User avatar Bstran

Translation changed
You can test the server using this cURL command:
You can test the server using this cURL command:可以使用以下 cURL 命令测试该服务器：
06/13/2026
User avatar Bstran

Translation changed
Note that the server is configured in such a way that it requests and verifies the client certificate. You can disable this by commenting out the related line in the example.
Note that the server is configured in such a way that it requests and verifies the client certificate. You can disable this by commenting out the related line in the example.注意，该服务器的配置方式要求对客户端证书进行请求和验证。如果需要禁用此功能，可以注释掉示例中的相关代码行。
06/13/2026
User avatar Bstran

Translation changed
Server example: [path_link example/doc/ssl/server.cpp server.cpp]
Server example: 服务器端示例：[path_link example/doc/ssl/server.cpp server.cpp]
06/13/2026
User avatar Bstran

Translation changed
``` openssl dhparam -out dh4096.pem 4096 ```
``` openssl dhparam -out dh4096.pem 4096 ```
06/13/2026
User avatar Bstran

Translation changed
* Generate a DH parameters file:
* Generate a DH parameters file:生成 DH 参数文件：
06/13/2026
User avatar Bstran

Translation changed
``` openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -days 365 -out client.crt ```
``` openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -days 365 -out client.crt ```
06/13/2026
User avatar Bstran

Translation changed
* Sign the Client CSR using our CA:
* Sign the Client CSR using our CA:使用 CA 对客户端 CSR 进行签名：
06/13/2026
User avatar Bstran

Translation changed
* Sign the Client CSR using our CA:
* Sign the Client CSR using our CA:
06/13/2026
User avatar Bstran

Translation changed
``` openssl req -new -newkey rsa:4096 -keyout client.key -out client.csr -subj "/CN=client.1" ```
``` openssl req -new -newkey rsa:4096 -keyout client.key -out client.csr -subj "/CN=client.1" ```
06/13/2026
User avatar Bstran

Translation changed
* Generate a Client CSR:
* Generate a Client CSR:生成客户端证书签名请求（CSR）：
06/13/2026
User avatar Bstran

Translation changed
``` openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -copy_extensions copy -days 365 -out server.crt ```
``` openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -copy_extensions copy -days 365 -out server.crt ```
06/13/2026
User avatar Bstran

Translation changed
* Sign the Server CSR using our CA:
* Sign the Server CSR using our CA:
06/13/2026
User avatar Bstran

Translation changed
``` openssl req -new -newkey rsa:4096 -keyout server.key -out server.csr -subj "/CN=localhost" -addext "subjectAltName=DNS:localhost,IP:127.0.0.1" ```
``` openssl req -new -newkey rsa:4096 -keyout server.key -out server.csr -subj "/CN=localhost" -addext "subjectAltName=DNS:localhost,IP:127.0.0.1" ```
06/13/2026
User avatar Bstran

Translation changed
* Generate a Server CSR:
* Generate a Server CSR:生成服务器证书签名请求（CSR）：
06/13/2026
User avatar Bstran

Translation changed
``` openssl req -new -newkey rsa:4096 -keyout ca.key -x509 -out ca.crt -subj "/CN=localhost" -days 365 ```
``` openssl req -new -newkey rsa:4096 -keyout ca.key -x509 -out ca.crt -subj "/CN=localhost" -days 365 ```
06/13/2026
User avatar Bstran

Translation changed
* Generate a CA certificate:
* Generate a CA certificate:生成 CA 证书：
06/13/2026
User avatar Bstran

Translation changed
In the following example, we will generate a self-signed CA certificate and use it to issue both server and client certificates.
In the following example, we will generate a self-signed CA certificate and use it to issue both server and client certificates.在以下示例中，将生成一个自签名的 CA 证书，并使用该证书来签发服务器证书和客户端证书。
06/13/2026
User avatar Bstran

Translation changed
A Self-Issued Certificate Example
A Self-Issued Certificate Example自颁发证书示例
06/13/2026
User avatar Bstran

Translation changed
If no DH parameter is provided, OpenSSL will refuse to perform any handshake that uses DHE-based cipher suites but will still work with other cipher suites, such as those based on ECDHE.
If no DH parameter is provided, OpenSSL will refuse to perform any handshake that uses DHE-based cipher suites but will still work with other cipher suites, such as those based on ECDHE.如果未提供 DH 参数，OpenSSL 将拒绝执行任何使用基于 DHE 的加密套件的握手，但仍可与其他加密套件（例如基于 ECDHE 的套件）正常工作。
06/13/2026
User avatar Bstran

Translation changed
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_tmp_dh.html `net::ssl::context::use_tmp_dh`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_tmp_dh_file.html `net::ssl::context::use_tmp_dh_file`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_tmp_dh.html `net::ssl::context::use_tmp_dh`]
* [@boost:/doc/html/boost_asio/reference/ssl__context/use_tmp_dh_file.html `net::ssl::context::use_tmp_dh_file`]
06/13/2026

Search