Research on creating an X509 Certificate and obtaining the certificate key
Author: Xiao Bo
Personal blog: http://blog.csdn.net/eaglet; http://www.cnblogs.com/eaglet
2007/7 Nanjing
Background
The format of the server SSL digital certificate and the
Digital Certificate and its authentication process [reprinted], digital certificate reprinted
As we all know, public key cryptography makes it easy to use digital signatures, encrypted communications, and other key services by using the public key
A Cer certificate also needs a signature to prevent the CER certificate from being tampered.
There are two types of certificates:
1. Root Certificate
2. The sub-certificate issued by the root certificate.
The root certificate is special. It is self-
Transferred from:
Http://rhythm-zju.blog.163.com/blog/static/310042008015115718637/
All rights reserved. If you need to reprint it, please indicate the source
I have studied SSL/TLS some time ago and read the English version of Eric rescorla's SSL
Use the OpenSSL to verify the certificate chain with the following command:Debian:/home/zhaoya/openssl#openssl verify-cafile Root_cert User_certThe Root_cert can contain a lot of certificates, you can use the Cat command to merge multilevel CA
When interacting between systems, we often use digital certificates, digital certificates can help us verify identities, and so on, let's take a look at how to use digital certificates in Java.We first use the Keytool tool to generate the KeyStore
1. After OpenSSL is installed, find OpenSSL. CnF in the/usr/lib/SSL directory (for Ubuntu system, use whereis to check the SSL directory) and copy it to the working directory.
2. Create a New democafolder under the Work directory, create the new
One of the things faced by many network engineers is the maintenance and update of SSL certificates. For the author, SSL certificates are mainly used for VPN deployment, but there are also many network devices that need certificates to encrypt
ObjectiveI read a lot of information, only to write this article, if there are errors, please put forward the reader in time.In general, when you use Remote Desktop to connect to Windows Server, there is always a warning prompt, 1Figure 1This
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.