SSL学习与总结

ゞ浴缸里的玫瑰 2023-08-17 15:21 34阅读 0赞

前言

由于最近项目中使用了SSL传输，最近对ssl传输和证书认证做了一些学习。由于之前没有了解过，关于这方面的理论知识、相关算法、协议交互、证书认证等还是比较多的。

由于本人也不是专做安全认证方向，不需要对该方面做深入了解。但是基本的原理、经常涉及到的操作还是要学习和掌握的。本文不涉及详细讲解SSL具体内容。主要做内容汇总和整理。

1. 原理相关

如下网页介绍相关算法原理。包括 hash算法、对称加密、非对称加密、混合加密。。

[https://www.zoucz.com/blog/2016/12/29/understand-crypto-1/][https_www.zoucz.com_blog_2016_12_29_understand-crypto-1]

如下网页形象的说明了关于公钥、私钥、签名、证书的原理。

[https://cloud.tencent.com/developer/news/276498][https_cloud.tencent.com_developer_news_276498]

2. openssl介绍和相关命令

openssl是开源ssl相关和算法库。功能很强大。 如下网页是openssl的手册文档。关于常用的x509  dgst   ans1parse等都有详细介绍。都是英文。需要啃。

**[https://www.openssl.org/docs/man1.1.1/man1/][https_www.openssl.org_docs_man1.1.1_man1]**

如下为解析证书的SAN的脚本和awk命令相关内容 。有空可以学习下。

**[https://stackoverflow.com/questions/20983217/how-to-display-the-subject-alternative-name-of-a-certificate][https_stackoverflow.com_questions_20983217_how-to-display-the-subject-alternative-name-of-a-certificate]**

**3. 证书解析认证**

这是识别证书 根 中 端证书 的问题。有空可以看看

**[https://stackoverflow.com/questions/13295585/openssl-certificate-verification-on-linux][https_stackoverflow.com_questions_13295585_openssl-certificate-verification-on-linux]**

digst

[https://stackoverflow.com/questions/35583740/decrypt-with-the-public-key-using-openssl-in-commandline/35584255?r=SearchResults\#35584255][https_stackoverflow.com_questions_35583740_decrypt-with-the-public-key-using-openssl-in-commandline_35584255_r_SearchResults_35584255]

[https://stackoverflow.com/questions/55650568/how-to-store-an-openssl-signature-to-a-file-in-asn-1-format?r=SearchResults][https_stackoverflow.com_questions_55650568_how-to-store-an-openssl-signature-to-a-file-in-asn-1-format_r_SearchResults]

[https://stackoverflow.com/questions/13295585/openssl-certificate-verification-on-linux][https_stackoverflow.com_questions_13295585_openssl-certificate-verification-on-linux]

[https://www.openssl.org/docs/man1.1.0/man1/verify.html][https_www.openssl.org_docs_man1.1.0_man1_verify.html]

[https://security.stackexchange.com/questions/24788/signaturealgorithm-vs-tbscertificate-signature][https_security.stackexchange.com_questions_24788_signaturealgorithm-vs-tbscertificate-signature]

[https://www.cnblogs.com/guogangj/p/4118605.html][https_www.cnblogs.com_guogangj_p_4118605.html]

[https://eclipsesource.com/blogs/2016/09/07/tutorial-code-signing-and-verification-with-openssl/][https_eclipsesource.com_blogs_2016_09_07_tutorial-code-signing-and-verification-with-openssl]

关键  待完成

[http://yongbingchen.github.io/blog/2015/04/09/verify-the-signature-of-a-x-dot-509-certificate/][http_yongbingchen.github.io_blog_2015_04_09_verify-the-signature-of-a-x-dot-509-certificate]

[https://linuxctl.com/2017/02/x509-certificate-manual-signature-verification/][https_linuxctl.com_2017_02_x509-certificate-manual-signature-verification]

[https://crypto.stackexchange.com/questions/66615/how-does-openssl-signature-verification-work][https_crypto.stackexchange.com_questions_66615_how-does-openssl-signature-verification-work]

转载于:https://www.cnblogs.com/aerfa828/p/11406653.html

[https_www.zoucz.com_blog_2016_12_29_understand-crypto-1]: https://www.zoucz.com/blog/2016/12/29/understand-crypto-1/
[https_cloud.tencent.com_developer_news_276498]: https://cloud.tencent.com/developer/news/276498
[https_www.openssl.org_docs_man1.1.1_man1]: https://www.openssl.org/docs/man1.1.1/man1/
[https_stackoverflow.com_questions_20983217_how-to-display-the-subject-alternative-name-of-a-certificate]: https://stackoverflow.com/questions/20983217/how-to-display-the-subject-alternative-name-of-a-certificate
[https_stackoverflow.com_questions_13295585_openssl-certificate-verification-on-linux]: https://stackoverflow.com/questions/13295585/openssl-certificate-verification-on-linux
[https_stackoverflow.com_questions_35583740_decrypt-with-the-public-key-using-openssl-in-commandline_35584255_r_SearchResults_35584255]: https://stackoverflow.com/questions/35583740/decrypt-with-the-public-key-using-openssl-in-commandline/35584255?r=SearchResults#35584255
[https_stackoverflow.com_questions_55650568_how-to-store-an-openssl-signature-to-a-file-in-asn-1-format_r_SearchResults]: https://stackoverflow.com/questions/55650568/how-to-store-an-openssl-signature-to-a-file-in-asn-1-format?r=SearchResults
[https_www.openssl.org_docs_man1.1.0_man1_verify.html]: https://www.openssl.org/docs/man1.1.0/man1/verify.html
[https_security.stackexchange.com_questions_24788_signaturealgorithm-vs-tbscertificate-signature]: https://security.stackexchange.com/questions/24788/signaturealgorithm-vs-tbscertificate-signature
[https_www.cnblogs.com_guogangj_p_4118605.html]: https://www.cnblogs.com/guogangj/p/4118605.html
[https_eclipsesource.com_blogs_2016_09_07_tutorial-code-signing-and-verification-with-openssl]: https://eclipsesource.com/blogs/2016/09/07/tutorial-code-signing-and-verification-with-openssl/
[http_yongbingchen.github.io_blog_2015_04_09_verify-the-signature-of-a-x-dot-509-certificate]: http://yongbingchen.github.io/blog/2015/04/09/verify-the-signature-of-a-x-dot-509-certificate/
[https_linuxctl.com_2017_02_x509-certificate-manual-signature-verification]: https://linuxctl.com/2017/02/x509-certificate-manual-signature-verification/
[https_crypto.stackexchange.com_questions_66615_how-does-openssl-signature-verification-work]: https://crypto.stackexchange.com/questions/66615/how-does-openssl-signature-verification-work