OpenSSL is an open source SSL implementation. The simplest and most important application based on the OpenSSL directive is to use Req, CAs, and X509 to issue a certificate.OpenSSL provides command-line options and interactive two ways to perform
1. First to generate the server-side private key (key file): OpenSSL genrsa-des3-out server.key 1024The runtime prompts for a password, which is used to encrypt the key filecommand to remove key file password:OpenSSL rsa-in server.key-out Server.key
Certificate creation depends on the encryption algorithm, see http://yunweigou.blog.51cto.com/6299641/1637108
Preface, with the development of the network, because the use of HTTP protocol communication between the two sides of the data is clear-
1. First to generate the server-side private key (key file):OpenSSL genrsa-des3-out Server.key 1024The runtime prompts for a password, which is used to encrypt the key filecommand to remove the key file password:OpenSSL rsa-in server.key-out
Certificate category-Root certificate generates the server certificate, which is the basis of the client certificate. Self-signed.-The server certificate is issued by the root certificate. configured on the server.-The client certificate is issued
Compilation and installation of nginx and related settings in ubuntu environment, using tung.pdf
I. Basic compilation and Installation
1. Install Dependencies
sudo apt-get updatesudo apt-get install build-essential zlib1g-dev libpcre3 libpcre3-dev
8.1 Overview of asymmetric cryptographic algorithm directivesA. Asymmetric encryption algorithm also becomes public key algorithm, which solves the problem that the symmetric encryption algorithm key needs to be pre-allocated. Asymmetric Encryption
This article shows you how to set stronger SSL on a Nginx Web server. We are implementing this method by weakening the crime attack by invalidating the SSL. Do not use the vulnerable SSLv3 in the protocol and the following version and we will set up
Use Let & #39; s Encrypt to protect your packets
Let's Encrypt is a free SSL Certificate launched at the end of last year, and there is basically no limit to applying for this certificate, as long as you prove that you are the domain name owner, you
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.