OpenSSL is an open source SSL implementation. The simplest and most important application based on the OpenSSL directive is to use Req, CAs, and X509 to issue a certificate.OpenSSL provides command-line options and interactive two ways to perform
Simple use of OpenSSL to generate secret keys
To add SSL to servers such as Postfix and Apache, enhance the security factor,
You need to use certificate (certificate). This certificate can be obtained from the official ca.
Or you can generate one
OpenSSL encoding rules1. data encoding format
Openssl data encoding rules are based on ans.1. What is ans.1? An Explanation on top of the project
ASN.1 (Abstract Syntax Notation One) is a structured Description Language, which consists of two parts:
OpenSSL source code mainly consists of the eay library, SSL library, tool source code, sample source code, and test source code.The eay library is a basic library function and provides many functions. The source code is stored in the crypto
Different certificates are stored in different formats (such as whether the public key or private key is encrypted for storage, a single certificate, or multiple certificates), and are encoded differently (der/base64) different standards (such as
Various types of certificates because the contents of the store are different (such as whether the public/private key is encrypted storage/single certificate or multi-certificate, etc.), the adoption of different encoding (DER/BASE64), the standard
Article title: Introduction to OpenSSl. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
In linux, we often see
The concepts related to certificates are really tricky because they haven't been exposed to certificate encryption before, because there's a whole new term coming up that looks like something else in another field, not something that we're familiar
Certificate creation depends on the encryption algorithm, see http://yunweigou.blog.51cto.com/6299641/1637108
Preface, with the development of the network, because the use of HTTP protocol communication between the two sides of the data is clear-
First step: Generate private key, CSR and other filesWe may need to enter the following information (interactive):---country name (2 letter code) [Au]:usstate or province name ("full name") [some-state]:new yorklocality name (eg, city) [] :
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.