Indawo ezenzakalelayo yokufaka izitifiketi ngu/etc/ssl/certs . Lokhu kuvumela amasevisi amaningi ukuthi asebenzise isitifiketi esifanayo ngaphandle kwezimvume zefayela eziyinkimbinkimbi kakhulu. Kuzinhlelo zokusebenza ezingalungiselelwa ukusebenzisa isitifiketi se-CA, kufanele futhi ukopishe /etc/ssl/certs/cacert.
Zigcinwa kuphi izitifiketi ze-PKI?
Kumalungu amaningi ezempi, kanye neningi lezisebenzi ze-DoD ezingezona ezivamile nezenkontileka, isitifiketi sakho se-PKI siyatholakala ekhadini lakho elijwayelekile lokufinyelela (CAC). Ungathola nezitifiketi zokuqeqeshwa ze-PKI kweminye imithombo. Lezi zitifiketi ngokuvamile zizothunyelwa nge-imeyili evikelekile.
How do I find certificates on my server?
Ukubuka izitifiketi zomsebenzisi wamanje
- Khetha Run kusuka kwimenyu yokuqala, bese ufaka i-certmgr. msc. Ithuluzi leMenenja Yesitifiketi lomsebenzisi wamanje liyavela.
- Ukubuka izitifiketi zakho, ngaphansi kwezitifiketi - Umsebenzisi wamanje kufasitelana langakwesobunxele, nweba umkhombandlela wohlobo lwesitifiketi ofuna ukusibuka.
Ngisithemba kanjani isitifiketi ku-Linux?
Linux (CentOs 6)
- Install the ca-certificates package: yum install ca-certificates.
- Enable the dynamic CA configuration feature: update-ca-trust force-enable.
- Add it as a new file to /etc/pki/ca-trust/source/anchors/: cp foo.crt /etc/pki/ca-trust/source/anchors/
- Use command: update-ca-trust extract.
Where are ssl certificates stored Linux?
The right place to store your certificate is /etc/ssl/certs/ directory. Save your private keys to /etc/ssl/private/ directory.
Ngisifaka kanjani isitifiketi ku-Linux?
Linux (Ubuntu, Debian)
- Ukwengeza: Kopisha i-CA yakho ku-dir /usr/local/share/ca-certificates/ Sebenzisa umyalo: sudo cp foo. crt /usr/local/share/ca-certificates/foo. crt. Buyekeza isitolo se-CA: izitifiketi ze-sudo update-ca-certificates.
- Ukuze ususe: Susa i-CA yakho. Buyekeza isitolo se-CA: i-sudo update-ca-certificates -fresh.
Where is my self signed certificates stored?
While at this point the certificate is ready to use, it is stored only in the personal certificate store on the server. It is a best practice to also have this certificate set in the trusted root as well.
Ngisithekelisa kanjani isitifiketi?
Ukuze ukhiphe isitifiketi udinga ukufinyelela kuso kusukela ku-Microsoft Management Console (MMC).
- Vula i-MMC (Qala > Run > MMC).
- Iya kokuthi Ifayela > Engeza / Susa i-Snap In.
- Chofoza kabili Izitifiketi.
- Khetha I-akhawunti Yekhompyutha.
- Khetha Ikhompyutha Yasendaweni > Qeda.
- Chofoza okuthi KULUNGILE ukuze uphume efasiteleni le-Snap-In.