Skip to content
Projects
Groups
Snippets
Help
Loading...
Sign in
Toggle navigation
D
docs
Project
Project
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
Wiki
Wiki
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Commits
Issue Boards
Open sidebar
backend
docs
Commits
71301461
Commit
71301461
authored
9 years ago
by
郜兴晔
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Update ssl_ca.md
parent
00761708
master
No related merge requests found
Show whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
9 additions
and
1 deletion
+9
-1
ssl_ca.md
ssl_ca.md
+9
-1
No files found.
ssl_ca.md
View file @
71301461
#SSL_CA 安装
#SSL_CA 安装
-
生成私钥申请CA:
-
生成私钥申请CA:
参考http://docs.aliyun.com/?spm=5176.7189909.0.0.H2Ofhg#/pub/slb/faq/cert-faq
参考http://docs.aliyun.com/?spm=5176.7189909.0.0.H2Ofhg#/pub/slb/faq/cert-faq
-
登陆godaddy.com下载CA证书
-
登陆godaddy.com下载CA证书
-
解压CA包:
-
解压CA包:
unzip XXXX.zip
unzip XXXX.zip
ls
ls
eae08d8596e983ce.crt gd_bundle-g2-g1.crt
eae08d8596e983ce.crt gd_bundle-g2-g1.crt
-
验证CA证书(错误可忽略):
-
验证CA证书(错误可忽略):
openssl verify gd_bundle-g2-g1.crt
openssl verify gd_bundle-g2-g1.crt
gd_bundle-g2-g1.crt: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
gd_bundle-g2-g1.crt: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
error 20 at 0 depth lookup:unable to get local issuer certificate
error 20 at 0 depth lookup:unable to get local issuer certificate
...
@@ -25,11 +28,13 @@
...
@@ -25,11 +28,13 @@
eae08d8596e983ce.crt: OK
eae08d8596e983ce.crt: OK
-
转换CA证书格式:
-
转换CA证书格式:
openssl x509 -in gd_bundle-g2-g1.crt -out gengmei_gd.pem
openssl x509 -in gd_bundle-g2-g1.crt -out gengmei_gd.pem
openssl x509 -in eae08d8596e983ce.crt -out gengmei_cc.pem
openssl x509 -in eae08d8596e983ce.crt -out gengmei_cc.pem
cat gengmei_cc.pem gengmei_gd.pem > gengmei_ca.pem
cat gengmei_cc.pem gengmei_gd.pem > gengmei_ca.pem
-
验证CA证书:
-
验证CA证书:
openssl x509 -x509toreq -in gengmei_ca.pem -out gengmei.csr -signkey gengmei.key
openssl x509 -x509toreq -in gengmei_ca.pem -out gengmei.csr -signkey gengmei.key
Getting request Private Key
Getting request Private Key
Enter pass phrase for gengmei.key:
Enter pass phrase for gengmei.key:
...
@@ -37,10 +42,12 @@
...
@@ -37,10 +42,12 @@
Generating certificate request
Generating certificate request
-
转换私钥证书格式(可选):
-
转换私钥证书格式(可选):
openssl rsa -in gengmei.key -text > gengmei_pri.pem
openssl rsa -in gengmei.key -text > gengmei_pri.pem
Enter pass phrase for gengmei.key:
Enter pass phrase for gengmei.key:
#输入创建私钥的密码
#输入创建私钥的密码
writing RSA key
writing RSA key
-
在负载均衡SLB上创建证书
-
在负载均衡SLB上创建证书:
参考http://docs.aliyun.com/?spm=5176.7189909.0.0.H2Ofhg#/pub/slb/faq/cert-faq
参考http://docs.aliyun.com/?spm=5176.7189909.0.0.H2Ofhg#/pub/slb/faq/cert-faq
\ No newline at end of file
This diff is collapsed.
Click to expand it.
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment