{"id":79,"date":"2017-09-08T15:22:00","date_gmt":"2017-09-08T07:22:00","guid":{"rendered":"http:\/\/douhan.li\/?p=79"},"modified":"2017-09-08T15:22:00","modified_gmt":"2017-09-08T07:22:00","slug":"chrome%e4%b8%8b%e8%87%aa%e7%ad%be%e5%90%8d%e8%af%81%e4%b9%a6%e6%8f%90%e7%a4%ba%e6%97%a0%e6%95%88%e7%9a%84%e9%97%ae%e9%a2%98","status":"publish","type":"post","link":"https:\/\/douhan.li\/?p=79","title":{"rendered":"Chrome\u4e0b\u81ea\u7b7e\u540d\u8bc1\u4e66\u63d0\u793a\u65e0\u6548\u7684\u95ee\u9898"},"content":{"rendered":"<p>\u5176\u5b9e\u4e4b\u524d\u5c31\u5df2\u7ecf\u53d1\u73b0\u6709\u8fd9\u4e2a\u95ee\u9898\uff0c\u7a81\u7136\u7528\u672c\u5730\u8c03\u8bd5\u7684\u65f6\u5019\u5c31\u63d0\u793a\u8bc1\u4e66\u65e0\u6548\uff0c\u4e4b\u524d\u7528\u7684\u8fd8\u597d\u597d\u7684\uff0c\u4e5f\u6ca1\u6709\u591a\u60f3\u4ec0\u4e48\u3002\u4eca\u5929\u521a\u597d\u9700\u8981\u505a\u65b0\u7684\u9879\u76ee\uff0c\u7531\u4e8e\u9879\u76ee\u672c\u8eab\u8d70\u5168\u7ad9HTTPS\uff0c\u4e3a\u4e86\u80fd\u66f4\u5feb\u53d1\u73b0\u63ba\u6742\u7684\u975eHTTPS\u8d44\u6e90\uff0c\u56e0\u6b64\u60f3\u8981\u5728\u672c\u5730\u914d\u7f6e\u4e00\u4e2a\u81ea\u7b7e\u540d\u8bc1\u4e66\uff0c\u53d1\u73b0\u600e\u4e48\u914d\u7f6e\u90fd\u4e0d\u5bf9\uff0c\u7531\u4e8e\u8fd8\u5fd8\u8bb0\u4e86\u5f53\u65f6\u914d\u7f6e\u81ea\u7b7e\u540d\u8bc1\u4e66\u7684\u65b9\u6cd5\uff0c\u56e0\u6b64\u641e\u4e86\u597d\u4e45\uff0c\u4e3a\u4e86\u9632\u6b62\u5fd8\u8bb0\uff0c\u7279\u5730\u8bb0\u5f55\u4e00\u4e0b\u3002<br \/>\n\u6211\u770b\u4e86\u5f88\u591a\u5173\u4e8e\u81ea\u7b7e\u540d\u7684\u6587\u7ae0\uff0c\u53bb\u627e\u7b7e\u540d\u65b9\u6cd5\uff0c\u4f46\u914d\u7f6e\u5230apache\u4e2d\u603b\u4f1a\u62a5\u9519\u542f\u52a8\u5931\u8d25\uff0c\u8fd9\u662f\u7531\u4e8e\u7b7e\u53d1\u7684\u8bc1\u4e66\u771f\u662f\u81ea\u7b7e\u540d\u8bc1\u4e66\uff0c\u5176\u5b9e\u6ca1\u6709CA\u7b7e\u540d\u8fc7\u7a0b\uff0c\u5177\u4f53\u770b\u4e0b\u4f8b\uff1a<\/p>\n<pre>$ openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt\r\n<\/pre>\n<p>\u4f7f\u7528\u7684\u662fserver.key\u7b7e\u540dserver.csr\u751f\u6210server.crt\u6587\u4ef6\uff0c\u4e4b\u524d\u6ca1\u6709\u53d1\u73b0\u5230\uff0c\u5176\u5b9e\u8fd9\u4e2a\u6d41\u7a0b\u672c\u8eab\u6709\u70b9\u5947\u602a\uff0c\u56e0\u4e3a\u672c\u8eab\u81ea\u7b7e\u540d\u5c31\u4e0d\u662f\u8ba4\u8bc1\u7684\u5408\u6cd5\u7b7e\u540d\uff0c\u8fd9\u6837\u7b7e\u540d\u4e4b\u540e\u751f\u6210\u7684\u662f\u4e00\u4e2aCA\u7b7e\u540d\uff0c\u800c\u4e0d\u662f\u57df\u540d\u7b7e\u540d\u3002\u7136\u800c\u6211\u8001\u662f\u7528\u8fd9\u79cd\u65b9\u5f0f\u8fdb\u884c\u57df\u540d\u7b7e\u540d\uff0c\u6b7b\u6d3b\u4e0d\u884c\u4e5f\u662f\u5f88\u6b63\u5e38\u7684\u3002<br \/>\n\u56e0\u4e3a\u6211\u4e4b\u524d\u5df2\u7ecf\u751f\u6210\u8fc7ROOT CA\uff0c\u56e0\u6b64\u6211\u53ea\u9700\u8981\u751f\u6210\u4e00\u4e2a\u79c1\u94a5\u3001\u5bf9\u5e94\u7684\u8bc1\u4e66\u8bf7\u6c42\u6587\u4ef6\u3001\u5e76\u4f7f\u7528ROOT CA\u751f\u6210\u7b7e\u540d\u8bc1\u4e66\u5c31\u53ef\u4ee5\u4e86\uff0c\u751f\u6210ROOT CA\u7684\u65b9\u5f0f\u5982\u4e0a\u9762\u6240\u8ff0\uff0c\u5728\u6b64\u5c31\u4e0d\u5728\u9610\u8ff0<\/p>\n<pre>\r\n  openssl x509 -res -days 3650 -in reqFile -CA caCrtFile -CAkey caPrivateKeyFile -CAserial caSerialFile -out outCrtFile\r\n<\/pre>\n<p>\u5176\u5b9e\u4e00\u53e5\u8bdd\u5c31\u53ef\u4ee5\u5bf9reqFile\u7b7e\u540d\uff0c\u4f46\u8fd9\u79cd\u65b9\u5f0f\u4eceChrome58\u4e4b\u540e\u5c31\u4e0d\u80fd\u518d\u9a97\u8fc7Chrome\u6d4f\u89c8\u5668\u4e86\uff0c\u4f1a\u63d0\u793a\u8bc1\u4e66\u65e0\u6548\uff0c\u4e5f\u5c31\u662f\u7b2c\u4e00\u53e5\u8bdd\u6240\u8bf4\u7684\u95ee\u9898\u3002\u627e\u5230\u4e00\u7bc7\u65e5\u5fd7\u89e3\u51b3\u6b64\u95ee\u9898\uff1a\n<link>https:\/\/medium.com\/@kennychen_49868\/chrome-58%E4%B8%8D%E5%85%81%E8%A8%B1%E6%B2%92%E6%9C%89san%E7%9A%84%E8%87%AA%E7%B0%BD%E6%86%91%E8%AD%89-12ca7029a933<\/link>\n\u539f\u56e0\u53ca\u89e3\u51b3\u65b9\u6cd5\u8bb2\u7684\u5f88\u6e05\u695a\uff0c\u53ef\u4ee5\u9605\u8bfb\u94fe\u63a5\u6587\u7ae0\uff0c\u5728\u6b64\u76f4\u63a5\u8d34\u89e3\u51b3\u65b9\u6848<br \/>\n\u53ea\u9700\u8981\u518d\u521b\u5efa\u4e00\u4e2aextFile \u5177\u4f53\u5185\u5bb9\u4e3a:<\/p>\n<pre>\r\nauthorityKeyIdentifier=keyid,issuer\r\nbasicConstraints=CA:FALSE\r\nkeyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment\r\nsubjectAltName = @alt_names\r\n[alt_names]\r\nDNS.1 = localhost\r\n<\/pre>\n<p>\u7b7e\u540d\u7684\u547d\u4ee4\u884c\u4e2d\u591a\u52a0\u4e00\u4e2a\u53c2\u6570 -extfile extfilePath<\/p>\n<pre>\r\n  openssl x509 -res -days 3650 -in reqFile -CA caCrtFile -CAkey caPrivateKeyFile -CAserial caSerialFile -extfile extFile -out outCrtFile\r\n<\/pre>\n<p>\u7b7e\u540d\u4e4b\u540e\u7684\u8bc1\u4e66\u5c31\u53ef\u4ee5\u8ba9Chrome\u91cd\u65b0\u663e\u793a\u7eff\u9501\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5176\u5b9e\u4e4b\u524d\u5c31\u5df2\u7ecf\u53d1\u73b0\u6709\u8fd9\u4e2a\u95ee\u9898\uff0c\u7a81\u7136\u7528\u672c\u5730\u8c03\u8bd5\u7684\u65f6\u5019\u5c31\u63d0\u793a\u8bc1\u4e66\u65e0\u6548\uff0c\u4e4b\u524d\u7528\u7684\u8fd8\u597d\u597d\u7684\uff0c\u4e5f\u6ca1\u6709\u591a\u60f3\u4ec0\u4e48\u3002\u4eca\u5929\u521a\u597d\u9700 &hellip; <a href=\"https:\/\/douhan.li\/?p=79\" class=\"more-link\">\u7ee7\u7eed\u9605\u8bfb<span class=\"screen-reader-text\">Chrome\u4e0b\u81ea\u7b7e\u540d\u8bc1\u4e66\u63d0\u793a\u65e0\u6548\u7684\u95ee\u9898<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/douhan.li\/index.php?rest_route=\/wp\/v2\/posts\/79"}],"collection":[{"href":"https:\/\/douhan.li\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/douhan.li\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/douhan.li\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/douhan.li\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=79"}],"version-history":[{"count":1,"href":"https:\/\/douhan.li\/index.php?rest_route=\/wp\/v2\/posts\/79\/revisions"}],"predecessor-version":[{"id":80,"href":"https:\/\/douhan.li\/index.php?rest_route=\/wp\/v2\/posts\/79\/revisions\/80"}],"wp:attachment":[{"href":"https:\/\/douhan.li\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=79"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/douhan.li\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=79"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/douhan.li\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=79"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}