ChuckLu - 博客园

2021年12月13日

摘要： Finished (Encrypted Handshake) The Finished message is complicated as it is a hash of all the messages exchanged previously along with a label (“clien 阅读全文

posted @ 2021-12-13 16:48 ChuckLu 阅读(318) 评论(0) 推荐(0)

What if JWT is stolen?

摘要： What if JWT is stolen? I am trying to implement stateless authentication with JWT for my RESTful APIs. AFAIK, JWT is basically an encrypted string pas 阅读全文

posted @ 2021-12-13 14:22 ChuckLu 阅读(74) 评论(0) 推荐(0)

What's the difference between JWTs and Bearer Token?

摘要： What's the difference between JWTs and Bearer Token? 问题 I'm learning something about Authorization like Basic, Digest, OAuth2.0, JWTs, and Bearer Toke 阅读全文

posted @ 2021-12-13 14:10 ChuckLu 阅读(57) 评论(0) 推荐(0)

2021年12月10日

What is the default value for enum variable?

摘要： What is the default value for enum variable? It is whatever member of the enumeration represents the value 0. Specifically, from the documentation: Th 阅读全文

posted @ 2021-12-10 21:29 ChuckLu 阅读(49) 评论(0) 推荐(0)

StoreName Enum

摘要： StoreName Enum AddressBook 1 The X.509 certificate store for other users. AuthRoot 2 The X.509 certificate store for third-party certificate authoriti 阅读全文

posted @ 2021-12-10 20:46 ChuckLu 阅读(37) 评论(0) 推荐(0)

X509Certificate2 Class

摘要： X509Certificate2.FriendlyName Gets or sets the associated alias for a certificate. Friendly names are properties in the X.509 certificate store that c 阅读全文

posted @ 2021-12-10 19:32 ChuckLu 阅读(294) 评论(0) 推荐(0)

Create a .pfx/.p12 Certificate File Using OpenSSL

摘要： Create a .pfx/.p12 Certificate File Using OpenSSL In cryptography, the PKCS#12 or PFX format is a binary format often used to store all elements of th 阅读全文

posted @ 2021-12-10 19:02 ChuckLu 阅读(133) 评论(0) 推荐(0)

How Certificate Chains Work 证书链如何工作的

摘要： How Certificate Chains Work Solution What is a Certificate Chain? A certificate chain is an ordered list of certificates, containing an SSL/TLS Certif 阅读全文

posted @ 2021-12-10 18:11 ChuckLu 阅读(535) 评论(0) 推荐(0)

OpenSSL and s_client - why is a private key required from the client?

摘要： OpenSSL and s_client - why is a private key required from the client? 回答1 Certificates on their own are only public pieces of information. What links 阅读全文

posted @ 2021-12-10 15:50 ChuckLu 阅读(182) 评论(0) 推荐(0)

How to validate a client certificate 客户端证书

摘要： .p12文件同时包含了证书，私钥，和证书链。安装.p12文件后，情况如下：有三个证书， Here is a simple way to identify where a certificate is a client certificate or not: https://techcommunity 阅读全文

posted @ 2021-12-10 15:36 ChuckLu 阅读(343) 评论(0) 推荐(0)

Chuck Lu

公告