CA系统原理讲解

《CA系统原理讲解》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、CA注册前端CertificateEnrollControl(xenroll)ApplicationCertificateRequestPKCS10CertificateServer(CA)CertificateStores(BrowserMYStore)OrApplicationC++orVisualBasicApplicationWebPagePKCS10PersonalInformationApplicationCertificateReceiptPKCS7PKCS7LinkPrivateKeyandPKCS7InstallintoBrowserauto

2、maticallyxenroll的方法：acceptPKCS7接受CA发放的PKCS#7证书createPKCS10产生PKCS#10CertificateRequest，同时产生客户端证书私钥getCertFromPKCS7获得PKCS7证书InstallPKCS7安装PKCS7证书xenroll的属性：GenKeyFlags客户端的证书是否可以被导出，确省值为“CRYPT_EXPORTABLE”KeySpec客户端私钥的用途AT_KEYEXCHANGE，AT_SIGNATUREMyStoreNameRootStoreNameCAStoreNameCA审核系

3、统批准生成CertificateRequest文件证书申请未通过未批准CA管理员审核OpennSSL函数库ApplicationCertificateRequest(PKCS#10)Perl中的DBI：MySQL接口写入MYSQL数据库证书请求表ApplicationCertificateReceipt(PKCS#10)PersonalInformation扩展信息角色证书当前序列号写入MYSQL数据库证书发放表CA吊销过程更新CRL将个人信息从证书发放表作废；将个人信息写入证书作废表；OpennSSL函数库CA管理员审核Perl中的DBI：MySQL接口用户

4、提出申请CertificateRequest加密格式-----BEGINCERTIFICATE-----MIICTDCCAbUCAQkwDQYJKoZIhvcNAQEEBQAwgYYxCzAJBgNVBAYTAkNOMRAwDgYDVQQIEwdCZWlqaW5nMRAwDgYDVQQHEwdCZWlqaW5nMQwwCgYDVQQKEwNQS1UxDjAMBgNVBAsTBUluZm9yMREwDwYDVQQDEwhHb2xkdGVjaDEiMCAGCSqGSIb3DQEJARYTc2hpaGFvXzEwMEBzaW5hLmNvbTAeFw0wMjAzMjg

5、wNDU0MzVaFw0wMjA0MjcwNDU0MzVaMIGZMQswCQYDVQQGEwJDTjEQMA4GA1UECBMHQmVpamluZzEQMA4GA1UEBxMHQmVpamluZzEaMBgGA1UEChMRUGVraW5nIFVuaXZlcnNpdHkxHzAdBgNVBAsTFkluZm9ybWF0aW9uIERlcGFydG1lbnQxGjAYBgkqhkiG9w0BCQEWC3JlcmVyZXJlcmVyMQ0wCwYDVQQDEwRyZXJlMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALHnkBT6bI1yt3

6、7POTUbj48+8f2S1m7jvu83AywLYOyOUChJn8RLd/SsvMV5xGd8AZd+GXzZcdX9i5WtDV7bt08CAwEAATANBgkqhkiG9w0BAQQFAAOBgQBSgDW+C9muasoE+jUXnnIsjUQSy+gce9MIhgtGDQessVxULaof7i3hIlRIVseHcneH0PJHS5oSz2v4Q9oD4DMAwCzdiFSDc+Lu50v6418D8tUzIsuiGEzWxN2rACcfr2OywDiu2Yy4brpGC6WireuoiR9C6/EWRO3NoLFGxzDYvA==-----

7、ENDCERTIFICATE-----每行64字Certificate加密格式-----BEGINCERTIFICATEREQUEST-----MIICnjCCAkgCAQAwgZkxCzAJBgNVBAYTAkNOMRAwDgYDVQQIEwdCZWlqaW5nMRAwDgYDVQQHEwdCZWlqaW5nMRowGAYDVQQKExFQZWtpbmcgVW5pdmVyc2l0eTEfMB0GA1UECxMWSW5mb3JtYXRpb24gRGVwYXJ0bWVudDEaMBgGCSqGSIb3DQEJARYLcmVyZXJlcmVyZXIxDTALBgN

8、VBAMTBHJlcmUwXDANBg