Certificate formats-X.509, der and PEMPart: 1 2 3Certificate standard and File encodings seem to be confusing. I wrote down some notes about:
What is X.509 certificate standard?
PEM (privacy enhanced mail) Encoding
Der
Those related to certificates (SSL,X.509,PEM,DER,CRT,CER,KEY,CSR,P12, etc.) [ZZ]Reprinted 2015-06-09 20:21:04From:http://www.cnblogs.com/guogangj/p/4118605.htmlThese concepts related to certificates are really tricky because they haven't been
About OpenSSL OpenSSL
SSL is an abbreviation for the Secure Socket Layer protocol, which provides covert transmission over the Internet. Netscape Company introduced the SSL protocol standard at the same time as the first web browser, there are now 3.
1. Der-encoded key pair
Let's talk about DER encoding because JCE supports DER encoding key pair parsing. For details, see pkcs8encodedkeyspec and x509encodedkeyspec.
DER encoding is a subset of the ASN.1 encoding rules. We do not know how to
OpenSSL introduction and compilation steps on Windows, Linux, and Mac systems
OpenSSL Introduction: OpenSSL is a powerful Secure Socket Layer password library, which includes major cryptographic algorithms, common keys, certificate encapsulation
Using OpenSSL utilities
An OpenSSL command line takes the following form:
openssl utility arguments
For example:
openssl x509 -in OrbixCA -text
Each Command is individually described in this Appendix. To get a list of the arguments
The OpenSSL Certificate Action command generates a self signed certificate# Generate a key, your private key, OpenSSL will prompt you to enter a password, you can enter, you can not lose,# Enter the words, each time you use this key to enter the
Document directory
Apply for Certificate
View certificates
Test Certificate
Calculate MD5 and SHA1
Apply for Certificate
SSL is often used in authentication, data encryption, and other applications. To use SSL, we have our own password
OpenSSL genrsa-out server.key 1024 (no password required)OpenSSL Req-new-key server.key-out SERVER.CSRCat SERVER.CSRPaste the above text into http://dc2.sankuai.info/certsrv/request Advanced Certificate request---->web Server certificate, OK,
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.