Original Address http://www.liaoxuefeng.com/article/0014189023237367e8d42829de24b6eaf893ca47df4fb5e000
HTTPS is almost the only option to secure a Web browser-to-server connection. HTTPS is actually HTTP over SSL, which means that HTTP connections are built on top of SSL secure connections.
SSL uses certificates to create a secure connection. There are two mode
About SSL Certificates I have written two articles, one is Nginx configuration, one is Tomcat configuration, HTTPS is very common.according to Let's Encrypt CA statistics, as of November 2017, Firefox-loaded web pages with HTTPS-enabled ratios accounted for 67%, a huge boost compared to 45% at the end of last year. Browser developers like Mozilla, Google is ready to take the next step: to mark all HTTP sites as unsafe.with The popularization of HTTPS,
longer have to waste more words, directly into the business.
Ii. using OpenSSL to generate SSL Key and CSR
Because only the browser or the system trusted CA can let all visitors unobstructed access to your encrypted Web site, rather than appear the certificate error prompts. So we skip the steps from the visa book and start by signing the SSL
, so will verify success > OpenSSL verify-cafile ca.crt myserver.crt Remove Key's password protectionSometimes it is too cumbersome to enter the password, you can remove the key protection password> OpenSSL RSA-inmyserver.key-out server.key.insecureConversion of certificates in different formats# PKCS conversion to pem> OpenSSL pkcs12-inmyserver.pfx-out myserver.pem-nodes# PEM conversion to der> OpenSSL X509-outform der-inMyserver.pem-outmyserver.[ DER|CRT] # PEM Extract Key> OpenSSL rsa-in
After you enable Apache Mod_ssl, you need a certificate to function properly. Wrote a script to manipulate it. The first thing to make sure is that there are OpenSSL on the machine.
Copy Code code as follows:
#!/bin/sh
#
# The root directory for SSL certificate output.ssloutputroot= "/etc/apache_ssl"If [$#-eq 1]; ThenSsloutputroot=$1Fiif [!-D ${ss
Original Address http://www.liaoxuefeng.com/article/0014189023237367e8d42829de24b6eaf893ca47df4fb5e000
HTTPS is almost the only option for securing a secure connection to your Web browser to the server. HTTPS is actually HTTP over SSL, which means that the HTTP connection is built on SSL secure connections.
SSL uses certificates to create secure connections. Th
To ensure secure connections from Web browsers to servers, HTTPS is almost the only choice. HTTPS is actually HTTP over SSL, that is, making the HTTP connection established on the SSL secure connection.SSL uses certificates to create secure connections. There are two verification modes:Only the client verifies the server certificate, and the client does not provi
650) this.width=650; "src=" http://image109.360doc.com/DownloadImg/2017/09/2116/111549118_1_20170921045242505 "alt = "HTTP will exit the historical stage GDCA free SSL certificate push HTTPS" style= "border:none;margin:10px auto;padding:0px;"/>An SSL certificate is a mandatory configuration for the HTTPS security proto
In the past, I heard people say that an IP address can be used to generate a certificate. Today, the example shows that IP addresses cannot be used.Scenario 1:
The name specified when the certificate is generated is IP Address
The example is an example of single-point logon. The configuration in Web. XML is as follows:
If the HTTPS protocol is specified in the above configuration and the name specified d
TCP layer. encrypted communication between users and servers is established to ensure the security of transmitted information. SSL is based on a public key and a private key. Any user can obtain a public key to encrypt the data. However, to decrypt the data, the corresponding private key must be used. When using the SSL security mechanism, the client first establishes a connection with the server. The serv
Free SSL certificate, https://www.startssl.com/Installing to IIS differs from Nginx. Original http://blog.newnaw.com/?p=1232------------Transferred from http://blog.newnaw.com/?p=1232-----------------------Key part RedIf a Web site needs to provide HTTPS encrypted access, you must have a valid SSL certificate to prove
650) this.width=650; "title=" Symantec EV SSL Certificate "src=" Http://www.evtrust.com/symantec/images/symantec.png "alt=" Symantec.png "/> request EV SSL Certificate , will accept the most stringent authentication enterprise domain name ownership and enterprise identity information, belongs to the highest trust level
1. Get the server certificatePaste the server certificate contents (including "-----Begin CERTIFICATE-----" and "-----End CERTIFICATE-----") from begin to end in the certificate issuance message into a text editor such as Notepad, and modify the file name extension , Save as Server.cer file2. Get the CA certificatePast
650) this.width=650; "title=" Symantec Secure Site Pro SSL Certificate "src=" Http://www.evtrust.com/symantec/images/symantec.png "alt=" Symantec.png "/> Pro SSL certificate , verifying Enterprise Domain name ownership and enterprise identity information, using SGC (server gating) technology to enforce 128-bit to 256-b
Chiang has just been helping customers to build a new Oneinstack LNMP Web site environment to deploy an SSL certificate, the customer is the purchase of Namecheap paid SSL certificate, paid 9 dollars a year. So, with this article, whether we have the same environmental needs, but the whole process can also be reference
About SSL certificates
SSL certificates are used to encrypt site information and create a safer connection. In addition, the certificate can display the VPs identity information to site visitors. The Certificate Authority issues an SSL
A complete SSL certificate is divided into four parts:
CA root certificate (Root CA)
Intermediate certificate (Intermediate Certificate)
Domain name Certificate
Certificat
one, installation preparation 1. Installing OpenSSL To enable Apache to support SSL, you need to install OpenSSL support first. Recommended download installation openssl-0.9.8k.tar.gz download OPENSSL:HTTP://WWW.OPENSSL.ORG/SOURCE/TAR-ZXF openssl-0.9.8k.tar.gz //Unzip the installation package CD openssl-0.9.8k //into the unpacked installation package ./config nbsp; //configuration installation. It is recommended to use the default configurati
Pro SSL Certificate , verifying Enterprise Domain name ownership and enterprise identity information, using SGC (server gating) technology to enforce 128-bit to 256-bit encryption, belonging to Enterprise OV Certified Professional (PRO) SSL Certificate , even if the user is using a lower version of the browser (such as
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.