User avatar Bstran

Translation changed
* Generate a Server CSR:
* Generate a Server CSR:生成服务器证书签名请求（CSR）：
06/13/2026
User avatar Bstran

Translation changed
``` openssl req -new -newkey rsa:4096 -keyout ca.key -x509 -out ca.crt -subj "/CN=localhost" -days 365 ```
``` openssl req -new -newkey rsa:4096 -keyout ca.key -x509 -out ca.crt -subj "/CN=localhost" -days 365 ```
06/13/2026
User avatar Bstran

Translation changed
* Generate a CA certificate:
* Generate a CA certificate:生成 CA 证书：
06/13/2026
User avatar Bstran

Translation changed
In the following example, we will generate a self-signed CA certificate and use it to issue both server and client certificates.
In the following example, we will generate a self-signed CA certificate and use it to issue both server and client certificates.在以下示例中，将生成一个自签名的 CA 证书，并使用该证书来签发服务器证书和客户端证书。
06/13/2026
User avatar Bstran

Translation changed
A Self-Issued Certificate Example
A Self-Issued Certificate Example自颁发证书示例
06/13/2026
User avatar Bstran

Translation changed
If no DH parameter is provided, OpenSSL will refuse to perform any handshake that uses DHE-based cipher suites but will still work with other cipher suites, such as those based on ECDHE.
If no DH parameter is provided, OpenSSL will refuse to perform any handshake that uses DHE-based cipher suites but will still work with other cipher suites, such as those based on ECDHE.如果未提供 DH 参数，OpenSSL 将拒绝执行任何使用基于 DHE 的加密套件的握手，但仍可与其他加密套件（例如基于 ECDHE 的套件）正常工作。
06/13/2026
User avatar Bstran

Translation changed
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_tmp_dh.html `net::ssl::context::use_tmp_dh`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_tmp_dh_file.html `net::ssl::context::use_tmp_dh_file`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_tmp_dh.html `net::ssl::context::use_tmp_dh`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_tmp_dh_file.html `net::ssl::context::use_tmp_dh_file`]
06/13/2026
User avatar Bstran

Translation changed
The following Boost.Asio methods can be used for loading DH parameters:
The following Boost.Asio methods can be used for loading DH parameters:以下 Boost.Asio 方法可用于加载 DH 参数：
06/13/2026
User avatar Bstran

Translation changed
Diffie-Hellman (DH) key exchange is a cryptographic protocol that allows two parties to securely establish a shared secret over an insecure communication channel. The key exchange process involves both parties agreeing on a set of parameters, known as Diffie-Hellman parameters, which include a large prime number `p` and a generator `g`. Since generating these parameters is a computationally expensive task, a user might prefer to provide a precomputed value at startup.
Diffie-Hellman (DH) key exchange is a cryptographic protocol that allows two parties to securely establish a shared secret over an insecure communication channel. The key exchange process involves both parties agreeing on a set of parameters, known as Diffie-Hellman parameters, which include a large prime number `p` and a generator `g`. Since generating these parameters is a computationally expensive task, a user might prefer to provide a precomputed value at startup.（DH）密钥交换是一种密码学协议，允许双方在不安全的通信通道上安全地建立共享密钥。该密钥交换过程涉及双方约定一组参数，即 Diffie-Hellman 参数，其中包括一个大素数 `p` 和一个生成元 `g`。由于生成这些参数是一项计算开销较大的任务，用户可能更倾向于在启动时提供预先计算好的值。
06/13/2026
User avatar Bstran

Translation changed
Diffie-Hellman (DH) Parameters
Diffie-Hellman (DH) Parameters（DH）参数
06/13/2026
User avatar Bstran

Translation changed
Installing an untrusted, self-issued, or self-signed CA certificate poses a
Installing an untrusted, self-issued, or self-signed CA certificate poses a安装不受信任、自颁发或自签名的 CA 证书会带来安全风险。
06/13/2026
User avatar Bstran

Translation changed
A self-signed certificate is a self-issued certificate in which the digital signature can be verified using the public key within the certificate.
A self-signed certificate is a self-issued certificate in which the digital signature can be verified using the public key within the certificate.自签名证书是一种自颁发证书，其数字签名可使用证书内的公钥进行验证。
06/13/2026
User avatar Bstran

Translation changed
A self-issued certificate is a certificate where the issuer and subject are the same entity.
A self-issued certificate is a certificate where the issuer and subject are the same entity.自颁发证书是指证书的颁发者与主体为同一实体。
06/13/2026
User avatar Bstran

Translation changed
Self-Signed and Self-Issued Certificates
Self-Signed and Self-Issued Certificates自签名证书与自颁发证书
06/13/2026
User avatar Bstran

Translation changed
If the private key is secured with a password, the [@boost:/doc/html/boost_asio/reference/ssl__context/set_password_callback.html net::ssl::context::set_password_callback] allows specifying a callable object to retrieve the password.
If the private key is secured with a password, the如果私钥受密码保护，可以使用 [@boost:/doc/html/boost_asio/reference/ssl__context/set_password_callback.html net::ssl::context::set_password_callback] allows specifying a callable object to retrieve the password.设置一个可调用对象，用于获取该密码。
06/13/2026
User avatar Bstran

Translation changed
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_private_key.html `net::ssl::context::use_private_key`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_private_key_file.html `net::ssl::context::use_private_key_file`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_rsa_private_key.html `net::ssl::context::use_rsa_private_key`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_rsa_private_key_file.html `net::ssl::context::use_rsa_private_key_file`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_private_key.html `net::ssl::context::use_private_key`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_private_key_file.html `net::ssl::context::use_private_key_file`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_rsa_private_key.html `net::ssl::context::use_rsa_private_key`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_rsa_private_key_file.html `net::ssl::context::use_rsa_private_key_file`]
06/13/2026
User avatar Bstran

Translation changed
The following Boost.Asio methods can be used for loading a private key:
The following Boost.Asio methods can be used for loading a private key:以下 Boost.Asio 方法可用于加载私钥：
06/13/2026
User avatar Bstran

Translation changed
The private key of a certificate is required during the SSL/TLS handshake to prove that the certificate's provider is its rightful owner
The private key of a certificate is required during the SSL/TLS handshake to prove that the certificate's provider is its rightful owner证书的私钥在 SSL/TLS 握手过程中是必需的，用于证明证书的提供方是该证书的合法所有者。
06/13/2026
User avatar Bstran

Translation changed
Private Key
Private Key私钥
06/13/2026
User avatar Bstran

Translation changed
recommends that if a certificate includes a SAN dNSName field, the client must ignore the subject CN field. Some modern browsers, such as Google Chrome, check only the SAN section in an SSL/TLS certificate and reject certificates that contain only the CN field.
recommends that if a certificate includes a该建议指出，如果证书中包含 SAN 的 dNSName field, the client must ignore the subject CN field. Some modern browsers, such as Google Chrome, check only the SAN section in an SSL/TLS certificate and reject certificates that contain only the CN field.字段，客户端必须忽略主题 CN 字段。某些现代浏览器（例如 Google Chrome）仅检查 SSL/TLS 证书中的 SAN 部分，并拒绝仅包含 CN 字段的证书。
06/13/2026

Search