Self-built CA Based on OpenSSL and SSL certificate issuance
For details about SSL/TLS, see the SSL/TLS principles.For more information about Certificate Authority (CA) and digital certificate, see OpenSSL and SSL digital certificate
IntroductionAbout developing certificate configurations (Certificates & Identifiers &ProvisioningProfiles), I believe that the students do iOS development is not less than toss. For an iOS to develop small white, dabbler (like myself) or veterans,
OpenSSL self-built ca signs a Single Domain Name Certificate by default, because a single server has multiple HTTPS domain names, it is much easier to sign a multi-domain certificate, today I have been looking for a long time, except for some
OpenSSL self-built CA signed by default is a single domain name certificate, because there are multiple HTTPS domain names on a single server, sometimes you want a certificate to solve all problems, if the same top-level domain name, then the
1. Generate CSR
OpenSSL req-new-newkey rsa:2048-nodes-keyout your domain name. key-out your domain name. CSR
The REQ command is primarily used to generate and process PKCS#10 certificate requests.
-new
Generates a new certificate request with a
Web Server supports HTTPS access requiring two files, private keys, and certificates. The private key and certificate are placed on the server, the private key is used to encrypt the data, and the certificate is passed to the client. Your own signed
In the previous article, we talked about the Signing Method of Multi-CN using OpenSSL to sign multi-domain name certificates. In actual use, we encountered a problem. In Android, the browser does not recognize multi-CN domain names, "The certificate
Tools:OpenSSL SSL's open source implementation, almost all the market on the encryption Libcrypto: Universal encryption Library, any software to implement the Encryption function link call this library Libssl:tls/ssl Crypto library OpenSSL: Command
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.