{"id":11534,"date":"2023-12-06T17:09:40","date_gmt":"2023-12-06T09:09:40","guid":{"rendered":"https:\/\/www.yimenyun.cn\/emen\/?p=11534"},"modified":"2023-12-06T17:09:40","modified_gmt":"2023-12-06T09:09:40","slug":"%e6%9c%ac%e5%9c%b0%e8%99%9a%e6%8b%9f%e6%9c%ba%e5%a6%82%e4%bd%95%e7%94%b3%e8%af%b7ssl%e8%af%81%e4%b9%a6%e6%b5%8b%e8%af%95%ef%bc%9f","status":"publish","type":"post","link":"https:\/\/www.yimenyun.cn\/emen\/11534\/","title":{"rendered":"\u672c\u5730\u865a\u62df\u673a\u5982\u4f55\u7533\u8bf7ssl\u8bc1\u4e66\u6d4b\u8bd5\uff1f"},"content":{"rendered":"
\u5728\u672c\u5730\u865a\u62df\u673a\u4e2d\u7533\u8bf7 SSL \u8bc1\u4e66\uff0c\u4e3b\u8981\u662f\u4e3a\u4e86\u6d4b\u8bd5\u548c\u8c03\u8bd5\u7f51\u7ad9\u7684 HTTPS \u529f\u80fd\uff0c\u4ee5\u53ca\u4fdd\u8bc1\u7f51\u7ad9\u7684\u5b89\u5168\u6027\u3002\u672c\u6587\u5c06\u4ecb\u7ecd\u5982\u4f55\u5728\u672c\u5730\u865a\u62df\u673a\u4e2d\u7533\u8bf7 SSL \u8bc1\u4e66\u3002<\/p>\n
\u4e00\u3001SSL \u8bc1\u4e66\u4ecb\u7ecd<\/p>\n
SSL\uff08Secure Sockets Layer\uff09\u662f\u4e00\u79cd\u5b89\u5168\u534f\u8bae\uff0c\u7528\u4e8e\u4fdd\u8bc1\u6570\u636e\u5728\u4e92\u8054\u7f51\u4e0a\u7684\u5b89\u5168\u4f20\u8f93\u3002SSL \u8bc1\u4e66\u662f\u4e00\u79cd\u6570\u5b57\u8bc1\u4e66\uff0c\u7528\u4e8e\u9a8c\u8bc1\u7f51\u7ad9\u7684\u8eab\u4efd\u548c\u6570\u636e\u7684\u52a0\u5bc6\uff0c\u4fdd\u8bc1\u7f51\u7ad9\u7684\u5b89\u5168\u6027\u3002SSL \u8bc1\u4e66\u53ef\u4ee5\u5206\u4e3a\u81ea\u7b7e\u540d\u8bc1\u4e66\u548c\u516c\u5171\u8bc1\u4e66\u3002\u81ea\u7b7e\u540d\u8bc1\u4e66\u662f\u7531\u7f51\u7ad9<\/p>\n
\u81ea\u5df1\u751f\u6210\u5e76\u7b7e\u540d\u7684\uff0c\u800c\u516c\u5171\u8bc1\u4e66\u662f\u7531\u53d7\u4fe1\u4efb\u7684\u7b2c\u4e09\u65b9\u673a\u6784\u9881\u53d1\u7684\u3002<\/p>\n \u4e8c\u3001\u7533\u8bf7\u81ea\u7b7e\u540d SSL \u8bc1\u4e66<\/p>\n 1. \u751f\u6210\u79c1\u94a5<\/p>\n \u9996\u5148\u9700\u8981\u751f\u6210\u4e00\u4e2a\u79c1\u94a5\uff0c\u7528\u4e8e\u52a0\u5bc6\u548c\u89e3\u5bc6\u6570\u636e\u3002\u5728\u547d\u4ee4\u884c\u4e2d\u8f93\u5165\u4ee5\u4e0b\u547d\u4ee4\uff1a<\/p>\n “`<\/p>\n openssl genrsa -out key.pem 1024<\/p>\n “`<\/p>\n \u5176\u4e2d\uff0ckey.pem \u662f\u751f\u6210\u7684\u79c1\u94a5\u6587\u4ef6\u540d\u3002<\/p>\n 2. \u751f\u6210\u8bc1\u4e66\u8bf7\u6c42<\/p>\n \u63a5\u4e0b\u6765\u9700\u8981\u751f\u6210\u4e00\u4e2a\u8bc1\u4e66\u8bf7\u6c42\uff0c\u5305\u542b\u7f51\u7ad9\u7684\u4fe1\u606f\u548c\u516c\u94a5\u3002\u5728\u547d\u4ee4\u884c\u4e2d\u8f93\u5165\u4ee5\u4e0b\u547d\u4ee4\uff1a<\/p>\n “`<\/p>\n openssl req -new -key key.pem -out csr.pem<\/p>\n “`<\/p>\n \u5176\u4e2d\uff0ckey.pem \u662f\u4e0a\u4e00\u6b65\u751f\u6210\u7684\u79c1\u94a5\u6587\u4ef6\u540d\uff0ccsr.pem \u662f\u751f\u6210\u7684\u8bc1\u4e66\u8bf7\u6c42\u6587\u4ef6\u540d\u3002<\/p>\n 3. \u751f\u6210\u81ea\u7b7e\u540d SSL \u8bc1\u4e66<\/p>\n \u6700\u540e\u9700\u8981\u4f7f\u7528\u79c1\u94a5\u548c\u8bc1\u4e66\u8bf7\u6c42\u751f\u6210\u81ea\u7b7e\u540d SSL \u8bc1\u4e66\u3002\u5728\u547d\u4ee4\u884c\u4e2d\u8f93\u5165\u4ee5\u4e0b\u547d\u4ee4\uff1a<\/p>\n “`<\/p>\n openssl x509 -req -days 365 -in csr.pem -signkey key.pem -out cert.pem<\/p>\n “`<\/p>\n \u5176\u4e2d\uff0ccsr.pem \u662f\u4e0a\u4e00\u6b65\u751f\u6210\u7684\u8bc1\u4e66\u8bf7\u6c42\u6587\u4ef6\u540d\uff0ckey.pem \u662f\u4e0a\u4e00\u6b65\u751f\u6210\u7684\u79c1\u94a5\u6587\u4ef6\u540d\uff0ccert.pem \u662f\u751f\u6210\u7684\u81ea\u7b7e\u540d SSL \u8bc1\u4e66\u6587\u4ef6\u540d\u3002<\/p>\n \u4e09\u3001\u7533\u8bf7\u516c\u5171 SSL \u8bc1\u4e66<\/p>\n \u5982\u679c\u9700\u8981\u5728\u672c\u5730\u865a\u62df\u673a\u4e2d\u7533\u8bf7\u516c\u5171 SSL \u8bc1\u4e66\uff0c\u5219\u9700\u8981\u901a\u8fc7\u53d7\u4fe1\u4efb\u7684\u7b2c\u4e09\u65b9\u673a\u6784\u8fdb\u884c\u7533\u8bf7\u3002\u4ee5\u4e0b\u662f\u8be6\u7ec6\u6b65\u9aa4\uff1a<\/p>\n 1. \u9009\u62e9\u8bc1\u4e66\u7c7b\u578b<\/p>\n \u6839\u636e\u9700\u8981\u9009\u62e9\u9002\u5f53\u7684 SSL \u8bc1\u4e66\u7c7b\u578b\uff0c\u4f8b\u5982 DV\uff08Domain Validated\uff09\u3001OV\uff08Organization Validated\uff09\u6216 EV\uff08Extended Validation\uff09\u3002<\/p>\n 2. \u7533\u8bf7\u8bc1\u4e66<\/p>\n<\/figure>\n<\/p>\n