{"id":5587,"date":"2023-09-11T17:18:02","date_gmt":"2023-09-11T09:18:02","guid":{"rendered":"https:\/\/www.zhidianwl.net\/zhidianwl\/?p=5587"},"modified":"2023-09-11T17:18:02","modified_gmt":"2023-09-11T09:18:02","slug":"%e5%85%8d%e8%b4%b9%e7%94%b3%e8%af%b7ssl%e8%af%81%e4%b9%a6%e6%b5%81%e7%a8%8b%e4%bb%8b%e7%bb%8d","status":"publish","type":"post","link":"https:\/\/www.zhidianwl.net\/zhidianwl\/2023\/09\/11\/%e5%85%8d%e8%b4%b9%e7%94%b3%e8%af%b7ssl%e8%af%81%e4%b9%a6%e6%b5%81%e7%a8%8b%e4%bb%8b%e7%bb%8d\/","title":{"rendered":"\u514d\u8d39\u7533\u8bf7ssl\u8bc1\u4e66\u6d41\u7a0b\u4ecb\u7ecd"},"content":{"rendered":"
SSL\u8bc1\u4e66\u662f\u4e00\u79cd\u6570\u5b57\u8bc1\u4e66\uff0c\u7528\u4e8e\u52a0\u5bc6\u4e92\u8054\u7f51\u901a\u4fe1\uff0c\u9632\u6b62\u6570\u636e\u88ab\u7be1\u6539\u3001\u7a83\u53d6\u3002\u7533\u8bf7SSL\u8bc1\u4e66\u53ef\u4ee5\u63d0\u9ad8\u7f51\u7ad9\u7684\u5b89\u5168\u6027\uff0c\u589e\u52a0\u7528\u6237\u5bf9\u7f51\u7ad9\u7684\u4fe1\u4efb\u611f\uff0c\u63d0\u9ad8\u7f51\u7ad9\u7684\u53ef\u4fe1\u5ea6\u3002\u4ee5\u4e0b\u662f\u514d\u8d39\u7533\u8bf7SSL\u8bc1\u4e66\u7684\u6d41\u7a0b\u548c\u539f\u7406\u4ecb\u7ecd\u3002<\/p>\n
1. \u9009\u62e9\u8bc1\u4e66\u9881\u53d1\u673a\u6784\uff08CA\uff09<\/p>\n
CA\u662f\u4e00\u5bb6\u7b2c\u4e09\u65b9\u673a\u6784\uff0c\u7528\u4e8e\u53d1\u653e\u6570\u5b57\u8bc1\u4e66\u3002\u9009\u62e9\u4e00\u4e2a\u53ef\u4fe1\u7684CA\u673a\u6784\u975e\u5e38\u91cd\u8981\uff0c\u56e0\u4e3a\u53ea\u6709\u88ab\u5e7f\u6cdb\u4fe1\u4efb\u7684CA\u673a\u6784\u53d1\u653e\u7684\u8bc1\u4e66\u624d\u80fd\u88ab\u5927\u591a\u6570\u6d4f\u89c8\u5668\u548c\u64cd\u4f5c\u7cfb\u7edf\u6240\u63a5\u53d7\u3002\u76ee\u524d\u5e02\u573a\u4e0a\u6bd4\u8f83\u77e5\u540d\u7684CA\u673a\u6784\u6709Let’s Encrypt\u3001Comodo\u3001Symantec\u7b49\u3002<\/p>\n
2. \u751f\u6210CSR\u6587\u4ef6<\/p>\n
CSR\uff08Certificate Signing Request\uff09\u662f\u4e00\u79cd\u5305\u542b\u516c\u94a5\u548c\u8bc1\u4e66\u8bf7\u6c42\u4fe1\u606f\u7684\u6587\u4ef6\uff0c\u7528\u4e8e\u5411CA\u673a\u6784\u7533\u8bf7SSL\u8bc1\u4e66\u3002\u751f\u6210CSR\u6587\u4ef6\u7684\u65b9\u6cd5\u56e0\u670d\u52a1\u5668\u800c\u5f02\uff0c\u901a\u5e38\u9700\u8981\u5728\u670d\u52a1\u5668\u4e0a\u4f7f\u7528openssl\u547d\u4ee4\u751f\u6210\u3002<\/p>\n
3. \u63d0\u4ea4CSR\u6587\u4ef6<\/p>\n
\u5728\u9009\u62e9\u597dCA\u673a\u6784\u540e\uff0c\u9700\u8981\u5411\u5176\u63d0\u4ea4CSR\u6587\u4ef6\u4ee5\u53ca\u4e00\u4e9b\u5176\u4ed6\u4fe1\u606f\uff0c\u4f8b\u5982\u57df\u540d\u3001\u516c\u53f8\u540d\u79f0\u3001\u8054\u7cfb\u4eba\u7b49\u3002<\/p>\n
4. \u9a8c\u8bc1\u57df\u540d\u548c\u8eab\u4efd<\/p>\n
CA\u673a\u6784\u4f1a\u901a\u8fc7\u90ae\u4ef6\u6216DNS\u9a8c\u8bc1\u57df\u540d\u548c\u8eab\u4efd\u3002\u90ae\u4ef6\u9a8c\u8bc1\u9700\u8981\u5728\u6307\u5b9a\u90ae\u7bb1\u4e2d\u6536\u5230\u90ae\u4ef6\u5e76\u56de\u590d\u4e00\u4e9b\u4fe1\u606f\uff0cDNS\u9a8c\u8bc1\u9700\u8981\u5728DNS\u8bb0\u5f55\u4e2d\u6dfb\u52a0\u4e00\u4e9b\u7279\u5b9a\u7684TXT\u8bb0\u5f55\u3002<\/p>\n
5. \u4e0b\u8f7d\u8bc1\u4e66<\/p>\n
\u9a8c\u8bc1\u901a\u8fc7\u540e\uff0cCA\u673a\u6784\u5c06\u4f1a\u5411\u7533\u8bf7\u8005\u9881\u53d1SSL\u8bc1\u4e66\u3002\u8bc1\u4e66\u901a\u5e38\u4ee5PEM\u6216D<\/p>\n
ER\u683c\u5f0f\u63d0\u4f9b\u3002<\/p>\n 6. \u5b89\u88c5\u8bc1\u4e66<\/p>\n \u5b89\u88c5\u8bc1\u4e66\u7684\u65b9\u6cd5\u56e0\u670d\u52a1\u5668\u800c\u5f02\u3002\u901a\u5e38\u9700\u8981\u5728\u670d\u52a1\u5668\u4e0a\u5c06\u8bc1\u4e66\u6587\u4ef6\u548c\u79c1\u94a5\u6587\u4ef6\u653e\u7f6e\u5728\u6307\u5b9a\u7684\u4f4d\u7f6e\uff0c\u5e76\u5728\u670d\u52a1\u5668\u4e0a\u914d\u7f6eSSL\u3002<\/p>\n<\/figure>\n<\/p>\n