-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathindex.html
More file actions
13 lines (12 loc) · 4.11 KB
/
Copy pathindex.html
File metadata and controls
13 lines (12 loc) · 4.11 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
<!DOCTYPE html><html lang="zh-cn"><head><meta charset="utf-8"><meta name="X-UA-Compatible" content="IE=edge"><title> Https · Mi Tang</title><meta name="description" content="Https - fish·nut"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="short icon" href="/favicon.png"><link rel="stylesheet" href="/css/apollo.css"><link rel="search" type="application/opensearchdescription+xml" href="http://lpbobo.com/atom.xml" title="Mi Tang"></head><body><header><a href="/" class="logo-link"><img src="/favicon.png"></a><ul class="nav nav-list"><li class="nav-list-item"><a href="/" target="_self" class="nav-list-link">HOME</a></li><li class="nav-list-item"><a href="/categories/Science" target="_self" class="nav-list-link">SCIENCE</a></li><li class="nav-list-item"><a href="/categories/Trip" target="_self" class="nav-list-link">TRIP</a></li><li class="nav-list-item"><a href="/About" target="_self" class="nav-list-link">WE</a></li></ul></header><div class="wrap"><section class="container"><div class="post"><article class="post-block"><h1 class="post-title">Https</h1><div class="post-info">2015年11月23日</div><div class="post-content"><p>几句话说明白https的加密过程</p>
<a id="more"></a>
<p><img src="http://7xlu9w.com1.z0.glb.clouddn.com/mitang_science_Https.png" alt=""></p>
<p>做银行的信息系统，https加密无可厚非</p>
<p>1.从网络资源和公司的交流材料中研究https的基本原理，有一张图说的很对。</p>
<figure class="highlight plain"><table><tr><td class="gutter"><pre><div class="line">1</div><div class="line">2</div><div class="line">3</div><div class="line">4</div><div class="line">5</div><div class="line">6</div><div class="line">7</div><div class="line">8</div><div class="line">9</div></pre></td><td class="code"><pre><div class="line">在客户进行https访问时，提交的信息与返回的信息都是通过session key进行对称加密的。</div><div class="line"> </div><div class="line">session key需要客户端与服务端协商产生，这个过程就是握手。</div><div class="line"></div><div class="line">握手的过程是确保primary-master-key的安全性，客户端产生的随机数由服务端提供的公钥加密，服务端通过私钥解密。</div><div class="line"></div><div class="line">如何保证信息没有篡改，对端没有被顶替呢？</div><div class="line">公钥包含在可信的数字证书中，由CA颁发，用来保证对端可信。</div><div class="line">未被篡改是通过hash值校验进行的。</div></pre></td></tr></table></figure>
<p>2.openssl heartbleeding</p>
<pre><code>openssl实现库的漏洞，危机使用openssl开源库的各个服务器提供者。
openssl的心跳机制可以被恶意利用，能够访问到服务器的内存。内存值会包含很多敏感信息，最恐怖的是包含服务器的私钥。。。。
</code></pre><p>3.参考资料</p>
<p>【1】<a href="http://www.ruanyifeng.com/blog/2014/02/ssl_tls.html" target="_blank" rel="external">SSL/TLS协议运行机制的概述</a><br>【2】<a href="http://www.ruanyifeng.com/blog/2014/09/illustration-ssl.html" target="_blank" rel="external">图解SSL/TLS协议</a><br>【3】<a href="http://my.oschina.net/shede333/blog/359290?fromerr=SaiQBPtv" target="_blank" rel="external">Https总结理解</a></p>
</div></article></div></section><footer><div class="paginator"><a href="/2016/01/20/Git server/" class="prev">上一篇</a><a href="/2015/11/20/Webservice/" class="next">下一篇</a></div><div class="copyright"><p>© 2015 - 2016 <a href="http://lpbobo.com">fish·nut</a>, powered by <a href="https://hexo.io/" target="_blank">Hexo</a> and <a href="https://github.com/pinggod/hexo-theme-apollo" target="_blank">hexo-theme-apollo</a>.</p><p><span>友情链接</span>: • <a href="http://blog.csdn.net/sum__mer">sum__mer </a> • <a href="http://www.rudy-yuan.net">rudy-yuan </a> • <a href="http://elvin.im">花花世界 </a></p></div></footer></div><script async src="//cdn.bootcss.com/mathjax/2.6.1/MathJax.js?config=TeX-MML-AM_CHTML"></script></body></html>