{"id":424,"date":"2012-05-30T15:53:55","date_gmt":"2012-05-30T13:53:55","guid":{"rendered":"http:\/\/antynet.pl\/?p=424"},"modified":"2012-05-30T15:53:55","modified_gmt":"2012-05-30T13:53:55","slug":"ssl","status":"publish","type":"post","link":"https:\/\/www.antynet.pl\/index.php\/2012\/05\/30\/ssl\/","title":{"rendered":"ssl"},"content":{"rendered":"<div id=\"outline-container-1\" class=\"outline-2\">\n<h2 id=\"sec-1\">formaty<\/h2>\n<div class=\"outline-text-2\" id=\"text-1\">\n<table border=\"1\" cellspacing=\"0\" cellpadding=\"4\">\n<caption><\/caption>\n<colgroup>\n<col class=\"left\" \/>\n<col class=\"left\" \/>\n<col class=\"left\" \/>\n<\/colgroup>\n<thead>\n<tr>\n<th scope=\"col\" class=\"left\">cert<\/th>\n<th scope=\"col\" class=\"left\">extension<\/th>\n<th scope=\"col\" class=\"left\">desc<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td class=\"left\">PEM<\/td>\n<td class=\"left\">.pem<\/td>\n<td class=\"left\">(Privacy Enhanced Mail) Base64 encoding of the DER certificate, with header and footer enclosed between &#8222;&ndash;&mdash;BEGIN CERTIFICATE&ndash;&mdash;&#8221; and &#8222;&ndash;&mdash;END CERTIFICATE&ndash;&mdash;&#8221;<\/td>\n<\/tr>\n<tr>\n<td class=\"left\">DER<\/td>\n<td class=\"left\">.cer, .crt, .der<\/td>\n<td class=\"left\">binary DER form, but Base64-encoded certificates are common too (see .pem above)<\/td>\n<\/tr>\n<tr>\n<td class=\"left\">PKCS#7<\/td>\n<td class=\"left\">.p7b, .p7c<\/td>\n<td class=\"left\">SignedData structure without data, just certificate(s) or CRL(s)<\/td>\n<\/tr>\n<tr>\n<td class=\"left\">PKCS#12<\/td>\n<td class=\"left\">.p12<\/td>\n<td class=\"left\">may contain certificate(s) (public) and private keys (password protected)<\/td>\n<\/tr>\n<tr>\n<td class=\"left\">PFX<\/td>\n<td class=\"left\">.pfx<\/td>\n<td class=\"left\">predecessor of PKCS#12 (usually contains data in PKCS#12 format, e.g., with PFX files generated in IIS)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<div id=\"outline-container-2\" class=\"outline-2\">\n<h2 id=\"sec-2\">generowanie klucza prywatnego<\/h2>\n<div class=\"outline-text-2\" id=\"text-2\">\n<ul>\n<li>openssl genrsa -des3 -out [output_key_file] 1024\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-3\" class=\"outline-2\">\n<h2 id=\"sec-3\">generowanie samopodpisuj\u0105cego si\u0119 certyfikatu bez klucza prywatnego<\/h2>\n<div class=\"outline-text-2\" id=\"text-3\">\n<ul>\n<li>openssl req -new -newkey rsa:1024 -days 730 -nodes -x509 -keyout [output_key_file] -out [output_cert_file]\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-4\" class=\"outline-2\">\n<h2 id=\"sec-4\">generowanie samopodpisuj\u0105cego si\u0119 certyfiaktu z wykorzystaniem klucza prywatnego<\/h2>\n<div class=\"outline-text-2\" id=\"text-4\">\n<ul>\n<li>openssl req -key [key_file] -new -days 730 -nodes -x509 -out [output_cert_file]\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-5\" class=\"outline-2\">\n<h2 id=\"sec-5\">generowanie requesta<\/h2>\n<div class=\"outline-text-2\" id=\"text-5\">\n<ul>\n<li>openssl req -new -key [key_file] -out [output_request_file] #z kluczem\n<\/li>\n<li>openssl req -new -nodes -keyout [output_key_file] -out [output_cert_file] #bez klucza\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-6\" class=\"outline-2\">\n<h2 id=\"sec-6\">wy\u015bwietlenie requesta<\/h2>\n<div class=\"outline-text-2\" id=\"text-6\">\n<ul>\n<li>openssl req -in [request_file] -noout -text\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-7\" class=\"outline-2\">\n<h2 id=\"sec-7\">weryfikacja requesta<\/h2>\n<div class=\"outline-text-2\" id=\"text-7\">\n<ul>\n<li>openssl req -verify -in [request_file] -noout -text #verifikacja requesta\n<\/li>\n<li>openssl req -verify -in [request_file] -key [key_file] -noout -text #weryfkikacja podpisu\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-8\" class=\"outline-2\">\n<h2 id=\"sec-8\">w\u0142asne centrum CA (wykorzystanie skrypt\u00f3w)<\/h2>\n<div class=\"outline-text-2\" id=\"text-8\">\n<\/div>\n<div id=\"outline-container-8-1\" class=\"outline-3\">\n<h3 id=\"sec-8-1\">generowanie samopodpisuj\u0105cego CA center<\/h3>\n<div class=\"outline-text-3\" id=\"text-8-1\">\n<ul>\n<li><i>etc\/pki\/tls\/misc\/CA.sh -newca    &#8211; openssl req -new -keyout ..<\/i>..\/CA\/private\/cakey.pem -out ..\/..\/CA\/careq.pem\n<\/li>\n<li>openssl ca -out ..\/..\/CA\/cacert.pem $CADAYS -batch -keyfile ..\/..\/CA\/private\/cakey.pem -selfsign -infiles ..\/..\/CA\/careq.pem\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-8-2\" class=\"outline-3\">\n<h3 id=\"sec-8-2\">generowanie requesta do podpisu<\/h3>\n<div class=\"outline-text-3\" id=\"text-8-2\">\n<ul>\n<li>\/etc\/pki\/tls\/misc\/CA.sh -newreq\n<\/li>\n<li>openssl req -new -keyout key.pem -out newreq.pem -days [days#] -config [config_file_path]\n<\/li>\n<li>openssl req -new -key [key_file] -out [cert_file]\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-8-3\" class=\"outline-3\">\n<h3 id=\"sec-8-3\">podpisanie requesta<\/h3>\n<div class=\"outline-text-3\" id=\"text-8-3\">\n<ul>\n<li>\/etc\/pki\/tls\/misc\/CA -sign\n<\/li>\n<li>openssl ca -config \/usr\/lib\/ssl\/openssl.cnf -policy policy_anything -out [cert_file] -infiles [request_file]\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-8-4\" class=\"outline-3\">\n<h3 id=\"sec-8-4\">generowanie samopodpisuj\u0105cej pary (key+cert)<\/h3>\n<div class=\"outline-text-3\" id=\"text-8-4\">\n<ul>\n<li>\/etc\/pki\/tls\/misc\/CA -newcert\n<\/li>\n<li>openssl req -new -x509 -keyout [key_file] -out [cert_file] $DAYS\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-8-5\" class=\"outline-3\">\n<h3 id=\"sec-8-5\">powi\u0105zanie klucza z podpisanym requestem<\/h3>\n<div class=\"outline-text-3\" id=\"text-8-5\">\n<ul>\n<li>usun\u0105\u0107 wszystkie linie z podpisanego requesta powy\u017cej lini:\n<ul>\n<li>&ndash;&mdash;BEGIN CERTIFICATE&#8212;&#8211;\n<\/li>\n<\/ul>\n<\/li>\n<li>cat [key_file] [signed_request] &gt; [output_file]\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<div id=\"outline-container-9\" class=\"outline-2\">\n<h2 id=\"sec-9\">usuni\u0119cie has\u0142a<\/h2>\n<div class=\"outline-text-2\" id=\"text-9\">\n<ul>\n<li>openssl rsa -in [key_file_withpass] -out [key_file_nopass]\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-10\" class=\"outline-2\">\n<h2 id=\"sec-10\">wy\u015bwietlenie certyfikatu x509<\/h2>\n<div class=\"outline-text-2\" id=\"text-10\">\n<ul>\n<li>openssl x509 -in [cert_file] -noout -text\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-11\" class=\"outline-2\">\n<h2 id=\"sec-11\">wy\u015bwietlenie certyfikatu pkcs7<\/h2>\n<div class=\"outline-text-2\" id=\"text-11\">\n<ul>\n<li>openssl pkcs7 -in [cert_file] -print_certs\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-12\" class=\"outline-2\">\n<h2 id=\"sec-12\">konwersja formatu z DER to PEM<\/h2>\n<div class=\"outline-text-2\" id=\"text-12\">\n<\/div>\n<div id=\"outline-container-12-1\" class=\"outline-3\">\n<h3 id=\"sec-12-1\">konwersja certyfikatu<\/h3>\n<div class=\"outline-text-3\" id=\"text-12-1\">\n<ul>\n<li>openssl X509 -in [der_cert_file] -inform DER -out [pem_cert_file].pem -outform PEM\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-12-2\" class=\"outline-3\">\n<h3 id=\"sec-12-2\">konwersja klucza<\/h3>\n<div class=\"outline-text-3\" id=\"text-12-2\">\n<ul>\n<li>openssl rsa -in [der_key_file] -inform DER -out [pem_key_file] -outform PEM\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<div id=\"outline-container-13\" class=\"outline-2\">\n<h2 id=\"sec-13\">konwersja formatu z PEM do PFX<\/h2>\n<div class=\"outline-text-2\" id=\"text-13\">\n<ul>\n<li>openssl pkcs12 -inkey [key_file] -in [cert_file] -export -out [output_file]\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div id=\"outline-container-14\" class=\"outline-2\">\n<h2 id=\"sec-14\">linki<\/h2>\n<div class=\"outline-text-2\" id=\"text-14\">\n<ul>\n<li><a href=\"http:\/\/www.mobilefish.com\/developer\/openssl\/openssl_quickguide_command_examples.html\" rel=\"nofollow noopener\" target=\"_blank\">http:\/\/www.mobilefish.com\/developer\/openssl\/openssl\\_quickguide\\_command\\_examples.html<\/a>\n<\/li>\n<li><a href=\"http:\/\/en.wikipedia.org\/wiki\/X.509\" rel=\"nofollow noopener\" target=\"_blank\">http:\/\/en.wikipedia.org\/wiki\/X.509<\/a>\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>formaty cert extension desc PEM .pem (Privacy Enhanced Mail) Base64 encoding of the DER certificate, with header and footer enclosed between &#8222;&ndash;&mdash;BEGIN CERTIFICATE&ndash;&mdash;&#8221; and &#8222;&ndash;&mdash;END CERTIFICATE&ndash;&mdash;&#8221; DER .cer, .crt, .der binary DER form, but Base64-encoded certificates are common too (see .pem above) PKCS#7 .p7b, .p7c SignedData structure without data, just certificate(s) or CRL(s) PKCS#12 .p12 [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[86],"tags":[92,88,91],"class_list":["post-424","post","type-post","status-publish","format-standard","hentry","category-szyfrowanie-certyfikacja","tag-certyfikat","tag-podpis-cyfrowy","tag-ssl"],"_links":{"self":[{"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/posts\/424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/comments?post=424"}],"version-history":[{"count":2,"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/posts\/424\/revisions"}],"predecessor-version":[{"id":426,"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/posts\/424\/revisions\/426"}],"wp:attachment":[{"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/media?parent=424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/categories?post=424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.antynet.pl\/index.php\/wp-json\/wp\/v2\/tags?post=424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}