虫言虫语 虫言虫语

本地自签证书测试https

in 默认分类read (107805) 文章转载请注明来源!

参考文章:https://www.2cto.com/article/201510/444706.html
生成密钥、证书
第一步,为服务器端和客户端准备公钥、私钥

生成服务器端私钥 openssl genrsa -out server.key 1024

生成服务器端公钥 openssl rsa -in server.key -pubout -out server.pem

生成客户端私钥 openssl genrsa -out client.key 1024

生成客户端公钥 openssl rsa -in client.key -pubout -out client.pem 第二步,生成 CA 证书

生成 CA 私钥 openssl genrsa -out ca.key 1024

X.509 Certificate Signing Request (CSR) Management. openssl req -new -key ca.key -out ca.csr

X.509 Certificate Data Management. openssl x509 -req -in ca.csr -signkey ca.key -out ca.crt 在执行第二步时会出现:

➜ keys openssl req -new -key ca.key -out ca.csr You are about to be
asked to enter information that will be incorporated into your
certificate request. What you are about to enter is what is called a
Distinguished Name or a DN. There are quite a few fields but you can
leave some blank For some fields there will be a default value, If you
enter '.', the field will be left blank.
----- Country Name (2 letter code) [AU]:CN State or Province Name (full name) [Some-State]:Zhejiang Locality Name (eg, city) []:Hangzhou
Organization Name (eg, company) [Internet Widgits Pty Ltd]:My CA
Organizational Unit Name (eg, section) []: Common Name (e.g. server
FQDN or YOUR name) []:localhost Email Address []:

注意,这里的 Organization Name (eg, company) [Internet Widgits Pty Ltd]: 后面生成客户端和服务器端证书的时候也需要填写,不要写成一样的!!!可以随意写如:My CA, My Server, My Client。

然后 Common Name (e.g. server FQDN or YOUR name) []: 这一项,是最后可以访问的域名,我这里为了方便测试,写成 localhost ,如果是为了给我的网站生成证书,需要写成 barretlee.com 。

第三步,生成服务器端证书和客户端证书

服务器端需要向 CA 机构申请签名证书,在申请签名证书之前依然是创建自己的 CSR 文件 openssl req -new -key server.key -out server.csr

向自己的 CA 机构申请证书,签名过程需要 CA 的证书和私钥参与,最终颁发一个带有 CA 签名的证书 openssl x509 -req -CA ca.crt -CAkey ca.key -CAcreateserial -in server.csr -out server.crt

client 端 openssl req -new -key client.key -out client.csr

client 端到 CA 签名 openssl x509 -req -CA ca.crt -CAkey ca.key -CAcreateserial -in client.csr -out client.crt

jrotty WeChat Pay

微信打赏

jrotty Alipay

支付宝打赏

文章二维码

扫描二维码,在手机上阅读!

发表新评论
已有 18436 条评论
  1. JaneDes
    JaneDes
    回复

    indocin tab

  2. JamesEsorn
    JamesEsorn
    回复

    buy prescription viagra online without buy viagra very cheap
    ed medicine online http://genericvgrshop.com generic viagra for sale
    buying prescription viagra from canada buying prescription viagra from canada

  3. MiaDes
    MiaDes
    回复

    brand cialis arimidex for bodybuilding lyrica cap 75mg hydroxychloroquine sulfate 200mg tablet trazodone online no prescription

  4. SamDes
    SamDes
    回复

    where can i buy dapoxetine in usa paypal cialis canada acyclovir medication price buy avodart online no rx synthroid best prices

  5. CzechXxx_glase

    dayam! check out her pearl at the beginning Call girl will make you feel capable of various entertainments without any regret https://uncletest.tourister.ru/go?url=https://czechtubexx.me/ I'm also not for everybody, and don't claim to be Does anyone think that there should be a certain amount of time where you date no one after a break up, or should you just do whatever you're comfortable with. How long have other people waited? You've mutually amassed a bit of wealth. Your relationship is shyte. If you marry and then divorce, the lawyers will probably end up with a sizable chunk of that wealth. So, it's actually impractical to marry this man. http://ophmao.ru/bitrix/rk.php?goto=https://czechxx.me/ I’m full of energy, and my youth allows giving in new levels

  6. SamDes
    SamDes
    回复

    inderal pills where to get propecia canadian pharmacy 24 com

  7. cializS
    cializS
    回复

    buy cheap cialis overnight confronto viagra cialis levitra

  8. JamesEsorn
    JamesEsorn
    回复

    viagra generic viagra for ed
    ed products http://genericvgrshop.com prescription viagra without a doctor
    generic viagra without a doctor prescription meds online without doctor prescription

  9. cializS
    cializS
    回复

    [url=https://5cialismg.com/]buy cialis rush[/url] cialis with ibuprofen

  10. cializS
    cializS
    回复

    generic cialis daily pricing kako prepoznati original cialis

  11. reputable online pharmacy

    ordering prescriptions from canada legally
    http://bambulapharmacy.com/

  12. sporseevato
    sporseevato
    回复

    best lightweight womens cycling jersey or zone3 women's activate tri suit reviewhttps://dspro.store/product/aero-socks-cotton-candy/

  13. JimDes
    JimDes
    回复

    chloroquine phosphate 500 mg 7 tablets where can i buy viagra online in india buy brand name synthroid online doxycycline without rx costs of tetracycline buy 150 mg clomid purchase sildenafil trazodone buy

  14. NickDes
    NickDes
    回复

    top 10 online pharmacy in india vardenafil in usa zyloprim 150 mg tetracycline capsules brand name cost of tadalafil generic where to buy hydrochlorothiazide tadalafil tablet buy online

  15. cializS
    cializS
    回复

    buy cialis online europe cialis chute cheveux

  16. JoeDes
    JoeDes
    回复

    safe online pharmacies buy diflucan pill bactrim ds 800 160

  17. cialifS
    cialifS
    回复

    taking cialis soft tabs uk muscle cialis

  18. JamesEsorn
    JamesEsorn
    回复

    buy generic viagra generic viagra without doctor's prescription
    ed doctor http://genericvgrshop.com generic viagra for ed
    prescription viagra online without doctor buy prescription viagra

  19. list of approved canadian pharmacies

    mexican online pharmacy
    http://canadianfastpharmacy.com/
    best canadian online pharmacy

  20. AhmdSkype
    AhmdSkype
    回复

    generic cialis buy cialis no prescription uk cialis professional india http://cialmenshoprx.com/ - cialis online without prescription ’

博客已萌萌哒运行
© 2021 由 Typecho 强力驱动.Theme by Yodu
前篇 后篇
雷姆
拉姆