Commit 71301461 authored by 郜兴晔's avatar 郜兴晔

Update ssl_ca.md

parent 00761708
No related merge requests found
#SSL_CA 安装 #SSL_CA 安装
- 生成私钥申请CA: - 生成私钥申请CA:
参考http://docs.aliyun.com/?spm=5176.7189909.0.0.H2Ofhg#/pub/slb/faq/cert-faq 参考http://docs.aliyun.com/?spm=5176.7189909.0.0.H2Ofhg#/pub/slb/faq/cert-faq
- 登陆godaddy.com下载CA证书 - 登陆godaddy.com下载CA证书
- 解压CA包: - 解压CA包:
unzip XXXX.zip unzip XXXX.zip
ls ls
eae08d8596e983ce.crt gd_bundle-g2-g1.crt eae08d8596e983ce.crt gd_bundle-g2-g1.crt
- 验证CA证书(错误可忽略): - 验证CA证书(错误可忽略):
openssl verify gd_bundle-g2-g1.crt openssl verify gd_bundle-g2-g1.crt
gd_bundle-g2-g1.crt: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2 gd_bundle-g2-g1.crt: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
error 20 at 0 depth lookup:unable to get local issuer certificate error 20 at 0 depth lookup:unable to get local issuer certificate
...@@ -25,11 +28,13 @@ ...@@ -25,11 +28,13 @@
eae08d8596e983ce.crt: OK eae08d8596e983ce.crt: OK
- 转换CA证书格式: - 转换CA证书格式:
openssl x509 -in gd_bundle-g2-g1.crt -out gengmei_gd.pem openssl x509 -in gd_bundle-g2-g1.crt -out gengmei_gd.pem
openssl x509 -in eae08d8596e983ce.crt -out gengmei_cc.pem openssl x509 -in eae08d8596e983ce.crt -out gengmei_cc.pem
cat gengmei_cc.pem gengmei_gd.pem > gengmei_ca.pem cat gengmei_cc.pem gengmei_gd.pem > gengmei_ca.pem
- 验证CA证书: - 验证CA证书:
openssl x509 -x509toreq -in gengmei_ca.pem -out gengmei.csr -signkey gengmei.key openssl x509 -x509toreq -in gengmei_ca.pem -out gengmei.csr -signkey gengmei.key
Getting request Private Key Getting request Private Key
Enter pass phrase for gengmei.key: Enter pass phrase for gengmei.key:
...@@ -37,10 +42,12 @@ ...@@ -37,10 +42,12 @@
Generating certificate request Generating certificate request
- 转换私钥证书格式(可选): - 转换私钥证书格式(可选):
openssl rsa -in gengmei.key -text > gengmei_pri.pem openssl rsa -in gengmei.key -text > gengmei_pri.pem
Enter pass phrase for gengmei.key: Enter pass phrase for gengmei.key:
#输入创建私钥的密码 #输入创建私钥的密码
writing RSA key writing RSA key
- 在负载均衡SLB上创建证书 - 在负载均衡SLB上创建证书:
参考http://docs.aliyun.com/?spm=5176.7189909.0.0.H2Ofhg#/pub/slb/faq/cert-faq 参考http://docs.aliyun.com/?spm=5176.7189909.0.0.H2Ofhg#/pub/slb/faq/cert-faq
\ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment