Thread [Crypt::LE] Frage zu request_certificate() (40 answers)
Opened by bianca at 2018-05-17 10:27

bianca
 2018-05-17 20:02
#188387 #188387
User since
2009-09-13
7016 Artikel
BenutzerIn

user image
2018-05-17T17:33:54 GwenDragon
Ah, also Zertifikate?

Ja. Habe ich mich falsch ausgedrückt?

2018-05-17T17:33:54 GwenDragon
Wenn dann oben drin steht sowas wie
-----BEGIN CERTIFICATE-----
...
(einige BASE64-kodierte Zeilen)
...
-----END CERTIFICATE-----
drin ist.

Ja das steht drin aber die Zeilen sind nicht 64 Zeichen lang sondern 76 Zeichen.
Ist das OK oder vlt. der Grund für die Apache Meldung?

2018-05-17T17:33:54 GwenDragon
Oder zusätzlich
-----BEGIN CERTIFICATE REQUEST-----
...
...

Nein, das ist eine andere Datei.

2018-05-17T17:33:54 GwenDragon
-----BEGIN PRIVATE KEY-----

Ja, das ist die key Datei und darin sind die Zeilen auch wie erwartet 64 Zeichen.

2018-05-17T17:33:54 GwenDragon
Wenn du schauen willst was da im Zert definiert ist:
openssl x509 -in Zertifikatsdatei -text -noout


Code: (dl )
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fa:a0:84:13:9f:ec:81:32:91:d7:a9:2b:aa:62:bd:d9:78:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Fake LE Intermediate X1
        Validity
            Not Before: May 17 07:06:06 2018 GMT
            Not After : Aug 15 07:06:06 2018 GMT
        Subject: CN=meine.domain.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d8:a4:6f:00:41:04:b4:74:29:b2:ee:d5:49:e8:
                    4c:42:67:13:07:2e:95:84:de:af:d0:0b:ce:b4:95:
                    03:ec:82:b8:f0:c9:68:ef:5b:61:6c:de:38:8b:63:
.
.
.
                    91:44:b0:e5:cd:b7:8d:ee:b3:9f:d3:15:c1:5e:de:
                    3a:f4:44:25:2f:f3:ff:70:db:70:aa:4c:ee:ce:67:
                    25:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                A3:FD:D1:67:33:19:B2:62:68:C2:26:BC:51:8C:D7:20:50:97:A9:F4
            X509v3 Authority Key Identifier: 
                keyid:C0:CC:03:46:B9:58:20:CC:5C:72:70:F3:E1:2E:CB:20:A6:F5:68:3A

            Authority Information Access: 
                OCSP - URI:http://ocsp.stg-int-x1.letsencrypt.org
                CA Issuers - URI:http://cert.stg-int-x1.letsencrypt.org/

            X509v3 Subject Alternative Name: 
                DNS:meine.domain.net
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.44947.1.1.1
                  CPS: http://cps.letsencrypt.org
                  User Notice:
                    Explicit Text: This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/

            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1(0)
                    Log ID    : B0:CC:83:E5:A5:F9:7D:6B:AF:7C:09:CC:28:49:04:87:
                                2A:C7:E8:8B:13:2C:63:50:B7:C6:FD:26:E1:6C:6C:77
                    Timestamp : May 17 08:06:06.370 2018 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:27:C7:BC:B5:25:EE:65:66:E0:34:5F:61:
                                7B:6C:06:FF:BC:80:55:AF:CE:90:7B:5D:A1:44:2A:71:
                                95:F8:48:17:02:21:00:97:DA:C0:53:45:0A:B4:13:EE:
                                B7:E7:E6:02:0F:6B:98:96:11:67:D4:36:C9:3A:8F:B8:
                                A8:C1:A7:9A:C7:85:00
                Signed Certificate Timestamp:
                    Version   : v1(0)
                    Log ID    : DD:99:34:FC:A5:E7:24:80:C9:56:68:7D:81:34:99:08:
                                49:B2:49:F7:B5:69:D8:C7:BC:AB:3F:5C:C1:F3:6E:64
                    Timestamp : May 17 08:06:08.274 2018 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:18:02:ED:C6:C0:78:76:69:7D:B5:D6:FD:
                                FC:BA:56:52:01:CC:FE:C6:09:E8:6F:1A:2C:69:0E:80:
                                6F:FE:02:55:02:21:00:FF:62:4D:48:E6:6C:A1:37:8D:
                                C0:2F:C3:04:8A:25:8D:00:18:F8:97:A8:FA:F4:3F:E4:
                                04:56:A5:8F:0D:D1:AD
    Signature Algorithm: sha256WithRSAEncryption
         c7:ba:99:03:df:82:f2:88:5c:4e:8a:12:e5:25:b6:36:51:30:
         ff:7f:34:cd:b0:48:34:f8:14:56:cc:9a:f1:98:63:df:68:29:
.
.
.
         35:fa:72:45:77:5d:3a:9b:81:57:aa:3d:f5:65:b1:5c:37:d0:
         4e:ef:5a:b4:04:bd:d7:35:5e:9a:2b:47:32:a2:27:e5:7d:8d:
         74:93:11:ab

Ist gekürzt und die Domain escapet.
Ist das OK?
10 print "Hallo"
20 goto 10

View full thread [Crypt::LE] Frage zu request_certificate()