摘要
在PKI系统中,都会涉及到数字证书的知识,本文从非数字证书格式出发,与数字证书格式进行了详细的比对。在深刻分析了X.509数字证书格式的基础上,介绍了制作数字证书的具体方法,并对基于OpenSSL的制作方法进行了详细的阐述和具体的实现,弥补了以往证书创建过程的不明确性。对未来证书系统的推进和实施有较强的现实意义。
Digital certification is always involved in PKI system. In this paper, the comparison of non-digital certification with formatted digital certification is performed first. Based on deep analysis of the format of X. 509 digital certification, a specific method for making digital certification is proposed. The basic procedure based on OpenSSL is described and implemented in detail. The method proposed in this paper makes up the ambiguity in creating process and has more extensive realistic influence on the propagation and implementation of future certification system.
出处
《通信技术》
2009年第1期271-273,共3页
Communications Technology
