Windows 证书管理 - 如何
我应该满足大多数开发人员的共同要求，即通过各种通信协议使用 ssl/tls 构建/使用安全服务，而不是必要的 wcf（网络）服务。
我的问题是我对证书了解不多，并且我一直在努力了解整个过程的背景知识。
我正在协调的组织发布了 3 个文件供我使用：
AppName.cert.pem 应用程序名称.csr AppName.Key.pem
还给了我这些的密码。
该组织还给了我另一个证书：
Organization.cert.pem
，该证书应该与他们的测试工具一起使用。
场景是该组织提供了一个在一台虚拟机上运行的测试套件，而我在另一台虚拟机上构建的软件。我应该使用我的软件将两个证书导入到虚拟机中，并且我认为使用测试软件将组织的证书导入到虚拟机中。
问题是我不知道如何实现，他们提供的帮助链接指向 OpenSSL 和一些 Java2SE 跟踪双方的安全请求/响应......
好吧，我的代码是用 C# 编写的，并且两个虚拟机都使用 Windows Server 2008R2 x64 标准/企业。我不知道如何导入证书，并配置它们a）针对特定端口的每个应用程序和b）每个域的基础？
谢谢，
任何帮助和指导将不胜感激！
I am supposed to fulfill a common-for-most-developers request to build/consume secure services using ssl/tls... via various communication protocols, not necessary wcf (web) services.
My problem is that I don't know much about certificates and I have been trying to get my background knowledge up to speed on the entire process.
The organization I am coordinating with issued 3 files for me to use:
AppName.cert.pem
AppName.csr
AppName.Key.pem
and also gave me a password for these.
The organization also gave me another certificate:
Organization.cert.pem
which is supposed to be used with their test tools.
The scenario is that the organization provided a test suite that runs on one vm, and the software I am building on another. I am supposed to import both of the certs into the vm with my software, and I think the organization's cert into the vm with the test software.
Problem is I don't know how, and the help links they provided are pointing to OpenSSL and some Java2SE tracing the secure requests/responses from either side....
Well, my code is written in C#, and both VM's use Windows Server 2008R2 x64 Standard/Enterprise. I am not sure how to import the certs, and configure them a) on a per application basis for a specific PORT and b) per domain basis?
Thanks,
Any help and guidance would be greatly appreciated!
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
好吧，我下载了 OpenSSL Windows 客户端，并将
AppName.cert.pem、AppName.csr AppName.Key.pem转换为单个合并的AppName.PKCS12。后来我在每个 WS2008R2 VM 环境中使用证书管理器（MMC 管理单元）导入结果，效果很好。
事实证明，证书管理器也确实理解什么是
*.cert.pem文件，因此我也能够在两个虚拟机上导入Organization.cert.pem。谢谢
PS：永远不要阅读由 Linux/Unix 疯子编写的有关 Windows 配置的说明。如果编写测试软件手册的人（顺便说一下，我从 Linux 移植来的……）没有因为缺乏对软件的理解而让我白费力气，那么整个证书管理练习将会变得更容易。 Windows Server 环境的功能...不需要 OpenSSL。
Well, I downloaded the OpenSSL windows client and converted the
AppName.cert.pem, AppName.csr AppName.Key.peminto a single consolidatedAppName.PKCS12.I later imported the result using the Cert Manager (MMC Snap In) in each WS2008R2 VM environment and it worked just fine.
It turns out that the Cert Manager also does understand what is a
*.cert.pemfile so I was able to import theOrganization.cert.pemas well on both VM's.Thanks
PS: Never read instructions about Windows config written by a Linux/Unix nut-job. This whole exercise of certificate management would've been easier if the person that wrote the test software manual (which I ported from Linux by the way...) didn't send me on a wild goose chase due to his lack of understanding of the capabilities of the Windows Server Environment... No need for OpenSSL.
<bleepzter/>