Tuhinga
Te whakaputa i tetahi Tono Waitohu Tiwhikete (TKT)
Hei whakaputa i te Tono Waitohu Tiwhikete (TKT), me hanga e koe to maatau ake. Ka taea e koe te whakahaere i te whakahau e whai ake nei mai i tetahi urunga taraiwa hei waihanga i te matua:
openssl genrsa -des3 -out server.key 1024
Te hanga i te matua tūmataiti RSA, 1024 bit long modulus ...............+++++ .............. ... ++++++ kaore e taea te tuhi 'state random' e ko 65537 (0x10001) Tomohia te kupu mo te server.key:
Ka taea e koe te whakauru i to kupuhipa. Mo te haumaru pai, me whai i nga tohu e waru. Ko te roa o te waa e tohu ana -des3 ko nga tohu e wha. Me whakauru i nga tau me te / tohu ranei, kaore he kupu i roto i te papakupu. Kia mahara hoki ko to paatete he take-nui.
Re-tuhia te kupuhipa hei waitohu. Kia oti ano te tautuhi tika, ka hangahia te matua tūmau, ka penapena ki te kōnae server.key .
[Whakatupato]
Ka taea hoki e koe te whakahaere i to tūmau tukutuku haumaru me te kore kupuhipa. He mea watea tenei no te mea kaore koe e hiahia ki te whakauru i te kupuhipa i nga wa katoa ka tīmata koe i tō tūmau tukutuku haumaru. Engari ko te tino haumarutanga, me te whakaponotanga o te matua, ko te tikanga he whakaiti i te tūmau.
I tetahi take, ka taea e koe te whiriwhiri ki te whakahaere i to ratonga tukutuku haumaru me te kore kupuhipa ma te waiho i te whakawhiti -33 i te wahanga whakaeke, ma te tuku ranei i te whakahau e whai ake nei i tetahi awhina waitohu:
openssl rsa -in server.key -out server.key.insecure
Ka oma koe i te whakahau i runga ake, ka penapena te maamaa i roto i te kōnae server.key.insecure . Ka taea e koe te whakamahi i tenei kōnae ki te whakaputa i te TTT kore he kupuhipa.
Hei waihanga i te TKT, whakahaerehia te whakahau e whai ake nei i tetahi awhina waitohu:
openssl req -new -key server.key -out server.csr
Ka akiaki koe ki te whakauru i te kupuhipa. Mena ka whakauruhia e koe te kupuhipa tika, ka akiaki koe ki te whakauru i te Ingoa Kamupene, te Ingoa Pae, Email Id, me etahi atu. Hei te wa e whakauru ai koe i enei taipitopito katoa, ka waihangahia to TKT, a ka tiakina i roto i te kōnae server.csr . Ka taea e koe te tuku i tenei kōnae TKT ki te CA mo te tukatuka. Ka whakamahia e te CAN te whakamahi i tenei kōnae TTT me te whakaputa i te tiwhikete. I tetahi atu ringa, ka taea e koe te waihanga i te tiwhikete whaiaro-haina i te whakamahi i tenei TKT.