xca-5.html

来自「一个精简的CA程序」· HTML 代码 · 共 65 行

HTML
65 行
字号 
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><HTML><HEAD> <META NAME="GENERATOR" CONTENT="LinuxDoc-Tools 0.9.21"> <TITLE>XCA : RSA Keys </TITLE> <LINK HREF="xca-6.html" REL=next> <LINK HREF="xca-4.html" REL=previous> <LINK HREF="xca.html#toc5" REL=contents></HEAD><BODY><A HREF="xca-6.html">Next</A><A HREF="xca-4.html">Previous</A><A HREF="xca.html#toc5">Contents</A><HR><H2><A NAME="keys"></A> <A NAME="s5">5.</A> <A HREF="xca.html#toc5">RSA Keys </A></H2><P>For asynchronous encryption and signing there are keys needed. XCA only supports RSA keysand no DSA keys. All keys are stored encrypted in the database using the 3DES algorithm.</P><P>All keys do carry a use counter which counts the times it is used. For newrequests or certificates the list of available keys is reduced tothe keys with a use counter of 0.</P><H2><A NAME="ss5.1">5.1</A> <A HREF="xca.html#toc5.1">Generating Keys</A></H2><P>The dialog asks for the internal name of the key and the keysize in bits.Even if the drop-down list only shows the most usual values, any other valuecan be added here by editing this box.While searching for random prime numbers a progress bar is shown. Although theProgressbar carries a <CODE>Cancel</CODE> button it has no effect clicking on itsince the underlaying <EM>OpenSSL</EM> routine does not support an abort.So think twice before generating a 4096 bit key on a 80Mhz i486 PC ....After the key generation is done the key will be stored in the database.</P><H2><A NAME="ss5.2">5.2</A> <A HREF="xca.html#toc5.2">Key export</A></H2><P>Keys can be exported by either selecting the key and pressing <EM>Export</EM> or byusing the context-menu. This opens a Dialogbox where the following settings cn be adjusted:<UL><LI>filename</LI><LI>Outputformat (DER, PEM, PKCS#8)</LI><LI>Public or Private Key</LI><LI>Encryption of the exported file (yes/no)</LI></UL></P><P>The filename is the internal name plus a <CODE>pem</CODE>, <CODE>der</CODE> or <CODE>pk8</CODE> suffix.When changing the fileformat, the suffix of the filename changes accordinglyOnly PKCS#8 or PEM files can be encrypted, becausethe DER format (although it could be encrypted)does not support a way to supply the encryption algorithmlike e.g. <EM>DES</EM>.Of course the encryption is senseless if the private part is not exported.</P><HR><A HREF="xca-6.html">Next</A><A HREF="xca-4.html">Previous</A><A HREF="xca.html#toc5">Contents</A></BODY></HTML>

xca-5.html - 源码说明

本页面展示了「一个精简的CA程序」中的 xca-5.html 源码文件，采用 HTML 编程语言编写，共 65 行代码。您可以在线阅读完整代码内容，也可以返回资源详情页下载完整源码包进行本地学习和开发。

虫虫下载站收录了大量与程序相关的技术资源，包括源代码、技术文档、电路图等，是电子工程师和嵌入式开发者的专业学习平台。

⌨️ 快捷键说明

复制代码Ctrl + C
搜索代码Ctrl + F
全屏模式F11
增大字号Ctrl + =
减小字号Ctrl + -
显示快捷键?