Windows 上的 X.509 证书入门
我目前正在研究通过 WSE 3.0 或 WCF 加密和签名 SOAP 消息的主题。 由于我没有参与过涉及公共互联网的分布式应用程序开发，我发现我对X.509证书以及它在Windows证书存储机制中如何工作的知识缺乏。 这与非对称密码学无关；它与非对称密码学有关。 这是关于 PKI 生态系统的。
因此，我想收集哪些文章或书籍可以全面解释Windows的安全机制，如何正确使用和管理证书存储，CA信任链，以及WSE或WCF等API如何交互和使用证书。 建议？
I am presently studying the topic of encrypting and signing SOAP messages via WSE 3.0 or WCF. Since I have not participated in distributed application development involving the public Internet, I find my knowledge on X.509 ceritificates lacking and how it works in the Windows certificate store mechanism. It is not about asymmetric cryptography; it is about the PKI ecosystem.
Therefore I would like to gather what are some articles or books that give comprehensive explanations on Windows' security mechanisms, how to properly use and manage the Certificate Store, CA trust chains, and how APIs like WSE or WCF may interact and make use of certificates. Recommendations?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
每个使用（或考虑使用）X.509 证书的人都应该阅读以下内容：您从未想了解但被迫了解的有关 PKI 的一切，以及 X.509 样式指南，均由 Peter Gutmann 编写。
Everyone using (or thinking of using) X.509 certificates should be forced to read this: Everything you Never Wanted to Know about PKI but were Forced to Find Out, as well as X.509 Style guide, both by Peter Gutmann.
我认为理解 PKI Windows 实现的基本起点必须来自 TechNet
PKI 部分
http://technet.microsoft.com/en-us /library/cc757327(WS.10).aspx
证书概述
http://technet.microsoft.com/en-us /library/cc784662(WS.10).aspx
证书服务
http://technet.microsoft.com/en-us /library/cc783511(WS.10).aspx
证书模板
http://technet.microsoft.com/en-us /library/cc758496(WS.10).aspx
I think the base starting point to understanding the Windows implementation of PKI has to come from TechNet
PKI segment
http://technet.microsoft.com/en-us/library/cc757327(WS.10).aspx
Certificates overview
http://technet.microsoft.com/en-us/library/cc784662(WS.10).aspx
Certificate services
http://technet.microsoft.com/en-us/library/cc783511(WS.10).aspx
Certificate templates
http://technet.microsoft.com/en-us/library/cc758496(WS.10).aspx
Michele Bustamente 的“学习 WCF”有一个关于 WCF 安全性的很好的概述章节，包括一些关于 X.509 证书的基本讨论。
"Learning WCF" by Michele Bustamente has a good overview chapter on WCF security, including some basic discussion on X.509 certificates.
来自 MSDN：
如何：使用 x509 解密 XML
如何：使用 x509 加密 XML
From the MSDN:
How to: Decrypt XML with x509
How to: Encrypt XML with x509