checking ssl certificate with openssl

The OpenSSL Certificate Action command generates a self signed certificate# Generate a key, your private key, OpenSSL will prompt you to enter a password, you can enter, you can not lose,# Enter the words, each time you use this key to enter the password, security, or there should be a password protection >

default_ca. Its value is the name of the segment that saves the default configuration of CA. Here it is ca_default. This means that when OpenSSL generates a certificate, it will go to the ca_default field to find the corresponding configuration information. The OpenSSL command allows multiple CA configurations in a configuration file. [Ca_default] This section c

) Please enter the following 'extra 'attributes To be sent with your certificate request A challenge password []: 123456 An optional company name []: Tsing 3. Self-signed certificate: C: /OpenSSL/bin> OpenSSL X509-req-in client/client-req.csr-out client/client-cert.pem-signkey client/client-key.pem-ca/ca-cert.pem-Cake

= "org.apache.coyote.http11.Http11Protocol" maxthreads= " "sslenabled="true"scheme=" "https" secure= "true" clientauth= "false "sslprotocol="TLS" keystorefile="conf/server.p12" keystoretype="PKCS12 "keystorepass="zzzzzz"/>3 Bidirectional SSL Configuration8443" protocol= "org.apache.coyote.http11.Http11Protocol" maxthreads= " "sslenabled="true"scheme=" "https" secure= "true" clienta

www.mysite.com.key-in www.mysite.com.pem-passin pass:123456-passout pass:123456-out Www.mysite.com.p126, remove the key password protectionSometimes it is too cumbersome to enter the password, you can remove the key protection password > OpenSSL RSA- in Myserver.key-out server.key.insecure7. Test CertificateOpenSSL provides simple client and server tools that can be used to simulate SSL connections for tes

-noout Now, we can submit testreq. pem to our CA to generate the certificate.For convenience, we assume that testreq. pem is in // var/MyCA/private. $ Openssl ca-in testreq. pem There are three prompts, one is to ask your CA's private key password, two is to confirm, the output is the certificate issued to the customer.You can use the batch option to cancel the command prompt. You can use the notext option

Today, when trying to build a Docker registry private warehouse on a Mac machine, the latest registry of the Cup has been forced to use SSL authentication for security reasons, so we have a detailed understanding of the use of OpenSSL on Linux/mac, and a new set of English abbreviations, Finishing in the following:TLS: Transport Layer Security Protocol TransportSSL: Abbreviation for Secure Sockets Layer Sec

Note:Through the author's blog "working principle of the FTP server and how to log on to a virtual user through PAM Authentication", we learned that FTP is a file sharing protocol and uses a plaintext transmission mechanism, therefore, users and passwords transmitted over the Internet are insecure. Therefore, the SSL/TLS encryption algorithm must be used to provide the ciphertext transmission mechanism to ensure the security of users and passwords dur

platforms. The operating system needs to install OpenSSL, and this part of the operation should be performed as a system administrator, therefore, the following command line uses the "#" identifier to start the header.After OpenSSL is installed, the system will generate the openssl. cnf file under the/etc/ssl