{"id":3821,"date":"2023-08-15T17:20:22","date_gmt":"2023-08-15T09:20:22","guid":{"rendered":"https:\/\/www.zhidianwl.net\/zhidianwl\/?p=3821"},"modified":"2023-08-15T17:20:22","modified_gmt":"2023-08-15T09:20:22","slug":"%e5%85%8d%e8%b4%b9%e7%94%b3%e8%af%b7%e9%80%9a%e9%85%8d%e7%ac%a6%e5%9f%9f%e5%90%8dssl%e8%af%81%e4%b9%a6","status":"publish","type":"post","link":"https:\/\/www.zhidianwl.net\/zhidianwl\/2023\/08\/15\/%e5%85%8d%e8%b4%b9%e7%94%b3%e8%af%b7%e9%80%9a%e9%85%8d%e7%ac%a6%e5%9f%9f%e5%90%8dssl%e8%af%81%e4%b9%a6\/","title":{"rendered":"\u514d\u8d39\u7533\u8bf7\u901a\u914d\u7b26\u57df\u540dssl\u8bc1\u4e66"},"content":{"rendered":"
\u901a\u914d\u7b26\u57df\u540dSSL\u8bc1\u4e66\u662f\u4e00\u79cd\u7528\u4e8e\u4fdd\u62a4\u7f51\u7ad9\u548c\u6570\u636e\u4f20\u8f93\u5b89\u5168\u7684\u52a0\u5bc6\u8bc1\u4e66\u3002\u5b83\u53ef\u4ee5\u4fdd\u62a4\u4e00\u4e2a<\/p>\n
\u4e3b\u57df\u540d\u4e0b\u7684\u6240\u6709\u5b50\u57df\u540d\uff0c\u4f8b\u5982*.example.com\u53ef\u4ee5\u4fdd\u62a4www.example.com\u3001blog.example.com\u548cmail.example.com\u7b49\u7b49\u3002<\/p>\n \u7533\u8bf7\u901a\u914d\u7b26\u57df\u540dSSL\u8bc1\u4e66\u9700\u8981\u4ee5\u4e0b\u6b65\u9aa4\uff1a<\/p>\n 1. \u9009\u62e9\u8bc1\u4e66\u4f9b\u5e94\u5546<\/p>\n \u9996\u5148\uff0c\u9700\u8981\u9009\u62e9\u4e00\u4e2a\u53ef\u4fe1\u7684\u8bc1\u4e66\u4f9b\u5e94\u5546\u3002\u5e38\u89c1\u7684\u8bc1\u4e66\u4f9b\u5e94\u5546\u6709Symantec\u3001Comodo\u3001Thawte\u3001GeoTrust\u7b49\u3002\u9700\u8981\u6ce8\u610f\u7684\u662f\uff0c\u4e0d\u540c\u7684\u8bc1\u4e66\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u8bc1\u4e66\u79cd\u7c7b\u3001\u4ef7\u683c\u548c\u670d\u52a1\u8d28\u91cf\u90fd\u4e0d\u540c\uff0c\u9700\u8981\u6839\u636e\u81ea\u5df1\u7684\u9700\u6c42\u9009\u62e9\u5408\u9002\u7684\u4f9b\u5e94\u5546\u3002<\/p>\n 2. \u9a8c\u8bc1\u57df\u540d\u6240\u6709\u6743<\/p>\n \u5728\u7533\u8bf7\u8bc1\u4e66\u4e4b\u524d\uff0c\u9700\u8981\u9a8c\u8bc1\u57df\u540d\u7684\u6240\u6709\u6743\u3002\u8bc1\u4e66\u4f9b\u5e94\u5546\u4f1a\u5411\u57df\u540d\u6240\u6709\u8005\u53d1\u9001\u9a8c\u8bc1\u90ae\u4ef6\u6216\u901a\u8fc7DNS\u8bb0\u5f55\u9a8c\u8bc1\u57df\u540d\u6240\u6709\u6743\u3002<\/p>\n 3. \u751f\u6210\u8bc1\u4e66\u7b7e\u540d\u8bf7\u6c42(CSR)<\/p>\n \u751f\u6210\u8bc1\u4e66\u7b7e\u540d\u8bf7\u6c42(CSR)\u662f\u7533\u8bf7\u8bc1\u4e66\u7684\u91cd\u8981\u6b65\u9aa4\u3002CSR\u5305\u542b\u4e86\u670d\u52a1\u5668\u4fe1\u606f\u548c\u57df\u540d\u4fe1\u606f\uff0c\u8bc1\u4e66\u4f9b\u5e94\u5546\u4f1a\u6839\u636eCSR\u751f\u6210SSL\u8bc1\u4e66\u3002<\/p>\n \u5728\u751f\u6210CSR\u4e4b\u524d\uff0c\u9700\u8981\u786e\u4fdd\u670d\u52a1\u5668\u5df2\u5b89\u88c5\u4e86\u9002\u5f53\u7684SSL\u8bc1\u4e66\u3002\u901a\u5e38\uff0c\u670d\u52a1\u5668\u8f6f\u4ef6\u4f1a\u63d0\u4f9b\u751f\u6210CSR\u7684\u5de5\u5177\uff0c\u4f8b\u5982Apache\u670d\u52a1\u5668\u7684openssl\u547d\u4ee4\u3002\u751f\u6210CSR\u65f6\u9700\u8981\u586b\u5199\u4ee5\u4e0b\u4fe1\u606f\uff1a<\/p>\n<\/figure>\n<\/p>\n