Digital Certificate Algorithm Concept

1 Concepts of digital certificates

1, asymmetric encryption algorithm is used to encrypt/decrypt data to ensure the confidentiality of data.

2, the digital Signature algorithm is used to sign/Verify data to ensure the integrity and anti-repudiation of data.

3, the Message digest algorithm is used to digest the digital certificate itself, to ensure the integrity of the digital certificate,

1, the current digital certificate is the most commonly used encryption algorithm for RSA, matching with the use of the signature algorithm is the SHA1WITHRSA algorithm, digital certificate has many encoding format, mainly contains Cer,der

A,cer (canonical Encoding rules, canonical encoding format) is a coding format for digital certificates and is a variant of the BER (Basic Encoding rules) CER more stringent than BER

B,der (distinguished Encoding Rules, excellent encoding format) DER is the fixed-length mode, and the CER is the variable-length mode

C,PKCS (Public-key Cryptography Standards, Public key cryptography standard) commonly used standards include: pkcs#7 (password message Syntax standard), PKCS#10 (certificate request Syntax standard), PKCS#12 (Personal Information exchange grammar standard).

2,keytool Certificate Management

Case: Keytool-genkeypair-keyalg rsa-keysize 2048-slgalg sha1withrsa-valitidy 36000-alias www.hqf.com-keystore e:// Filename-dname "Cn=,ou=,o=,l=,st=,c"

-genkeypair represents the production secret key

-KEYALG Specifies the secret key algorithm, which is specified here as the RSA algorithm

-KEYSIZE Specifies the secret key length, which defaults to 1024

-SIGALG specifies the digital signature algorithm, which is specified here as the SHA1WITHRSA algorithm

-VALITIDY Specifies the validity period of the certificate, in the form of days

-alias Specifying aliases

-keystore specify where the KeyStore is saved

-storepass Specifying a password

-dname (

CN Specifies first name and last name, refers to the network of individuals, generally refers to the domain name www.baidu.com

OU Specifies the name of the organizational unit, Baidu

O Specify the name of the organization, Baidu

L City or region name BJ

ST Province name BJ

C Country Code CN

）

3 Exporting a digital certificate

Case: Keytool-exportcert-alias www.hqf.com-keystore hqf.keystore-file HQF.CER-RFC

-exportcert to perform a certificate export operation

-alias Specifying aliases

-keystore Specifying a KeyStore file

-file Specifying export certificate file

-RFC Specifies the export format, which defaults to Base64

Digital Certificate Algorithm Concept