{"id":18595,"date":"2024-11-19T20:17:14","date_gmt":"2024-11-19T12:17:14","guid":{"rendered":"https:\/\/fwq.ai\/blog\/?p=18595"},"modified":"2024-11-19T20:17:14","modified_gmt":"2024-11-19T12:17:14","slug":"openssl-%e7%9a%84%e4%bd%bf%e7%94%a8%e8%af%a6%e8%a7%a3","status":"publish","type":"post","link":"https:\/\/fwq.ai\/blog\/18595\/","title":{"rendered":"OpenSSL \u7684\u4f7f\u7528\u8be6\u89e3"},"content":{"rendered":"<p>OpenSSL \u662f\u4e00\u4e2a\u5f00\u6e90\u9879\u76ee\uff0c\u5176\u7ec4\u6210\u4e3b\u8981\u5305\u62ec\u4e00\u4e0b\u4e09\u4e2a\u7ec4\u4ef6\uff1a<\/p>\n<ul>\n<li>openssl\uff1a\u591a\u7528\u9014\u7684\u547d\u4ee4\u884c\u5de5\u5177<\/li>\n<li>libcrypto\uff1a\u52a0\u5bc6\u7b97\u6cd5\u5e93<\/li>\n<li>libssl\uff1a\u52a0\u5bc6\u6a21\u5757\u5e94\u7528\u5e93\uff0c\u5b9e\u73b0\u4e86ssl\u53catls<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>openssl\u53ef\u4ee5\u5b9e\u73b0\uff1a\u79d8\u94a5\u8bc1\u4e66\u7ba1\u7406\u3001\u5bf9\u79f0\u52a0\u5bc6\u548c\u975e\u5bf9\u79f0\u52a0\u5bc6 \u3002<\/p>\n<h1>1\u3001\u5bf9\u79f0\u52a0\u5bc6<\/h1>\n<p>\u5bf9\u79f0\u52a0\u5bc6\u9700\u8981\u4f7f\u7528\u7684\u6807\u51c6\u547d\u4ee4\u4e3a enc \uff0c\u7528\u6cd5\u5982\u4e0b\uff1a<\/p>\n<pre><strong>openssl enc -ciphername<\/strong> [-in filename] [-out filename] [-pass arg] [-e] [-d] \r\n[-a\/-base64] [-A] [-k password] [-kfile filename] [-K key] [-iv IV] [-S salt]\r\n [-salt] [-nosalt] [-z] [-md] [-p] [-P] [-bufsize number] [-nopad] [-debug] \r\n[-none] [-engine id]<\/pre>\n<p>\u5e38\u7528\u9009\u9879\u6709\uff1a<\/p>\n<ul>\n<li>-in filename\uff1a\u6307\u5b9a\u8981\u52a0\u5bc6\u7684\u6587\u4ef6\u5b58\u653e\u8def\u5f84<\/li>\n<li>-out filename\uff1a\u6307\u5b9a\u52a0\u5bc6\u540e\u7684\u6587\u4ef6\u5b58\u653e\u8def\u5f84<\/li>\n<li>-salt\uff1a\u81ea\u52a8\u63d2\u5165\u4e00\u4e2a\u968f\u673a\u6570\u4f5c\u4e3a\u6587\u4ef6\u5185\u5bb9\u52a0\u5bc6\uff0c\u9ed8\u8ba4\u9009\u9879<\/li>\n<li>-e\uff1a\u53ef\u4ee5\u6307\u660e\u4e00\u79cd\u52a0\u5bc6\u7b97\u6cd5\uff0c\u82e5\u4e0d\u6307\u7684\u8bdd\u5c06\u4f7f\u7528\u9ed8\u8ba4\u52a0\u5bc6\u7b97\u6cd5<\/li>\n<li>-d\uff1a\u89e3\u5bc6\uff0c\u89e3\u5bc6\u65f6\u4e5f\u53ef\u4ee5\u6307\u5b9a\u7b97\u6cd5\uff0c\u82e5\u4e0d\u6307\u5b9a\u5219\u4f7f\u7528\u9ed8\u8ba4\u7b97\u6cd5\uff0c\u4f46\u4e00\u5b9a\u8981\u4e0e\u52a0\u5bc6\u65f6\u7684\u7b97\u6cd5\u4e00\u81f4<\/li>\n<li>-a\/-base64\uff1a\u4f7f\u7528-base64\u4f4d\u7f16\u7801\u683c<\/li>\n<li>-pass \u79d8\u94a5<\/li>\n<\/ul>\n<p>\u793a\u4f8b\uff1a<\/p>\n<pre># openssl enc -e -des -a -in message -out message.enc\r\n# openssl enc -d -des -a -in message.enc -out message.check -pass pass:111<\/pre>\n<p><strong>Tips 1\uff1a<\/strong>\u53ef\u4ee5\u4f7f\u7528 openssl enc -h \u67e5\u770b\u6240\u6709\u7684\u5bf9\u79f0\u52a0\u5bc6\u7b97\u6cd5\u3002<\/p>\n<h1>2\u3001\u5355\u5411\u52a0\u5bc6<\/h1>\n<p>\u5355\u5411\u52a0\u5bc6\u9700\u8981\u4f7f\u7528\u7684\u6807\u51c6\u547d\u4ee4\u4e3a dgst \uff0c\u7528\u6cd5\u5982\u4e0b\uff1a<\/p>\n<pre>openssl dgst [-md5|-md4|-md2|-sha1|-sha|-mdc2|-ripemd160|-dss1] [-c] [-d] \r\n[-hex] [-binary] [-out filename] [-sign filename] [-keyform arg] [-passin arg]\r\n [-verify filename] [-prverify filename] [-signature filename] [-hmac key] [file...]\r\n<\/pre>\n<p>\u5e38\u7528\u9009\u9879\u6709\uff1a<\/p>\n<ul>\n<li>[-md5|-md4|-md2|-sha1|-sha|-mdc2|-ripemd160|-dss1] \uff1a\u6307\u5b9a\u4e00\u79cd\u52a0\u5bc6\u7b97\u6cd5<\/li>\n<li>-out filename\uff1a\u5c06\u52a0\u5bc6\u7684\u5185\u5bb9\u4fdd\u5b58\u5230\u6307\u5b9a\u6587\u4ef6\u4e2d<\/li>\n<\/ul>\n<p>\u793a\u4f8b\u5982\u4e0b\uff1a<\/p>\n<pre># echo 'abc123###!' | openssl dgst -sha1\r\n# openssl dgst -md5 messag<\/pre>\n<p>\u5355\u5411\u52a0\u5bc6\u9664\u4e86 openssl dgst \u5de5\u5177\u8fd8\u6709\uff1a md5sum\uff0csha1sum\uff0csha224sum\uff0csha256sum \uff0csha384sum\uff0csha512sum<\/p>\n<h1>3\u3001\u751f\u6210\u5bc6\u7801<\/h1>\n<p>\u751f\u6210\u5bc6\u7801\u9700\u8981\u4f7f\u7528\u7684\u6807\u51c6\u547d\u4ee4\u4e3a passwd \uff0c\u7528\u6cd5\u5982\u4e0b\uff1a<\/p>\n<pre>openssl passwd [-crypt] [-1] [-apr1] [-salt string] [-in file] [-stdin] [-noverify]\r\n [-quiet] [-table] {password}<\/pre>\n<p>\u5e38\u7528\u9009\u9879\u6709\uff1a<\/p>\n<ul>\n<li>-1\uff1a\u4f7f\u7528md5\u52a0\u5bc6\u7b97\u6cd5<\/li>\n<li>-salt string\uff1a\u52a0\u5165\u968f\u673a\u6570\uff0c\u6700\u591a8\u4f4d\u968f\u673a\u6570<\/li>\n<li>-in file\uff1a\u5bf9\u8f93\u5165\u7684\u6587\u4ef6\u5185\u5bb9\u8fdb\u884c\u52a0\u5bc6<\/li>\n<li>-stdion\uff1a\u5bf9\u6807\u51c6\u8f93\u5165\u7684\u5185\u5bb9\u8fdb\u884c\u52a0\u5bc6<\/li>\n<\/ul>\n<h1>4\u3001\u751f\u6210\u968f\u673a\u6570<\/h1>\n<p>\u751f\u6210\u968f\u673a\u6570\u9700\u8981\u7528\u5230\u7684\u6807\u51c6\u547d\u4ee4\u4e3a rand \uff0c\u7528\u6cd5\u5982\u4e0b\uff1a<\/p>\n<pre>openssl rand [-out file] [-rand file(s)] [-base64] [-hex] num<\/pre>\n<p>\u5e38\u7528\u9009\u9879\u6709\uff1a<\/p>\n<ul>\n<li>-out file\uff1a\u5c06\u751f\u6210\u7684\u968f\u673a\u6570\u4fdd\u5b58\u81f3\u6307\u5b9a\u6587\u4ef6\u4e2d<\/li>\n<li>-base64\uff1a\u4f7f\u7528base64 \u7f16\u7801\u683c\u5f0f<\/li>\n<li>-hex\uff1a\u4f7f\u752816\u8fdb\u5236\u7f16\u7801\u683c\u5f0f<\/li>\n<\/ul>\n<h1>5\u3001\u751f\u6210\u79d8\u94a5\u5bf9<\/h1>\n<p>\u9996\u5148\u9700\u8981\u5148\u4f7f\u7528 genrsa \u6807\u51c6\u547d\u4ee4\u751f\u6210\u79c1\u94a5\uff0c\u7136\u540e\u518d\u4f7f\u7528 rsa \u6807\u51c6\u547d\u4ee4\u4ece\u79c1\u94a5\u4e2d\u63d0\u53d6\u516c\u94a5\u3002<\/p>\n<p>genrsa \u7684\u7528\u6cd5\u5982\u4e0b\uff1a<\/p>\n<pre>openssl genrsa [-out filename] [-passout arg] [-des] [-des3]\r\n [-idea] [-f4] [-3] [-rand file(s)] [-engine id] [numbits]\r\n<\/pre>\n<p>\u5e38\u7528\u9009\u9879\u6709\uff1a<\/p>\n<ul>\n<li>-out filename\uff1a\u5c06\u751f\u6210\u7684\u79c1\u94a5\u4fdd\u5b58\u81f3\u6307\u5b9a\u7684\u6587\u4ef6\u4e2d<\/li>\n<li>-des|-des3|-idea\uff1a\u4e0d\u540c\u7684\u52a0\u5bc6\u7b97\u6cd5<\/li>\n<li>numbits\uff1a\u6307\u5b9a\u751f\u6210\u79c1\u94a5\u7684\u5927\u5c0f\uff0c\u9ed8\u8ba4\u662f1024<\/li>\n<\/ul>\n<p>\u4e00\u822c\u60c5\u51b5\u4e0b\u79d8\u94a5\u6587\u4ef6\u7684\u6743\u9650\u4e00\u5b9a\u8981\u63a7\u5236\u597d\uff0c\u53ea\u80fd\u81ea\u5df1\u8bfb\u5199\uff0c\u56e0\u6b64\u53ef\u4ee5\u4f7f\u7528 umask \u547d\u4ee4\u8bbe\u7f6e\u751f\u6210\u7684\u79c1\u94a5\u6743\u9650\uff0c<\/p>\n<p>\u793a\u4f8b\u5982\u4e0b\uff1a<\/p>\n<pre># openssl genrsa -out key.private 1024<\/pre>\n<p>ras \u7684\u7528\u6cd5\u5982\u4e0b\uff1a<\/p>\n<pre>openssl rsa [-inform PEM|NET|DER] [-outform PEM|NET|DER] [-in filename]\r\n [-passin arg] [-out filename] [-passout arg][-sgckey] [-des] [-des3] [-idea] \r\n[-text] [-noout] [-modulus] [-check] [-pubin] [-pubout] [-engine id]<\/pre>\n<p>\u5e38\u7528\u9009\u9879\uff1a<\/p>\n<ul>\n<li>-in filename\uff1a\u6307\u660e\u79c1\u94a5\u6587\u4ef6<\/li>\n<li>-out filename\uff1a\u6307\u660e\u5c06\u63d0\u53d6\u51fa\u7684\u516c\u94a5\u4fdd\u5b58\u81f3\u6307\u5b9a\u6587\u4ef6\u4e2d<\/li>\n<li>-pubout\uff1a\u6839\u636e\u79c1\u94a5\u63d0\u53d6\u51fa\u516c\u94a5<\/li>\n<\/ul>\n<p>\u793a\u4f8b\u5982\u4e0b\uff1a<\/p>\n<pre># openssl rsa -in key.private -out key.public -pubout<\/pre>\n<p><strong>Tips 1\uff1a<\/strong>\u4e00\u5b9a\u4e0d\u8981\u5fd8\u8bb0\u52a0\u4e0apubout.<\/p>\n<h1>6\u3001\u521b\u5efaCA\u548c\u7533\u8bf7\u8bc1\u4e66<\/h1>\n<p>\u4f7f\u7528openssl\u5de5\u5177\u521b\u5efaCA\u8bc1\u4e66\u548c\u7533\u8bf7\u8bc1\u4e66\u65f6\uff0c\u9700\u8981\u5148\u67e5\u770b\u914d\u7f6e\u6587\u4ef6\uff0c\u56e0\u4e3a\u914d\u7f6e\u6587\u4ef6\u4e2d\u5bf9\u8bc1\u4e66\u7684\u540d\u79f0\u548c\u5b58\u653e\u4f4d\u7f6e\u7b49\u76f8\u5173\u4fe1\u606f\u90fd\u505a\u4e86\u5b9a\u4e49\uff0c\u5177\u4f53\u53ef\u53c2\u8003 \/etc\/pki\/tls\/openssl.cnf \u6587\u4ef6\u3002<\/p>\n<h3>1\u3001\u521b\u5efa\u81ea\u7b7e\u8bc1\u4e66<\/h3>\n<p><strong>\u7b2c\u4e00\u6b65\uff1a\u521b\u5efa\u4e3a CA \u63d0\u4f9b\u6240\u9700\u7684\u76ee\u5f55\u53ca\u6587\u4ef6<\/strong><\/p>\n<pre># mkdir -pv \/etc\/pki\/CA\/{certs,crl,newcerts,private}\r\n# touch \/etc\/pki\/CA\/{serial,index.txt}<\/pre>\n<p><strong>\u7b2c\u4e8c\u6b65\uff1a\u6307\u660e\u8bc1\u4e66\u7684\u5f00\u59cb\u7f16\u53f7<\/strong><\/p>\n<pre># echo 01 &gt;&gt; serial<\/pre>\n<p><strong>\u7b2c\u4e09\u6b65\uff1a\u751f\u6210\u79c1\u94a5\uff0c\u79c1\u94a5\u7684\u6587\u4ef6\u540d\u4e0e\u5b58\u653e\u4f4d\u7f6e\u8981\u4e0e\u914d\u7f6e\u6587\u4ef6\u4e2d\u7684\u8bbe\u7f6e\u76f8\u5339\u914d\uff1b<\/strong><\/p>\n<pre># openssl genrsa -out .\/private\/key.private 2048<\/pre>\n<p><strong>\u7b2c\u56db\u6b65\uff1a\u751f\u6210\u81ea\u7b7e\u8bc1\u4e66\uff0c\u81ea\u7b7e\u8bc1\u4e66\u7684\u5b58\u653e\u4f4d\u7f6e\u4e5f\u8981\u4e0e\u914d\u7f6e\u6587\u4ef6\u4e2d\u7684\u8bbe\u7f6e\u76f8\u5339\u914d\uff0c\u751f\u6210\u8bc1\u4e66\u65f6\u9700\u8981\u586b\u5199\u76f8\u5e94\u7684\u4fe1\u606f\uff1b\u4f7f\u7528req\u7684\u547d\u4ee4.<\/strong><\/p>\n<p>\u547d\u4ee4\u4e2d\u7528\u5230\u7684\u9009\u9879\u89e3\u91ca\uff1a<\/p>\n<ul>\n<li>-new\uff1a\u8868\u793a\u751f\u6210\u4e00\u4e2a\u65b0\u8bc1\u4e66\u7b7e\u7f72\u8bf7\u6c42<\/li>\n<li>-x509\uff1a\u4e13\u7528\u4e8eCA\u751f\u6210\u81ea\u7b7e\u8bc1\u4e66\uff0c\u5982\u679c\u4e0d\u662f\u81ea\u7b7e\u8bc1\u4e66\u5219\u4e0d\u9700\u8981\u6b64\u9879<\/li>\n<li>-key\uff1a\u751f\u6210\u8bf7\u6c42\u65f6\u7528\u5230\u7684\u79c1\u94a5\u6587\u4ef6<\/li>\n<li>-out\uff1a\u8bc1\u4e66\u7684\u4fdd\u5b58\u8def\u5f84<\/li>\n<li>-days\uff1a\u8bc1\u4e66\u7684\u6709\u6548\u671f\u9650\uff0c\u5355\u4f4d\u662fday\uff08\u5929\uff09\uff0c\u9ed8\u8ba4\u662f365\u5929<\/li>\n<\/ul>\n<p>Tips 1\uff1a\u53ef\u4ee5\u4f7f\u7528 openssl req -h \u67e5\u770b\u66f4\u591a\u7684\u9009\u9879<\/p>\n<p>\u793a\u4f8b\u5982\u4e0b\uff1a<\/p>\n<pre># openssl req -new -key .\/private\/discuz.key -out .\/certs\/discuz.csr -days 365\r\n# openssl req -new -x509 -key .\/private\/discuz.key -out .\/certs\/discuz.crt -days 36<\/pre>\n<p><strong>Tips 1\uff1a<\/strong>\u5728apache \u3001nginx\u3001haproxy\u7b49\u5e94\u7528\u4e2d\u4f7f\u7528\u8bc1\u4e66\uff0c\u5fc5\u987b\u662f\u5df2\u7b7e\u53d1\u7684\u8bc1\u4e66\u3002\u53ef\u4ee5\u4f7f\u7528\u53c2\u6570 -x509 \uff0c\u5728\u751f\u6210\u8bc1\u4e66\u7684\u540c\u65f6\u5e76\u81ea\u7b7e\uff0c\u751f\u6210\u7684\u6700\u7ec8\u8bc1\u4e66\u5c31\u662f\u5df2\u7b7e\u53d1\u7684\u8bc1\u4e66\uff0c\u53ef\u4ee5\u76f4\u63a5\u4f7f\u7528\u3002\u5982\u679c\u6ca1\u6709\u4f7f\u7528\u53c2\u6570-x509\uff0c\u4e5f\u5c31\u662f\u672a\u4f7f\u7528\u81ea\u7b7e\uff0c\u9700\u8981\u8fdb\u884c\u547d\u4ee4 openssl ca \u547d\u4ee4\u7b7e\u53d1\u624d\u53ef\u4ee5\u4f7f\u7528\u3002\u53c2\u8003\u4e0b\u9762\u7684\u00a0\u9881\u53d1\u8bc1\u4e66\u3002<\/p>\n<p><strong>Tips 2\uff1a<\/strong>.csr\u662fCertificate Signing Request\u7684\u7f29\u5199\uff0c\u5373\u8bc1\u4e66\u7b7e\u53d1\u8bf7\u6c42\u3002\u7b7e\u53d1\u540e\u7684\u8bc1\u4e66\u7684\u6587\u4ef6\u662f.crt\uff0c\u5173\u4e8e\u8fd9\u4e2a\u77e5\u8bc6\u70b9\u53ef\u4ee5\u53c2\u8003\uff1a<a title=\"openssl\u6570\u5b57\u8bc1\u4e66\u5e38\u89c1\u683c\u5f0f\u4e0e\u534f\u8bae\u4ecb\u7ecd\" href=\"http:\/\/www.hangdaowangluo.com\/archives\/1739\" target=\"_blank\" rel=\"noopener\">openssl\u6570\u5b57\u8bc1\u4e66\u5e38\u89c1\u683c\u5f0f\u4e0e\u534f\u8bae\u4ecb\u7ecd<\/a><\/p>\n<h3>2 \u3001\u9881\u53d1\u8bc1\u4e66<\/h3>\n<p>\u5728\u9700\u8981\u4f7f\u7528\u8bc1\u4e66\u7684\u4e3b\u673a\u4e0a\u751f\u6210\u8bc1\u4e66\u8bf7\u6c42\uff0c\u4ee5 httpd \u670d\u52a1\u4e3a\u4f8b\uff0c\u6b65\u9aa4\u5982\u4e0b\uff1a<\/p>\n<p>\u7b2c\u4e00\u6b65\uff1a\u5728\u9700\u8981\u4f7f\u7528\u8bc1\u4e66\u7684\u4e3b\u673a\u4e0a\u751f\u6210\u79c1\u94a5\uff0c\u8fd9\u4e2a\u79c1\u94a5\u6587\u4ef6\u7684\u4f4d\u7f6e\u53ef\u4ee5\u968f\u610f\u5b9a<br \/>\n\u7b2c\u4e8c\u6b65\uff1a\u751f\u6210\u8bc1\u4e66\u7b7e\u7f72\u8bf7\u6c42<br \/>\n\u7b2c\u4e09\u6b65\uff1a\u5c06\u8bf7\u6c42\u901a\u8fc7\u53ef\u9760\u65b9\u5f0f\u53d1\u9001\u7ed9 CA \u4e3b\u673a<\/p>\n<p><strong>Tips 1\uff1a<\/strong>\u53c2\u8003\u4e0a\u9762\u7684\u6b65\u9aa4\u6700\u7ec8\u751f\u6210\uff0cdiscuz.csr \u6587\u4ef6\u3002<\/p>\n<p>\u7b2c\u56db\u6b65\uff1aCA \u670d\u52a1\u5668\u62ff\u5230\u8bc1\u4e66\u7b7e\u7f72\u8bf7\u6c42\u6587\u4ef6\u540e\u9881\u53d1\u8bc1\u4e66\uff0c\u8fd9\u4e00\u6b65\u662f\u5728 CA \u670d\u52a1\u5668\u4e0a\u505a\u7684\u3002<\/p>\n<pre>#openssl ca -in discuz.csr -out discuz.crt<\/pre>\n<p><strong>Tips 1\uff1a<\/strong>\u80fd\u591f\u9881\u53d1\u8bc1\u4e66\u7684\u670d\u52a1\u5668\uff0c\u81ea\u8eab\u4e5f\u5fc5\u987b\u8981\u6709\u8bc1\u4e66\u3002<\/p>\n<h3>3\u3001\u540a\u9500\u8bc1\u4e66<\/h3>\n<p>\u540a\u9500\u8bc1\u4e66\u7684\u6b65\u9aa4\u4e5f\u662f\u5728CA\u670d\u52a1\u5668\u4e0a\u6267\u884c\u7684\uff0c\u4ee5\u521a\u624d\u65b0\u5efa\u7684 httpd.crt \u8bc1\u4e66\u4e3a\u4f8b\uff0c\u540a\u9500\u6b65\u9aa4\u5982\u4e0b\uff1a<\/p>\n<p>\u7b2c\u4e00\u6b65\uff1a\u5728\u5ba2\u6237\u673a\u4e0a\u83b7\u53d6\u8981\u540a\u9500\u8bc1\u4e66\u7684 serial \u548c subject \u4fe1\u606f<br \/>\n\u7b2c\u4e8c\u6b65\uff1a\u6839\u636e\u5ba2\u6237\u673a\u63d0\u4ea4\u7684 serial \u548c subject \u4fe1\u606f\uff0c\u5bf9\u6bd4\u5176\u4f59\u672c\u673a\u6570\u636e\u5e93 index.txt \u4e2d\u5b58\u50a8\u7684\u662f\u5426\u4e00\u81f4<br \/>\n\u7b2c\u4e09\u6b65\uff1a\u6267\u884c\u540a\u9500\u64cd\u4f5c<br \/>\n\u7b2c\u56db\u6b65\uff1a\u751f\u6210\u540a\u9500\u8bc1\u4e66\u7684\u540a\u9500\u7f16\u53f7 \uff08\u7b2c\u4e00\u6b21\u540a\u9500\u8bc1\u4e66\u65f6\u6267\u884c\uff09<\/p>\n<pre># echo 01 &gt; \/etc\/pki\/CA\/crlnumber<\/pre>\n<p>\u7b2c\u4e94\u6b65\uff1a\u66f4\u65b0\u8bc1\u4e66\u540a\u9500\u5217\u8868<\/p>\n<pre># openssl ca -gencrl -out \/etc\/pki\/CA\/crl\/ca.crl<\/pre>\n<p>\u67e5\u770b crl \u6587\u4ef6\u547d\u4ee4\uff1a<\/p>\n<pre># openssl crl -in \/etc\/pki\/CA\/crl\/ca.crl -noout -text<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>OpenSSL \u662f\u4e00\u4e2a\u5f00\u6e90\u9879\u76ee\uff0c\u5176\u7ec4\u6210\u4e3b\u8981\u5305\u62ec\u4e00\u4e0b\u4e09\u4e2a\u7ec4\u4ef6\uff1a openssl\uff1a\u591a\u7528\u9014\u7684\u547d\u4ee4\u884c\u5de5\u5177 libcrypto\uff1a\u52a0\u5bc6\u7b97\u6cd5\u5e93 libssl\uff1a\u52a0\u5bc6\u6a21\u5757\u5e94\u7528\u5e93\uff0c\u5b9e\u73b0\u4e86ssl\u53catls &nbsp; openssl\u53ef\u4ee5\u5b9e\u73b0\uff1a\u79d8\u94a5\u8bc1\u4e66\u7ba1\u7406\u3001\u5bf9\u79f0\u52a0\u5bc6\u548c\u975e\u5bf9\u79f0\u52a0\u5bc6 \u3002 1\u3001\u5bf9\u79f0\u52a0\u5bc6 \u5bf9\u79f0\u52a0\u5bc6\u9700\u8981\u4f7f\u7528\u7684\u6807\u51c6\u547d\u4ee4\u4e3a enc \uff0c\u7528\u6cd5\u5982\u4e0b\uff1a openssl enc -ciphername [-in filename] [-out filename] [-pass arg] [-e] [-d] [-a\/-base64] [-A] [-k password] [-kfile filename] [-K key] [-iv IV] [-S salt] [-salt] [-nosalt] [-z] [-md] [-p] [-P] [-bufsize number] [-nopad] [-debug] [-none] [-engine id] \u5e38\u7528\u9009\u9879\u6709\uff1a -in filename\uff1a\u6307\u5b9a\u8981\u52a0\u5bc6\u7684\u6587\u4ef6\u5b58\u653e\u8def\u5f84 -out filename\uff1a\u6307\u5b9a\u52a0\u5bc6\u540e\u7684\u6587\u4ef6\u5b58\u653e\u8def\u5f84 -salt\uff1a\u81ea\u52a8\u63d2\u5165\u4e00\u4e2a\u968f\u673a\u6570\u4f5c\u4e3a\u6587\u4ef6\u5185\u5bb9\u52a0\u5bc6\uff0c\u9ed8\u8ba4\u9009\u9879 -e\uff1a\u53ef\u4ee5\u6307\u660e\u4e00\u79cd\u52a0\u5bc6\u7b97\u6cd5\uff0c\u82e5\u4e0d\u6307\u7684\u8bdd\u5c06\u4f7f\u7528\u9ed8\u8ba4\u52a0\u5bc6\u7b97\u6cd5 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[],"class_list":["post-18595","post","type-post","status-publish","format-standard","hentry","category-docker"],"_links":{"self":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts\/18595","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/comments?post=18595"}],"version-history":[{"count":1,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts\/18595\/revisions"}],"predecessor-version":[{"id":18596,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts\/18595\/revisions\/18596"}],"wp:attachment":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/media?parent=18595"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/categories?post=18595"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/tags?post=18595"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}