openssl create ca

/wKioL1YfbjeAsQ5EAAL00_APXtU196.jpg "title=" 02.png "alt=" Wkiol1yfbjeasq5eaal00_apxtu196.jpg "/>Generate User password:[Email protected] ~]openssl passwd-1-salt 8Password:$1$8$v2p0zaqfea2gn2gboyzuk/[[Email protected] ~]Generate random Number:[Email protected] ~]OPENSSL Rand-base64 8+mxa+4htcxo=Public Key cryptography:Generate key pair: # OpenSSL Genrsa-out/path/

of the certificate body is unique and prevent duplicate names.7) Publish and maintain a list of obsolete certificates.8) Logging the entire certificate signing process.9) give notice to the applicant.One of the most important of these is the management of the CA's own pair of keys, which must ensure its high degree of confidentiality and prevent other parties from forging certificates. The CA's public key is exposed on the web, so the entire network system must guarantee integrity. The CA's dig

First, Introduction CA command to issue certificate request files and generate CRL list Second, the grammar OpenSSL CA [-verbose] [-config filename] [-name section] [-GENCRL] [-revokefile][-crl_reason reason] [-crl_hold instruction] [-crl_compromise Time] [-crl_ca_compromise Time] [-subj subj] [-crldays days] [-crlhours hours] [-crlexts section] [-startdateDate]

-318eb29b8698.png" alt= "wkiom1v1smfh4nhtaacbqcbf5c8086.jpg"/> Secret code automatically saved in/etc/shadow Public Key Cryptography to generate a key pair: Operating procedure: Generating a private key # OpenSSL genrsa-out/path/to/private_keyfile num_bits 650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/6E/2C/wKioL1V1tlbgXlmeAACNLG-gzg4278.jpg "title=" 8fb8a552-45e0-4a12-aee8-1763ab80c9aa.png "alt=" wkiol1v1tlbgxlmeaacnl

vim/etc/pki/tls/openssl.conf Opening a configuration fileSwitch to/etc/pki/ca:cd/etc/pki/caCreate the missing files touch index.txtecho > SerialCA self-Visa certificate (umask 077;openssl genrsa-out PRIVATE/CAKEY.PEM 2048) 2048 for specifying the key lengthOpenSSL req-new-x509-key private/cakey.pem-days 7300-out Private/cacert.pem-new used to generate a new certificate signing request-x509 for a CA to gener

. ④, symmetric encryption algorithm: DES encryption, 3DES, AES Advanced Encryption Standard, AES128 (password length), AES256, Blowfish. One-way encryption: MD4, MD5 (128), SHA1 (160), SHA192, SHA384 (output length), CRC-32 (cyclic redundancy check code) ⑤, Public Key cryptography: Identity Authentication (digital signature), data encryption, key exchange Public Key Cryptography algorithm: RSA: Can be encrypted or signed, DSA: can only sign Tools for symmetric encryption:

Create a private CA server and a private ca ServerWhat is a certificate? It is used to prove that something is indeed something. In general, certificates are like official seals. The official seal proves that the relevant documents are indeed issued by the corresponding company. In theory, everyone can find a certificate tool and

When we visit HTTPS, for some programs need to provide access to the site's CA certificate, this time clients can access the system website, such as using Tibco Business Workspace 5 HTTP send request activty to visit google API provides the rest service, we need to provide the CA certificate of the Www.googleapis.com website. In general, in two more commonly used way, the first way is to access the site thr

I. OverviewHow to implement "Authentication and data Encryption"Sender:Calculate data eigenvalues--"use private key to encrypt eigenvalues--" randomly generate key pair to encrypt entire data--"using receiver public key encryptionReceiving Party:Decrypt with private key--"decrypt the entire data--" Verify identity with public key--"compare data eigenvaluesWho manages the public key, any data that travels on the internet is unsafe, let alone pass the public key, and if it is tampered with, it can

; its security relies on keys rather than algorithms (most algorithms are public) Common algorithms: Des:data Encryption Standard, 56bits 3DES aes:advanced encrpytion, (128bits,192,256,384,51 2bits) BlowFish twofish idea RC6 cast5 defect: too many keys; Key Distribution process potential risks.

To establish a private CA:Generate a self-visa book on the server that is configured as a CA, and provide the required directories and files for the CA;Steps:(1) Generate the private key;]# (umask 077; OpenSSL genrsa-out/etc/pki/ca/private/cakey.pem 4096)Note: The filename should match the file name in the configuratio

To create a private CA:OpenSSL configuration file:/etc/pki/tls/openssl.cnf(1) Create the required files# Touch Index.txt# echo > Serial#(2) CA self-signed certificate# (Umask 077; OpenSSL Genrsa-out/etc/pki/ca/private/cakey.pem 2048)# Op