SSL 证书是个人的还是全球的？
我想知道我导出网站的证书，它会与我的一些个人信息一起导出吗？
基本上我正在开发一个 cURL 脚本，其他人也会使用它，所以以下内容不是最好的选择：
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
所以我遇到了一个关于如何验证证书的指南，它说我需要导出它并附加那些我的代码行：
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt($ch, CURLOPT_CAINFO, getcwd() . "/CAcerts/BuiltinObjectToken-EquifaxSecureCA.crt");
现在的问题是我真的不知道这个东西是如何工作的，导出证书并让其他人使用 cURL 是否安全，或者证书有一些我自己的信息（用户/密码/活动等等..）当通过我的浏览器导出时？
已解决：这是我为稍后找到此主题的人使用的指南：LINK ，我所说的证书来自 Facebook。
:)
I'm wondering i export the certificate of a website will it get exported with some of my personal info?
Basically I'm working on a cURL script and other people are gonna use it too so the following would not be the best option:
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
So i came across a guide on how to verify the certificate and it says i need to export it and attach those lines to my code:
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt($ch, CURLOPT_CAINFO, getcwd() . "/CAcerts/BuiltinObjectToken-EquifaxSecureCA.crt");
Now the problem is i don't really know how this thing works, is it safe to export a certificate and let others use the cURL with it or the certificate has some of my own info (Users/Password/Activity etc..) when exported thru my browser?
SOLVED: This is the guide i was using for those who will find this topic later: LINK and the Certificate i was talking about is from Facebook.
:)
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
这要看情况。 服务器 HTTPS 证书是全局的，CA 证书也是全局的（这就是您所追求的）。客户端使用这些来验证它是否安全地与正确的服务器进行通信。
另一方面，服务器可以验证客户端证书，以验证“谁是用户”（这里似乎不是这种情况）。
That depends. Server HTTPS certificates are global, and so are CA certificates (which is what you seem to be after). These are used by the client to verify that it's talking to the correct server securely.
On the other hand, it is possible for the server to verify a client-side certificate, to verify "who is the user" (that does not seem to be the case here).