精品国产髙清在线看国产毛片 ,免费成人毛片,亚洲午夜三级在线

使用CA�{�֏�服务器证书的脚本�Q�keystore中）

Mon, 24 Oct 2005 01:24:00 GMT

set JDK_HOME=D:\j2sdk1.4.2_06

rem 生成KeyPair
%JDK_HOME%\bin\keytool -genkey -alias tomcat_server -validity 365 -keyalg RSA -keysize 1024 -keypass changeit -storepass changeit -dname "cn=localhost, ou=department, o=company, l=Beijing, st=Beijing, c=CN" -keystore server_keystore

rem 生成待签名证�?
%JDK_HOME%\bin\keytool -certreq -alias tomcat_server -sigalg MD5withRSA -file server.csr -keypass changeit -keystore server_keystore -storepass changeit

rem 用CA�U�钥�{�֐�
openssl ca -in %server.csr -config openssl.cnf -policy policy_anything -out server.cer

rem 从JSSE删除同名的CA根证�?BR>%JDK_HOME%\bin\keytool -delete -v -storepass changeit -alias my_ca_root -keystore %JDK_HOME%\jre\lib\security\cacerts

rem 导入信�Q的CA根证书到JSSE的默认位�|?BR>rem 在Windows会有两个JRE�Q�一个在JDK目录下，一个在programe\java中，所以要明确指定使用那个JSSE
%JDK_HOME%\bin\keytool -import -v -trustcacerts -storepass changeit -alias my_ca_root -file ca\cacert.cer -keystore %JDK_HOME%\jre\lib\security\cacerts

pause
rem ��server.cer保存为base64�~�码后��l?server64.cer)

rem 把CA�{�֐�后的server端证书导入keystore
%JDK_HOME%\bin\keytool -import -v -trustcacerts -storepass changeit -alias tomcat_server -file server64.cer -keystore server_keystore
pause

夜来风雨�?/a> 2005-10-24 09:24 发表评论

使用CA发布新证书的脚本

Mon, 24 Oct 2005 01:21:00 GMT

rem 讄��openssl的�\�?BR>set OPENSSL_HOME=I:\workspace\openssl\openssl-0.9.7
path=%path%;%OPENSSL_HOME%\out32dll

rem 产生�U�钥
openssl genrsa -out %1.pem -rand ca\.rand 512

rem 生成自签名公�?BR>openssl req -new -x509 -days 3650 -key %1.pem -out %1_self.cer -config openssl.cnf

rem 用CA�U�钥�q�行�{�֐�
openssl ca -ss_cert %1_self.cer -config openssl.cnf -policy policy_anything -out %1.cer
del %1_self.cer

rem 生成pfx文�g
openssl pkcs12 -export -in %1.cer -inkey %1.pem -out %1.pfx

pause

夜来风雨�?/a> 2005-10-24 09:21 发表评论

生成CA根证书的脚本

Mon, 24 Oct 2005 01:20:00 GMT

rem 讄��openssl的�\�?BR>set OPENSSL_HOME=I:\workspace\openssl\openssl-0.9.7
path=%path%;%OPENSSL_HOME%\out32dll

md ca
cd ca
del/s/q *

rem 建立随机文�g
echo 1234567890 > .rand

rem 建立数据�?BR>echo #database > index.txt

rem 建立索引
echo 01 > serial

rem 生成CA�U�钥
openssl genrsa -out cakey.pem -rand .rand 512

rem 建立CA待签名证�?BR>:openssl req -new -out careq.csr -key cakey.pem

rem 建立CA中心根证�?自签�?BR>openssl req -new -x509 -days 3650 -key cakey.pem -out cacert.cer -config ..\openssl.cnf

cd ..
pause

夜来风雨�?/a> 2005-10-24 09:20 发表评论

Tomcat ssl配置补充

Wed, 19 Oct 2005 08:01:00 GMT

今天发现在进行最后的导入server cert 的时候出现错误：

keytool错误�Q?java.lang.Exception: 无法从回复中建立链接

最后发现是�׃��CA server重，根证书被换过了，而我�q�是用的原来的，换过重来��没问题�?img src ="http://www.aygfsteel.com/Nightlee/aggbug/15941.html" width = "1" height = "1" />

夜来风雨�?/a> 2005-10-19 16:01 发表评论

Wed, 19 Oct 2005 07:59:00 GMT

准备

1。ca服务�?/P>

2。ca根证书及�U�钥

步骤

1。申请keystore�Q��用ca根证书及密码

E:\java\jdk14\bin>keytool -import -file E:\coa\cert\itrusca-win.crt -keypass huatong -keystore E:\coa\cert\huatong_keystore -storepass huatong

2。制造服务器�U�钥�Q��用上步生成的keystore及密�?/P>

keytool -genkey -alias tomcat_server -validity 365 -keyalg RSA -keysize 1024 -keypass huatong -storepass huatong -dname "cn=NightBox, ou=department, o=company, l=Beijing, st=Beijing, c=CN" -keystore E:\coa\cert\huatong_keystore

3。��生申��h��Ӟ��然后在ca上申��h��务器证书,保存为server_cert.cer

keytool -certreq -alias tomcat_server -sigalg MD5withRSA -file E:\coa\cert\server.csr -keypass huatong -keystore E:\coa\cert\huatong_keystore -storepass huatong

4。导入ca根证书到JRE

keytool -import -v -trustcacerts -storepass changeit -alias itrus_ca_root -file E:\coa\cert\itrusca-win.crt -keystore E:\java\jdk14\jre\lib\security\cacerts

5。导入根证书到keystore

keytool -import -v -trustcacerts -storepass huatong -alias itrus_ca_root -file E:\coa\cert\itrusca-win.crt -keystore E:\coa\cert\huatong_keystore

6。导入服务器证书到keystore

keytool -import -v -trustcacerts -storepass huatong -alias tomcat_server -file E:\coa\cert\server_cert.cer -keystore E:\coa\cert\huatong_keystore

7。修改tomcat的server.xml

               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
               enableLookups="false" disableUploadTimeout="true"
               acceptCount="100" debug="0" scheme="https" secure="true"
               clientAuth="true" sslProtocol="TLS"
        keystoreFile="E:\coa\cert\huatong_keystore" keystorePass="huatong"
/>

夜来风雨�?/a> 2005-10-19 15:59 发表评论