SSL two-way authentication and certificate creation and use, ssl authentication certificate
The following describes how to create a Root CA certificate, server certificate, and client certific
First, make sure that your Apache compiles the SSL module, which is the necessary condition to support SSL certificate (if not, compile, "open Phpstudy" "Other options Menu", "php extension", "Php-openssl" in front of the check box).Create the CERT directory under Apache's installation directory, and copy all downloaded files to the Cert directory.Open the httpd.
SSL Certificate for various HTTPS sites, extended SSL certificate, key exchange and authentication mechanism rollupA common HTTPS site used by the certificate and Data encryption technology list, easy to compare the reference when needed, will continue to join the new HTTP s
PHP to view SSL Certificate Information, php to view ssl Certificate
Preface
An SSL certificate is a trusted Digital Certificate Authority (CA) that issues an
I. Installation
1. Install OpenSSL (http://www.openssl.org)
./Configure
Make
Su
Make install
2. Install mod_ssl
Apache2 has built-in mod_ssl, so you only need to add parameters during compilation:
-- Enable-SSL = static -- With-SSL =/usr/local/SSL
Explanation:
Compile mod_ssl statically before it can be used normally.
With Xca (X Certificate and Key Management) Visual Project Manager SSL Certificate series articles (2) and (3). We learned how to generate a certificate with XCA (X Certificate and Key Management), how you have generated your own defined Credential Management Center (
Recently in a project, the project was previously used. NET do, now need to rewrite with PHP. After development, you need to migrate the SSL certificate on IIS to the Apache environment.
Workaround:
Roughly three steps
First, export the certificate file to IIS
1. Start-> Run->mmc
2. Menu-> file-> Add/Remove snap-in
3. Select the
The Apache configuration files in Ubuntu are a little different from those in Solaris and FreeBSD, but they are essentially the same. Sometimes I wonder how many tricks this software can make on different platforms. The basic situation of apache2 in Ubuntu is as follows:The default site is at/var/www/The configuration file is in/etc/apache2/Log in/var/log/Apache/The STARTUP script is/usr/SiN/apache2ctl or
in the same as the httpd.conf, otherwise there will be errors, in the Apache error log found that the error is "certificate and server name mismatch" (SA server certificate commonname (CN) ' 127.0.0.1 ' does not match server name!? )。 If servername is set to 127.0.0.1:80, Common name (eg, your websites domain Name) [] seems to be filled localhost and 127.0.0.1.ServerName for the domain name of the situatio
; View certificate --> server ----> ImportThen import the CA root certificate (ca. crt) and server certificate (server. crt) created in the preceding steps(2) import the client certificate:Edit ----> preferences ----> advanced ----> certificate ----> View certificate --> you
As early as two years ago, Google search engine guide on the proposed if the site is an HTTPS URL (installation of SSL security certificate) in a certain condition factors will be the site's weight and ranking has a certain positive effect. In the following two years, our domestic search engine also began to be based on whether the site to join the SSL
; certificate ----> View certificate --> server ----> ImportThen import the CA root certificate (ca. crt) and server certificate (server. crt) created in the preceding steps(2) import the client certificate:Edit ----> preferences ----> advanced ----> certificate ----> View
Installing Apache2sudo Install apache2Installing OpenSSLGeneral system comes with, can be viewed through OpenSSL version, if not,sudo Install OpenSSLCreate a DirectoryCreate a directory that is named SSLsudo mkdir /etc/apache2/sslCreate a self-signed vouchersudo 365 -newkey RSA:2048 -KEYOUT/ETC/APACHE2/SSL/APACHE.KEY-OUT/ETC/
configure Apache to use the certificate.
V. Configuration certificate
Before configuring the Apache certificate, you need to open the SSL module and configure Apache to listen for port 443, and there is a lot of information on the web for reference. Save the SSL file and
SSL certificate configuration for Nginx1. Use OpenSSL to realize Certificate centerbecause you are using OpenSSL to set up a private certificate center, make sure that the following fields are the same in Certificate Center certificates, server side certificates, client cert
By high-profile [Google: Debian apache2-SSL] Pointing: After trying, it was completed at last night. please correct me.
Apache2 + SSL configuration method in Debian
By high-profile [Google: Debian apache2-SSL] Pointing: After tr
To successfully set up SSL security site key to have the following conditions.
1, need to obtain the server certificate from the trusted certificate mechanism ca.2, you must install the server certificate on the Web server.3. The SSL feature must be enabled on the Web server
certreq.csr -keystore
Replace with the path and .keystore the file name created by your local certificate.
Submit the created file to the certreq.csr CA that you want to authorize.Please refer to the documentation for the CA to find out how to do this.
The CA will send a certificate that you have signed.
To import a new certificate to
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.