best tech certs

protected] ca]# ls-l private/# #验证私钥Total Dosage 4-RW-------. 1 root root 1679 January 2 20:09 Cakey.pem[Email protected] ca]#[[email protected] ca]# OpenSSL req-new-x509-key private/cakey.pem-out cacert.pem-days 3650 # #生成自签证书 (Root certificate)You is about-to is asked to-enter information that'll be incorporatedinto your certificate request.What's about-to-enter is called a distinguished Name or a DN.There is quite a few fields but can leave some blankFor some fields there would be a default

therequestmatchesthesignatureSignatureokCertificateDetails: SerialNumber:1 (0x1) ValidityNot before:aug513:45:062016gmt NotAfter:Aug513:45:062017GMT Subject: countryName =cnstateorprovincename =NEIMENGGU organizationname=edu organizationalunitname=tech commonName =www.edu.cn X509v3extensions: X509v3BasicConstraints: CA:FALSE netscapecomment: opensslgeneratedcertificate X509v3SubjectKeyIdentifier: 12:2c:ed:3f:f1:fa:54:fb:71:03:79:03:81:77:2d:a6:33:ef

issuing certificates with OpenSSL Reference: HTTP://WWW.IMACAT.IDV.TW/TECH/SSLCERTS.HTML.ZH-CNConfiguring the Environment To establish an SSL directory under the/home directory: Cd/homemkdir SSLCD SSL Create a few directories to use: mkdir private certs newscerts CRL Where private is mainly used to store the private key. Certs used to deposit a checked out book

] # lscacert. PEM private 3. Edit the CA configuration file, which is located in etc/pki/tls/OpenSSL. CNF. It specifies the directory of your CA and changes the default attribute value. [Root @ server56 Ca] # Vim/etc/pki/tls/OpenSSL. CNF [ca_default] dir = .. /.. /CA # where everything is kept **************** ca path, change to the absolute path certs = $ DIR/certs # Where the issued

. [CA_default] Dir =/etc/pki/CA # Where everything is kept # Openssl req-new-x509-key private/cakey. pem-out cacert. pem-days 3665 # generate a self-signed certificate for yourself based on the private key. This certificate can be used by the user You are about to be asked to enter information that will be ininitialized Into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fiel

httpdwork status information through www1.stu31.com/server-status, and only allow access using the account number password (status: status ); 2. Provide https service for the above 2nd virtual hosts, so that users can access the web site securely through https; (1) certificate authentication is required. The country (CN), State (Henan), city (Zhengzhou) and Organization (stu31) used in the certificate are required ); (2) Set department as tech, host

R Oot 891 June 07:35 Httpd.key then pass HTTPD.CSR to the CA server [[emailprotected] ssl]# SCP HTTPD.CSR [emailprotected]:/ tmp/Signing certificate on CA server [[emailprotected] ca]# OpenSSL ca-in/tmp/httpd.csr-out certs/www.web1.com.crt-days 365UsinG configuration from/etc/pki/tls/openssl.cnfcheck that the request matches the Signaturesignature okcertificate Details: Serial number:1 (0x1) validity nbsp Not Before:may 02:30:52 gmt

Chapter 1: Overview of photoshop7.01.1 Overview http://tech.163.com/05/0601/14/1L5UHS240009158B.html1.2 Basic interface http://tech.163.com/05/0601/14/1L5UL5740009158B.htmlChapter 2: Introduction to the photoshop7.0 Toolkit2.1 selection and cutting2.1.1 selection tool and mobile tool http://tech.163.com/05/0601/15/1L610FK20009158B.html2.1.2 lock kit and magic wan

1. set up a CA server [root @ zzu ~] # Yuminstallopenssl * [root @ zzu ~] # Cd/etc/pki/[root @ zzupki] # vimtls/openssl. cnf45dir/etc/pki/CA88countryNameop... 1. set up a CA server [root @ zzu ~] # Yum install openssl * [root @ zzu ~] # Cd/etc/pki/[root @ zzu pki] # vim tls/openssl. cnf45 dir =/etc/pki/CA88 countryName = optional 89 environment = optional 90 organizationName = optional136 countryName_default = CN some default options: 141 environment = beijing some default options: 144 localityN

the following command: 123456)Example: OpenSSL x509-req-days 10000-shal-extensions v3_ca-signkey private/ca.key.pem-in private/ca.csr-out certs/ca.cerX509 issuing the certificate of the Order-req Certificate Input Request-days Certificate Valid days, here is 10,000 days-shal Certificate Digest algorithm, here is the SHA1 algorithm-extensions adding extensions by the OpenSSL profile V3_ca item-signkey self-signed key, here is Private/ca.key.pem (Root

/cakey.pem)# openssl req -new -x509 -key private/cakey.pem -out cacert.pem Country Name (2 letter code) [GB]:CN State or Province Name (full name) [Berkshire]:GD Locality Name (eg, city) [Newbury]:ZS Organization Name (eg, company) [My Company Ltd]:NEO Organizational Unit Name (eg, section) []:tech Common Name (eg, your name or your server's hostname) []:station01.neo.com# mkdir newcerts certs