Amadokhumenti
Ukudala isicelo seSitifiketi sokuSayina (CSR)
Ukwenza isicelo seSitifiketi sokuSayina (CSR), kufanele udale ukhiye wakho. Ungagijima umyalo olandelayo ukusuka kusiphetho sokugcina ukudala ukhiye:
i-openssl genrsa -des3 -out server.key 1024
Ukhiqiza ukhiye wangasese we-RSA, i-modulus ende engu-1024 bit eside ..................... ++++++ .............. ... ++++++ akakwazi ukubhala 'isimo esingavamile' e ngu-65537 (0x10001) Faka igama lokudlula le-server.key:
Manje usungena igama lakho lokudlula. Ukuze uthole ukuphepha okungcono, kufanele okungenani kube nezinhlamvu eziyisishiyagalombili. Ubude obuncane uma ucacisa -de3 yizinhlamvu ezine. Kumele ifake izinombolo kanye / noma izimpawu zokubhala futhi ungabi yizwi kwisichazamazwi. Futhi khumbula ukuthi i-passphrase yakho i-sensitive-case.
Phinda uthayiphe umgqa wokungena ukuze uqinisekise. Uma usuyifake kabusha ngokuqondile, ukhiye we-server ukhiqizwa futhi ugcinwe kufayela le- server.key .
[Isexwayiso]
Ungaphinde ugijime iseva yakho yewebhu ephephile ngaphandle kwegama lokungena. Lokhu kulula ngoba awudingi ukufaka umbhalo wesigcawu njalo uma uqala iseva yakho yewebhu ephephile. Kodwa akuphephile kakhulu futhi kunokwehliswa kwendlela ehluthulelwe yokwehliswa kwesiphakeli futhi.
Kunoma yikuphi, ungakhetha ukugijima iseva yakho yewebhu ephephile ngaphandle kwesigcawu sokungena ngokushiya i -des3 switch kulesi sizukulwane noma ngokukhipha umyalo olandelayo endaweni yokugcina:
vulasl rsa -in server.key -out server.key.insecure
Uma ugijima umyalo ongenhla, ukhiye ongaphephile uzogcinwa kwifayela le- server.key.insecure . Ungasebenzisa leli fayela ukudala i-CSR ngaphandle kwegama lokungena.
Ukuze udale i-CSR, sebenzisa umyalo olandelayo esiteshini sokugcina:
i-openssl req-entsha -key server.key -out server.csr
Kuzokwenza ukuba ufake igama lokungena. Uma ufaka igama lokungena elifanele, kuzokwenza ukuba ufake igama leNkampani, igama lesayithi, i-imeyili ye-Id, njll. Uma ufaka yonke lemininingwane, i-CSR yakho izokwakhiwa futhi izogcinwa efayeleni le- server.csr . Ungathumela leli fayela le-CSR ku-CA yokucubungula. I-CAN izosebenzisa leli fayela le-CSR futhi ikhiphe isitifiketi. Ngakolunye uhlangothi, ungakha isitifiketi esayinwe ngesandla usebenzisa le CSR.