MAC OS下OpenSSL生成私钥和公钥以及RSA加密

来源:互联网 发布:阿里云域名备案 编辑:程序博客网 时间:2024/05/29 03:30

转载地址:http://blog.sina.com.cn/s/blog_8589a6890102vitk.html
MAC OS自带了OpenSSL,直接在命令行里使用OPENSSL就可以。
(1)生成公钥和私钥
打开命令行工具,然后输入 openssl打开openssl,接着只要三句命令就可以搞定。第一句命令生成私钥;第二句命令把RSA私钥转换成PKCS8格式,密码为空就行;第三句命令生成公钥。

Last login: Fri Sep 12 00:59:51 on ttys000stormerdeiMac:~ stormer$ opensslOpenSSL> genrsa -out rsa_private_key.pem 1024Generating RSA private key, 1024 bit long modulus....++++++..................++++++e is 65537 (0x10001)OpenSSL> pkcs8 -topk8 -inform PEM -in rsa_private_key.pem -outform PEM –nocryptEnter Encryption Password:Verifying - Enter Encryption Password:-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----OpenSSL> rsa -in rsa_private_key.pem -pubout -out rsa_public_key.pemwriting RSA key

最后附上截图。
这里写图片描述
生成的文件:
这里写图片描述

(2)生成.der文件
1、创建证书请求(按照提示输入信息)
openssl req -new -out cert.csr -key private_key.pem
2、自签署根证书
openssl x509 -req -in cert.csr -out rsa_public_key.der -outform der -signkey rsa_private_key.pem -days 3650
3、验证证书。把public_key.der拖到xcode中,如果文件没有问题的话,那么就可以直接在xcode中打开,看到证书的各种信息。如下图所示:

参考:
1. (原创)如何生成以及导入X.509证书
http://hi.baidu.com/five00/blog/item/43bf1fd77df2d8d9a044df39.html
2. ios下使用rsa算法与php进行加解密通讯
http://blog.yorkgu.me/2011/10/27/rsa-in-ios-using-publick-key-generated-by-openssl/
3. Certificate, Key, and Trust Services Reference
http://developer.apple.com/library/mac/#documentation/security/Reference/certifkeytrustservices/Reference/reference.html
4. X509
http://baike.baidu.com/view/2841580.htm

0 0
原创粉丝点击