Shulou(Shulou.com)06/01 Report--

This article mainly introduces what the CSR file is, the sample code in the article is very detailed, it has a certain reference value, interested friends must read it!

CSR is the abbreviation of Certificate Signing Request, that is, certificate signature request. CSR file is a data file needed to apply for a SSL certificate. The following will give you a detailed description of the CSR file.

In fact, the core of digital certificate is asymmetric encryption, that is, public and private key encryption. The reason for the security of asymmetric encryption is that the user must ensure the security of the private key.

Therefore, when a user applies for a digital certificate from CA, the user first needs to generate a public-private key pair in his own computer. Users need to take good care of their private key, and then send the public key and your personal information to the CA institution, and the CA institution finally issues the digital certificate through your public key and personal information.

The CSR file is actually a data file that contains the user's public key and personal information. The user generates the CSR file, and then sends the CSR file to CA,CA, and the digital certificate is issued according to the contents of the CSR.

How to generate CSR files?

At present, there are many ways to generate CSR files, the more commonly used are OpenSSL tools, Keystore Explore and so on, which can be easily found by searching on the Internet. At present, more and more people generally generate CSR online. General CA institutions will provide the function of generating CSR online, such as https://myssl.com/csr_create.html.

Why can't CSR files be generated online?

It is convenient for users to generate CSR files online, but from a security point of view, there is a great risk for users to generate CSR files online. As mentioned earlier, CSR is actually a public key plus personal user information, and the public key and private key are paired, so generating CSR online is tantamount to generating public and private key pairs online. In this way, the user's private key actually exists on the server of the site, not in the user's hand. Therefore, for the security of your private key, the editor still advises users not to use online CSR generation as far as possible.

What does the CSR file look like?

CSR is actually a string in base64 format that begins with-BEGIN CERTIFICATE REQUEST- and ends with-END CERTIFICATE REQUEST-. The figure below is as follows

The above is all the contents of what the CSR file is, thank you for reading! Hope to share the content to help you, more related knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.