Faylka .csr weli waa codsi shahaado
Kala sooc codsiyada shahaadada, shahaadaha la bixiyay iyo furayaasha gaarka ah ka hor inta aadan u qoondayn faylalka habaynta TLS ee proxy.
server.csr badanaa waa codsi loo diro hay'adda shahaadada si ay shahaado u bixiso. U jeedinta ikhtiyaarka shahaadada proxy-ga xagga faylkaas ma dhammaystirto hawshaas.
Fiiri gudaha faylka PEM:
-----BEGIN CERTIFICATE REQUEST-----
-----BEGIN CERTIFICATE-----
-----BEGIN PRIVATE KEY-----Calaamadahani waxay qeexaan walxo kala duwan. Codsigu ma aha shahaado la bixiyay, furayaasha gaarka ahna ma aha. Magaca faylka u beddelashada .pem wax ka beddelin maayo midkoodna.
Dhegeystaha TLS ee aqoonsada proxy-ga, isticmaal shahaadada loo bixiyay magacaas proxy-ga iyo furaha u dhigma, sida habaynta u dukumentaysay. openssl req wuxuu baarayaa codsiyada shahaadada; openssl x509 wuxuu baarayaa shahaadaha. Isticmaal falanqeeyaha ku habboon walxaha aad haysato. Squid 6.13, isticmaal shahaadada la bixiyay iyo furaha u dhigma dhegeystaha TLS.
Shahaadada caadiga ah ee server-ka sidoo kale way ka duwan tahay CA loo isticmaalo dhexgalka la oggolaaday. Ma bixiso awood lagu saxeexo shahaadaha mareegaha aan xiriirka la lahayn.
Xaqiiji noocyada walxaha iyo isku-dhajinta furayaasha ka hor inta aadan baadhin hubinta magaca martigeliyaha ama gaaritaanka shabakadda. TLS ma isticmaali karo shahaado aan waligeed la soo bandhigin.