定制证书作为交易证明
我正在开发一个网站,用户可以在其中进行给定的交易,一旦完成,就会向用户颁发“安全证书”。该证书作为交易的证明,用户可以在稍后阶段上传证书,以查看交易的详细信息。
目前我正在使用带有加密字段的自定义 XML 文档。它工作完美,但我想要一种标准化的方法,例如 X.509 证书。我不是加密专家,但据我所知,X.509 更适合 CA 颁发的 SSL。
是否可以创建您自己的有效 CRT 文件?作为测试,我使用 WikiPedia 上提供的示例创建了一个 CRT 文件。但是,当我在 Windows 中打开该文件时,我收到此警告:无效的公钥安全对象文件
- 此文件无效,如下所示:安全证书
。
这里运气不太好,所以是时候请教专家了。我应该朝什么方向前进?任何指导将不胜感激。
I'm developing a site where a user conducts a given transaction and once completed, the user is issued with a 'secure certificate'. The certificate serves as proof of the transaction and the user is able to upload the certificate at a later stage, to view the details of the transaction.
At the moment I'm using a custom XML document with encrypted fields. It works perfect, but I would like a standardized approach, such as an X.509 certificate. I'm no encryption expert, but from what I gather, X.509 is more geared towards SSL issued by a CA.
Is it possible to create your own valid valid CRT file? As a test, I created a CRT file with the example provided on WikiPedia. However, when I open the file in Windows I get this warning: Invalid Public Key Security Object File
- This file is invalid as the following: Security Certificate
.
Not having much luck here, so time to ask the experts. What direction should I be heading in? Any guidance would be greatly appreciated.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
这听起来确实不像非对称加密的工作。您想要做的只是创建一些只有您才能读取的数据吗?这是普通老式对称加密的工作。使用的“正确”算法取决于您的安全性与性能需求,但有一些库适用于您可以使用的几乎任何语言。
This doesn't really sound like a job for Asymmetric encryption. All you want to do is create some data that only you will ever be able to read? That's a job for plain old fashioned Symmetric encryption. The 'right' algorithm to use depends on your security vs performance needs, but there are libraries for just about any language you could be using.