some site names and certificate names are mismatched for legitimate reasons, such as if the organization changed a server name or site name, or if the organization is using a single certificate for multiple sites. In such cases, it might be safe to change the default crawler behavior and thus ignore SSL certificate warnings.

使用下列程序,可指定編目程式在 SSL 憑證警告出現時是否會對網站進行編目。此設定會套用至伺服器陣列中所有搜尋服務應用程式中的所有內容來源。變更此設定後,您必須對所有受影響的網站重新編目,讓適當的內容出現在搜尋索引中。Use the following procedure to specify whether the crawler will crawl sites in the event of SSL certificate warnings. The setting applies to all content sources in all Search service applications in a farm. After you change this setting, you must re-crawl all affected sites so that the appropriate content is in the search index.

若要設定編目程式的 SSL 憑證警告To configure the crawler for SSL certificate warnings

  1. 確認執行此程序的使用者帳戶是伺服器陣列管理員群組的成員。Verify that the user account that is performing this procedure is a member of the Farm Administrators Group.

  2. 在管理中心的 [快速啟動] 中按一下 [一般應用程式設定]。In Central Administration, in the Quick Launch, click General Application Settings.

  3. 按一下 [一般應用程式設定] 頁面上的 [搜尋] 區段中的 [伺服器陣列搜尋管理]。On the General Application Settings page, in the Search section, click Farm Search Administration.

  4. 在 [伺服器陣列搜尋管理] 頁面上的 [伺服器陣列層級搜尋設定] 區段中按一下 [略過 SSL 警告設定 ( [是]或 [) 的值。預設設定為 []。On the Farm Search Administration page, in the Farm-Level Search Settings section, click the value of the Ignore SSL Warnings setting ( Yes or No). The default setting is No.

    「伺服器陣列搜尋管理」頁面的螢幕擷取畫面

  5. 在 [搜尋 SSL 設定] 對話方塊中,執行下列其中一項:In the Search SSL Settings dialog box, do one of the following:

    • 如果您不想編目程式編目網站有 SSL 憑證警告出現時,請確定已清除 [忽略 SSL 憑證名稱警告] 核取方塊。基於安全性考量,預設會清除] 核取方塊。If you do not want the crawler to crawl a site when there is an SSL certificate warning, make sure that the Ignore SSL certificate name warnings check box is cleared. For security reasons, the check box is cleared by default.

    • 如果您要編目程式即便在 SSL 憑證警告出現編目網站,請確定已選取 [忽略 SSL 憑證名稱警告] 核取方塊。If you want the crawler to crawl a site even if there is an SSL certificate warning, make sure that the Ignore SSL certificate name warnings check box is selected.

  6. 按一下 [ OK ]。Click OK.

另請參閱See also

概念Concepts

Manage crawling in SharePoint ServerManage crawling in SharePoint Server