This article is reproduced from: https://typecodes.com/web/lnmppositivessl.html
The SSL certificate installation is not related to the blog program (whether it is WordPress or Typecho, etc.), but only to the type of server (such as Nginx, Apache, or IIS).
----------Instructions----------
system: Aliyun CentOS 6.5
Environment:
protocol.
Therefore, the relationship between the three is clear: HTTPS relies on a way of implementation, the current common is SSL, digital certificate is to support this secure communication files. There is also SSL-derived TLS and WTLS, the former is Ieft SSL standardization (TSL1.0), and the
relies on a way of implementation, the current common is SSL, digital certificate is to support this secure communication files. There is also SSL-derived TLS and WTLS, the former is Ieft SSL standardization (TSL1.0), and the SSL difference is very small, the latter is used
OpenSSL self-built certificate SSL + Apache
I have prepared it. Well, the following is my note. For details, enter the author name: wingger.In this article, we will test the certificate on Linux9 + apache2.0.52, tomcat5.5.6, j2se1.5, and openssl0.97.The purpose of this article is to communicate. If any errors occur, please advise.Reprinted, please indica
First, you need to understand some basic concepts before installing
1. Certificates used by SSL can be self-generated or signed by a commercial ca such as Verisign or thawte.
2. Certificate concept: First, you must have a root certificate, and then use the root certificate to issue the server
derived from SSL. The former is generated after Ieft standardizes SSL (tsl1.0), which is slightly different from SSL and the latter is used in TSL in wireless environments.
How to encrypt
Common EncryptionAlgorithm
Symmetric cryptographic algorithms: the same key is used for encryption and decryption. Typical cryptographic algorithms include des, R
SSL is a commonly used WEB Service encryption channel. Its full name is Secure Socket Layer, which is also known as the Secure sockets interface. It uses digital certificates to ensure its security mechanism. The main function is encryption and authentication to protect the security of network transmission. It is in the middle of the HTTP and TCP layers.
SSL encryption and authentication use public keys and
Turn from: HTTPS Unidirectional authentication Instructions _ digital certificate, digital signature, SSL (TLS), SASLBecause TLS + SASL is used in the project to do the security authentication layer. So read some online information, here to do a summary.1. First recommend several articles:Digital certificate: http://www.cnblogs.com/hyddd/archive/2009/01/07/137129
(also the TCP client) sends a Clienth*llo after the TCP link is established, which contains the list of algorithms that it can implement and some other required messages.2. The server side of SSL responds to a Serverh*llo, which determines the algorithm required for this communication, and then sends its own certificate (which contains the identity and its own public key).3. When the client receives this m
This certificate needs to be appended to the File.crt file in the Nginx configuration.Apache as "SSLCERTIFICATECHAINFILE/PATH/FILE.CRT" can-----BEGIN CERTIFICATE-----Miifodccbccgawibagiqut+5ddhwtzraqy0wkwaz/zanbgkqhkig9w0baqsfadcbYjelmakga1uebhmcvvmxfzavbgnvbaotdlzlcmltawdulcbjbmmumr8whqydvqqlExzwzxjpu2lnbibucnvzdcbozxr3b3jrmtowoaydvqqlezeoyykgmjawnibwzxjpU2lnbiw
server requires the customer's identity authentication, the server must check the validity of the customer's certificate and signature random number. The specific validity verification process includes: whether the customer's certificate is valid on the date of use, whether the CA that provides the certificate is reliable, whether the public key of the CA can pr
must check the validity of the customer's certificate and signature random number. The specific validity verification process includes: whether the customer's certificate is valid on the date of use, whether the CA that provides the certificate is reliable, whether the public key of the CA can properly unbind the digital signature of the CA that issues the
start with "Https; 2. A small yellow lock must appear on the IE browser's status bar.
How to apply for an SSL Certificate
Generally, the SSL server certificate application process is roughly as follows: the website administrator runs the certificate application package Ge
directly first with the domain name with DNS.
Third, let ' s encrypt free SSL certificate acquisition and application
After we complete the generation of Let's encrypt certificate, we will have 4 files in the "/etc/letsencrypt/live/laozuo.org/" domain name directory that are the generated key certificate files.
Cert.p
holder of the certificate, the public key of the holder, and the signature of the signer, among others
Note: In cryptography, the number is a standard, the specification of public key authentication, certificate revocation list, authorization credentials, credential path verification algorithm.
Steps to create a self-signed certificate
certificate is to support this secure communication files. There is also SSL-derived TLS and WTLS, the former is Ieft SSL standardization (TSL1.0), and the SSL difference is very small, the latter is used in the wireless environment of the TSL.How to encryptCommon encryption Algorithms
Symmetric cipher algori
://www.wosign.com/support/images/My_account/My_ Account_user_guide_freessl_clip_image002_0001.png "/>3. Generate OrderAfter completing the application information, click "Submit Request" to automatically jump to "my Orders" page, click "Verify Domain Name" To verify the domain name, complete the domain verification to enter the next step.650) this.width=650; "height=" 253 "alt=" Free SSL
the website says 1M can store about 4,000 sessions. Refer to the question and answer ssl_session_cache on serverfault in detail.
Ssl_session_timeout: The client can reuse the expiration time of the SSL parameter in the session cache, the intranet system defaults to 5 minutes is too short, can be set to 30m, 30 minutes or even 4h.
Setting longer keepalive_timeout can also reduce the cost of requesting SSL
Recently to do an SSL application, two-way authentication with SSL means that when the client connects to the server, both sides of the link have to authenticate each other's digital certificate to ensure that it is authorized to be able to connect. When we link general SSL with one-way authentication, the client only
To ensure data security in special environments, it is sometimes necessary to enable the SSL function. The following uses the Serv-U server as an example to describe how to enable SSL encryption.
Create an SSL Certificate
To use the SSL function of Serv-U, you must support
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.