QNX support OpenSSL and CA （certificate authentication）file 2020-08-13

最新推荐文章于 2024-01-19 13:47:10 发布

XiAoma123_1

最新推荐文章于 2024-01-19 13:47:10 发布

阅读量971

点赞数

分类专栏：非对称加密 SSL 文章标签： QNX 操作系统 SSL

本文链接：https://blog.csdn.net/XiAoma123_1/article/details/107975346

版权

非对称加密同时被 2 个专栏收录

1 篇文章 0 订阅

订阅专栏

SSL

1 篇文章 0 订阅

订阅专栏

一、首先将两个文件拷贝

1.CA certificates 的 cURL 下载链接:
* https://curl.haxx.se/docs/caextract.html
* https://curl.haxx.se/ca/cacert.pem

2.ca-certificates.crt的下载地址链接
https://github.com/bagder/ca-bundle

二、注意事项如下：

将两个文件拷贝到/etc/ssl/certs/下，如果不存在此路径，那么请按照如下的操作。
一定要指定 --capath 和 --cacert 选项或者export SSL_CERT_FILE 或者 CURL_CA_BUNDLE 环境变量来让cURL来下载the CA certificates.

系统时间要修改为当前时间，不然证书有过期时间限制，

三、如下是操作的过程，

# mkdir -p /etc/ssl/certs
# chmod 755 /etc/ssl
# chmod 755 /etc/ssl/certs
# chmod 644 /etc/ssl/certs/cacert.pem
# export SSL_CERT_FILE=/etc/ssl/certs/cacert.pem
# curl https://www.baidu.com
curl: (60) SSL certificate problem: certificate is not yet valid
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
# date
Fri Dec 31 20:48:00 EDT 1999
# date 0812150020
Wed Aug 12 15:00:45 EST 2020
# curl https://www.baidu.com
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<TITLE>301 Moved</TITLE></HEAD><BODY>
<H1>301 Moved</H1>
The document has moved
<A HREF="https://www.google.com/">here</A>.
</BODY></HTML>
#
------------>&------------

分割线。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。。

curl采用的是同样的SSL（TLS）流程，如下是具体的客户端和服务端的认证流程，包括握手和交换私钥

ma@ma-VirtualBox:~$ curl -v https://www.baidu.com/

* Trying 180.101.49.11...
* TCP_NODELAY set
* Connected to www.baidu.com (180.101.49.11) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: C=CN; ST=beijing; L=beijing; OU=service operation department; O=Beijing Baidu Netcom Science Technology Co., Ltd; CN=baidu.com
* start date: Apr 2 07:04:58 2020 GMT
* expire date: Jul 26 05:31:02 2021 GMT
* subjectAltName: host "www.baidu.com" matched cert's "*.baidu.com"
* issuer: C=BE; O=GlobalSign nv-sa; CN=GlobalSign Organization Validation CA - SHA256 - G2
* SSL certificate verify ok.
> GET / HTTP/1.1
> Host: www.baidu.com
> User-Agent: curl/7.58.0
> Accept: */*
>
< HTTP/1.1 200 OK
< Accept-Ranges: bytes
< Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform
< Connection: keep-alive
< Content-Length: 2443
< Content-Type: text/html
< Date: Wed, 12 Aug 2020 10:38:44 GMT
< Etag: "588603eb-98b"
< Last-Modified: Mon, 23 Jan 2017 13:23:55 GMT
< Pragma: no-cache
< Server: bfe/1.0.8.18
< Set-Cookie: BDORZ=27315; max-age=86400; domain=.baidu.com; path=/
<
<!DOCTYPE html>
<html> <head><meta http-equiv=content-type content=text/html;charset=utf-8><meta http-equiv=X-UA-Compatible content=IE=Edge><meta content=always name=referrer><link rel=stylesheet type=text/css href=https://ss1.bdstatic.com/5eN1bjq8AAUYm2zgoY3K/r/www/cache/bdorz/baidu.min.css><title>百度一下，你就知道</title></head> <body link=#0000cc> <div id=wrapper> <div id=head> <div class=head_wrapper> <div class=s_form> <div class=s_form_wrapper> <div id=lg> <img hidefocus=true src=//www.baidu.com/img/bd_logo1.png width=270 height=129> </div> <form id=form name=f action=//www.baidu.com/s class=fm> <input type=hidden name=bdorz_come value=1> <input type=hidden name=ie value=utf-8> <input type=hidden name=f value=8> <input type=hidden name=rsv_bp value=1> <input type=hidden name=rsv_idx value=1> <input type=hidden name=tn value=baidu><span class="bg s_ipt_wr"><input id=kw name=wd class=s_ipt value maxlength=255 autocomplete=off autofocus=autofocus></span><span class="bg s_btn_wr"><input type=submit id=su value=百度一下 class="bg s_btn" autofocus></span> </form> </div> </div> <div id=u1> <a href=http://news.baidu.com name=tj_trnews class=mnav>新闻</a> <a href=https://www.hao123.com name=tj_trhao123 class=mnav>hao123</a> <a href=http://map.baidu.com name=tj_trmap class=mnav>地图</a> <a href=http://v.baidu.com name=tj_trvideo class=mnav>视频</a> <a href=http://tieba.baidu.com name=tj_trtieba class=mnav>贴吧</a> <noscript> <a href=http://www.baidu.com/bdorz/login.gif?login&tpl=mn&u=http%3A%2F%2Fwww.baidu.com%2f%3fbdorz_come%3d1 name=tj_login class=lb>登录</a> </noscript> <script>document.write('<a href="http://www.baidu.com/bdorz/login.gif?login&tpl=mn&u='+ encodeURIComponent(window.location.href+ (window.location.search === "" ? "?" : "&")+ "bdorz_come=1")+ '" name="tj_login" class="lb">登录</a>');
</script> <a href=//www.baidu.com/more/ name=tj_briicon class=bri style="display: block;">更多产品</a> </div> </div> </div> <div id=ftCon> <div id=ftConw> <p id=lh> <a href=http://home.baidu.com>关于百度</a> <a href=http://ir.baidu.com>About Baidu</a> </p> <p id=cp>©2017 Baidu <a href=http://www.baidu.com/duty/>使用百度前必读</a>  <a href=http://jianyi.baidu.com/ class=cp-feedback>意见反馈</a> 京ICP证030173号  <img src=//www.baidu.com/img/gs.gif> </p> </div> </div> </div> </body> </html>

XiAoma123_1

关注

0
点赞
踩
1

收藏

觉得还不错? 一键收藏
0
评论
QNX support OpenSSL and CA （certificate authentication）file 2020-08-13

一、首先将两个文件拷贝1.CA certificates 的cURL 下载链接:* https://curl.haxx.se/docs/caextract.html* https://curl.haxx.se/ca/cacert.pem2.ca-certificates.crt的下载地址链接https://github.com/bagder/ca-bundle二、注意事项如下：将两个文件拷贝到/etc/ssl/certs/下，如果不存在此路径，那么请按照如下的操作。一定要指定 ..
复制链接

扫一扫