= "border:none;margin:10px auto;padding:0px;"/>GDCA Free SSL CertificateGDCA free SSL certificates are DV SSL certificates that belong to Domain Validation SSL or DV SSL certificates. GDCA DV Free
example, CentOS 6 64-bit environment does not support git, we can also refer to the "Linux CentOS 6 64-bit system installation Git tool environment Tutorial" and "9 steps upgrade CentOS5 system Python version to 2.7" for installation and upgrades. The simplest is the Debian environment is not supported, you can run the "apt-get-y Install git" Direct installation support, if it is CentOS directly run "yum-y install Git-core" support. This specific enc
the second is extended verification. Certification Bodies (CAS) provide more advanced security certifications through extended verification. Key storage zones of all mainstream browsers contain root and extended verification information so that they can authenticate the reliability of specific applications.
Certificate hierarchy
I hope you have understood the general idea. Let's code it now.Products Used
IDE:Netbeans 7.2
Java Development Kit (JDK)
Before, there is a domain name using the online free SSL certificate, and then want to change the certificate after the expiration of Let's encrypt free certificate, then want to query the domain name SSL certificate How many days
, such as Notepad.
Removes all spaces between hexadecimal characters. One way to do this is to use the "search and replace" feature of the text editor to replace each space with a null character.
Bind the SSL Certificate to the port number
In Windows Server 2003 or Windows XP, use the "set" command of HttpCfg.exe to bind the certificate to the port number in t
TCP layer. encrypted communication between users and servers is established to ensure the security of transmitted information. SSL is based on a public key and a private key. Any user can obtain a public key to encrypt the data. However, to decrypt the data, the corresponding private key must be used. When using the SSL security mechanism, the client first establishes a connection with the server. The serv
) Delete the "#" comment at the beginning of the line to save the exit and restart Apache. Restart mode: C, into the Apache installation directory of the bin directory, run the following command./apachectl-k stop./apachectl-k start5. Test installation Results Access https://+ certificate-bound domain name, the test effect is as follows: Deploy finished After completion if the website can not be normal access through HTTPS, you can confirm that the ser
()cert = c.get_peer_certificate()print "issuer: ",cert.get_issuer()print "subject: ",cert.get_subject().get_components()c.shutdown()s.close()
3. Use the s_client command of openssl to obtain
openssl s_client -connect 65.55.85.12:443subject=/1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=Washington/businessCategory=Private Organization/serialNumber=600413485/C=US/postalCode=98052/ST=Washington/L=Redmond/street=1 Microsoft Way/O=Microsoft Corporation/OU=Outlook Kahuna SNT-DC A May2013/CN=m
EV SSL is an abbreviation for Extended Validation SSL, which is an SSL certificate issued in accordance with the globally unified strict authentication standard and is currently the highest security level in the industry. A user accesses a Web site that has an EV
What is HTTPS?When an HTTP request is sent to a site based on SSL/TLS (usually using https: // URL), the server sends a certificate to the client. The client uses the installed public certificate to verify the identity of the server through this certificate, and then checks whether the IP name (machine name) matches th
One, generate certificate request1. Install the JDK (optional)WebLogic installation comes with a JDK installation. If you generate a certificate request directly on the server, go to the bin directory of the path where the JDK is located under the WebLogic installation directory and run the Keytool command.If you need to generate a certificate request file in a d
, certificate to enter the control Panel.You'll need to validate your domain name to prove so you own the domain is setting up a certificate for. Click on the validations Wizard in the Control panel and set Type to Domain Name Validation. You'll be prompted to choose from a email at your domain, something like [email protected]Check the email inbox for the e-mail
-compatible versions, especially debian environment compatibility is better than CentOS.
For example, CentOS 6 64-bit environments do not support GIT, for more information, see "Linux CentOS 6 64-bit system installation Git tool environment tutorial" and "9 steps to upgrade CentOS 5 to Python 2.7.
The simplest is that the Debian environment is not supported. You can run "apt-get-y install git" to directly install the support. If CentOS runs "yum-y ins
After adding a certificate to the site, you need to use https: // to access the site, but the premise is to first obtain a certificate. You can obtain the certificate required for SSL communication from an Internet-based client, such as Verisign.
However, for testing, you can use the
How to apply for an Ev SSL Certificate
For website ranking alone, Baidu and Google respectively confirm that HTTPS websites rank higher than http websites. For details, click here: baidu open the https site announcement, HTTPS as a ranking signal. To adapt to the HTTPS trend, more and more security providers have launched free HTTP certificate services, such as s
the key to log in to this site is saved, is to log on to the site after the credentials, double-click the installation and then re-visit the official websiteClick hereEnter the domain name, submit.Next, fill in the two-level domain name, only the lower half of the image.is a way to prompt a CSR file to be generated by the OpenSSL command or by downloading the StartComTool.exe toolThe OpenSSL command used here is executed directly in Linux:OpenSSL req-newkey rsa:2048-keyout yourname.key-out YOUR
[Essence] The original Win+apache implementation of SSL certificate authentication is so simple
Http://www.chinaunix.net Author: ataman posted: 2008-05-22 18:16:46
"Comment" "View original" "Web server Discussion Area" "Close"
Windows+apache of the case, the implementation of
generated by itself, not by the CA-certified organization. So the server doesn't agree with him. Intercepted it.
So the SSL link has an error.
So here's the problem ... Test in the test environment again. However, there is no certificate of CA certification in the production environment. How about that.
Find some good posts. Solved the problem. Controlling in code, skipping
This article is reproduced from: https://typecodes.com/web/lnmppositivessl.html
The SSL certificate installation is not related to the blog program (whether it is WordPress or Typecho, etc.), but only to the type of server (such as Nginx, Apache, or IIS).
----------Instructions----------
system: Aliyun CentOS 6.5
Environment: LNMP (just configure Nginx server on line)
One, SSL certificate issues In the previous article, we created a small reptile that downloaded several web pages of the Shanghai Chain Home property. In fact, when we use the Urllib networking process, we encounter a problem with restricted access to the certificate.Handling HTTPS requests for SSL certificate
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.