Otu esi emepụta CSR (Arịrịọ nbanye Asambodo) na Linux

Asambodo SSL dabara n'ụdị abụọ sara mbara: 1) Asambodo ejiri aka ya bịanye aka na ya nke bụ asambodo njirimara nke otu ụlọ ọrụ bịanyere aka na njirimara njirimara ya, yana 2) Asambodo nke CA (CA) bịanyere aka na ya. Akwụkwọ ikike) dị ka Let's Encrypt, Comodo na ọtụtụ ụlọ ọrụ ndị ọzọ.

A na-ejikarị asambodo ejiri aka ya mee ihe na gburugburu ule maka ọrụ LAN ma ọ bụ ngwa. Enwere ike imepụta ha n'efu site na iji OpenSSL ma ọ bụ ngwa ọ bụla metụtara ya. N'aka nke ọzọ, maka mmetụta dị nro, ọrụ mmepụta ihe na-eche ihu ọha, ngwa ma ọ bụ webụsaịtị, a na-atụ aro nke ukwuu iji akwụkwọ ikike nke CA tụkwasịrị obi nyere ma kwenye.

Nzọụkwụ mbụ kwupụta inweta akwụkwọ SSL nyere na nkwenye site na CA na-emepụta CSR (obere maka arịrịọ ntinye akwụkwọ ikike).

N'isiokwu a, anyị ga-egosi otu esi emepụta CSR (Arịrịọ nbanye Asambodo) na sistemụ Linux.

Ịmepụta CSR – Arịrịọ nbanye Asambodo na Linux

Iji mepụta CSR, ị ga-achọ ọrụ ahịrị iwu OpenSSL arụnyere na sistemụ gị, ma ọ bụghị ya, mee iwu a ka ịwụnye ya.

$ sudo apt install openssl  [On Debian/Ubuntu]
$ sudo yum install openssl  [On CentOS/RHEL]
$ sudo dnf install openssl  [On Fedora]

Mgbe ahụ nye ndị na-esonụ iwu ka igbanye a CSR na igodo ga-echebe gị akwụkwọ.

$ openssl req -new -newkey rsa:2048 -nodes -keyout example.com.key -out example.com.csr

ebe:

• req na-enyere akụkụ OpenSSL aka nke na-ahụ maka ntinye akwụkwọ anamachọihe.
• -newkey rsa:2048 na-emepụta igodo RSA 2048-bit.
• -ọnụ putara \Edola igodo ezo
• -keyout example.com.key na-akọwapụta aha faịlụ a ga-ede na igodo nzuzo emepụtara.
• -out example.com.csr na-akọwapụta aha faịlụ iji dee CSR na.

Zaa nke ọma, ajụjụ ndị a ga-ajụ gị. Rịba ama na azịza gị kwesịrị ikwekọ na ozi dị na akwụkwọ iwu gbasara ndebanye aha ụlọ ọrụ gị. CA na-enyocha ozi a nke ọma tupu ịnye asambodo gị.

Mgbe ịmepụtara CSR gị, lelee ọdịnaya nke faịlụ site na iji putility, họrọ ya ma detuo ya.

$ cat example.com.csr

Wee laghachi na webụsaịtị CA gị, banye, gaa na ibe ahụ ga-enwe asambodo SSL ị zụrụ, wee rụọ ọrụ ya. Mgbe ahụ na mpio dị ka nke dị n'okpuru, mado CSR gị na mpaghara ntinye ziri ezi.

N'ọmụmaatụ a, anyị mepụtara CSR maka ọtụtụ asambodo ngalaba zụtara na Namecheap.

Wee soro ntuziaka ndị ọzọ ka ibido ọrụ asambodo SSL gị. Maka ozi ndị ọzọ gbasara iwu OpenSSL, hụ ibe nwoke ya:

$ man openssl

Nke ahụ bụ ihe niile ugbu a! Na-echeta mgbe niile na nzọụkwụ mbụ iji nweta akwụkwọ SSL nke gị site na CA bụ ịmepụta CSR. Jiri mpempe nzaghachi n'okpuru jụọ ajụjụ ọ bụla ma ọ bụ kesaa ihe gị na anyị.