虫言虫语 虫言虫语

本地自签证书测试https

in 默认分类read (140770) 文章转载请注明来源!

参考文章:https://www.2cto.com/article/201510/444706.html
生成密钥、证书
第一步,为服务器端和客户端准备公钥、私钥

生成服务器端私钥 openssl genrsa -out server.key 1024

生成服务器端公钥 openssl rsa -in server.key -pubout -out server.pem

生成客户端私钥 openssl genrsa -out client.key 1024

生成客户端公钥 openssl rsa -in client.key -pubout -out client.pem 第二步,生成 CA 证书

生成 CA 私钥 openssl genrsa -out ca.key 1024

X.509 Certificate Signing Request (CSR) Management. openssl req -new -key ca.key -out ca.csr

X.509 Certificate Data Management. openssl x509 -req -in ca.csr -signkey ca.key -out ca.crt 在执行第二步时会出现:

➜ keys openssl req -new -key ca.key -out ca.csr You are about to be
asked to enter information that will be incorporated into your
certificate request. What you are about to enter is what is called a
Distinguished Name or a DN. There are quite a few fields but you can
leave some blank For some fields there will be a default value, If you
enter '.', the field will be left blank.
----- Country Name (2 letter code) [AU]:CN State or Province Name (full name) [Some-State]:Zhejiang Locality Name (eg, city) []:Hangzhou
Organization Name (eg, company) [Internet Widgits Pty Ltd]:My CA
Organizational Unit Name (eg, section) []: Common Name (e.g. server
FQDN or YOUR name) []:localhost Email Address []:

注意,这里的 Organization Name (eg, company) [Internet Widgits Pty Ltd]: 后面生成客户端和服务器端证书的时候也需要填写,不要写成一样的!!!可以随意写如:My CA, My Server, My Client。

然后 Common Name (e.g. server FQDN or YOUR name) []: 这一项,是最后可以访问的域名,我这里为了方便测试,写成 localhost ,如果是为了给我的网站生成证书,需要写成 barretlee.com 。

第三步,生成服务器端证书和客户端证书

服务器端需要向 CA 机构申请签名证书,在申请签名证书之前依然是创建自己的 CSR 文件 openssl req -new -key server.key -out server.csr

向自己的 CA 机构申请证书,签名过程需要 CA 的证书和私钥参与,最终颁发一个带有 CA 签名的证书 openssl x509 -req -CA ca.crt -CAkey ca.key -CAcreateserial -in server.csr -out server.crt

client 端 openssl req -new -key client.key -out client.csr

client 端到 CA 签名 openssl x509 -req -CA ca.crt -CAkey ca.key -CAcreateserial -in client.csr -out client.crt

jrotty WeChat Pay

微信打赏

jrotty Alipay

支付宝打赏

文章二维码

扫描二维码,在手机上阅读!

发表新评论
已有 26174 条评论
  1. LecfAstew
    LecfAstew
    回复

    https://hopeviagrin.com/ - hopeviagrin.com https://lightvigra.com/ - lightvigra.com https://xuypharmacyonline.com/ - xuypharmacyonline.com https://online21rxon.com/ - online21rxon.com https://happyrxpharmacy21.com/ - happyrxpharmacy21.com https://storerxpharmcanada.com/ - storerxpharmcanada.com

  2. EvaDes
    EvaDes
    回复

    provigil buy usa

  3. JoeDes
    JoeDes
    回复

    tadalafil 5mg tablets online purchase stattera cialis 10mg clomid discount coupon bupropion cheapest

  4. JimDes
    JimDes
    回复

    prescription nolvadex clomid tablets price uk order tadalafil canada cheap online cialis www canadapharmacy com vermox otc over the counter viagra 2017 cialis 5 mg

  5. KedAstew
    KedAstew
    回复

    https://qqllviagria.com/ - qqllviagria.com https://ssviagriia.com/ - ssviagriia.com https://canadianpharmnorx.com/ - canadianpharmnorx.com https://ggviagll.com/ - ggviagll.com https://viagerkr.com/ - viagerkr.com https://viagriyvik.com/ - viagriyvik.com

  6. SamDes
    SamDes
    回复

    order viagra pills online female viagra buy online in india buy sildenafil without prescription real viagra online pharmacy denmark female viagra over the counter how to buy cialis online usa

  7. safe canadian pharmacies online

    mexican border pharmacies shipping to usa
    http://canadianpharmacieselite.com/
    safe canadian pharmacies online

  8. EvaDes
    EvaDes
    回复

    lexapro online no prescription

  9. Getting A Loan

    short term loan lenders

  10. best online pharmacies

    canadian internet pharmacy
    http://canadianpharmacieselite.com/
    canada drugs

  11. IyckxhFus
    IyckxhFus
    回复

    I was genuinely itching to get some wager some well-to-do on some sports matches that are episode auspicious now. I wanted to let you guys identify that I did spot what I consider to be the trounce plat in the USA.
    If you want to pull down in on the exertion, authenticate it out: [url=https://casinoenligne321.com/]casino francais[/url]

  12. Quick Loans

    payday loans indianapolis bad credit loan

  13. neurontin 204

    paxil dose 30mg paxil pill paxil withdrawal symptoms cold turkey how do ondestron and paxil interact

  14. plaquenil 2016

    paxil blood thinner paroxetine best price is paxil good for depression how much liquid paxil 10 mg should i take to equal 20 mg

  15. LlpSkype
    LlpSkype
    回复

    60lmentop.com viamengo.com didoviamen.com

  16. AnnaDes
    AnnaDes
    回复

    viagra price in malaysia internet pharmacy mexico cialis mexico sildenafil 50 mg tablet cost generic viagra online for sale

  17. AmyDes
    AmyDes
    回复

    pharmacy no prescription required

  18. IvyDes
    IvyDes
    回复

    canadianpharmacyworld com paxil 30 mg cost of generic viagra in canada reddit canadian pharmacy daily cialis online zoloft buy brand name cialis from canada us pharmacy viagra prices best viagra uk generic viagra in canada

  19. JimDes
    JimDes
    回复

    cyalis buy cheap cialis in canada us pharmacy best canadian pharmacy no prescription buy viagra brand tamoxifen discount

  20. AbgcSkype
    AbgcSkype
    回复

    https://thesiswritingtob.com/ - thesiswritingtob.com thesis paper writing thesiswritingtob.com help writing thesis statement

博客已萌萌哒运行
© 2021 由 Typecho 强力驱动.Theme by Yodu
前篇 后篇
雷姆
拉姆