ssl双向认证之客户端（SSL bidirectional authentication client）.docVIP

ssl双向认证之客户端（SSL bidirectional authentication client） Openssl two-way authentication client code OpenSSL is a rich and self-contained open source security toolkit. It provides the main functions are: SSL protocol (including SSLv2, SSLv3 and TLSv1), a large number of software algorithm (symmetric / asymmetric / Abstract), the operation of large numbers, asymmetric key generation algorithm, the ASN.1 codec, the certificate request (PKCS10) encoding and decoding, encoding and decoding digital certificates, CRL implementation and PKCS12 digital certificate format decoding, OCSP protocol, digital certificate authentication, PKCS7 standard series etc.. This paper mainly introduces the OpenSSL client server two-way authentication communication, how should the client set up?. Including how to use the OpenSSL command to generate the client server certificate and key, and the use of OpenSSL with server end SSL to realize bidirectional authentication simple, client code also made the corresponding annotation and explanation, compiled Makefile. hope that how to use OpenSSL secure connection friends useful to start learning. 1. first, how to generate client and server certificates (PEM) and keys. After downloading and installing the OpenSSL development package in the Linux environment, build a SSL test environment through the OpenSSL command. 1) building your own CA In the Misc directory of the OpenSSL installation directory, run the script:./CA.sh -newca, and when prompted, enter directly. After running, a demonCA directory is generated that contains the CA certificate and its private key. 2) generate client and server certificate requests: OpenSSL, req, -newkey, rsa:1024, -out, req1.pem, -keyout, sslclientkey.pem OpenSSL, req, -newkey, rsa:1024, -out, req2.pem, -keyout, sslserverkey.pem 3) issue client and server certificates OpenSSL, CA, -in, req1.pem, -out, sslclientcert.pem OpenSSL, CA, -in, req2.pem, -out, sslservercert.pem 4) run the SSL server: OpenSSL, s_server, -cert, s