azure - Azure 网站的 Openssl 证书

Question

当我尝试将绑定(bind)添加到 ssl 证书时，出现错误。

错误:

Failed to add SSL binding. The certificate with thumbprint '877EC1DA24CD9D4713FD4107A83AC0EE5A4654E4' is invalid for SSL. The Enhanced Key Usage must be present and must contain Server Authentication (1.3.6.1.5.5.7.3.1).

下面是生成ssl的方法。

第 1 步

Create file domain.rs.txt

步骤 2

[req]
default_bits = 2048
prompt = no
default_md = sha256
req_extensions = req_ext
distinguished_name = dn

[ dn ]
C=DK
ST=Jutland
L=Haderslev
O=Justlearn ApS
OU=Haderslev
<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="53363e323a3f123737213620206e2736323e13392620273f3632213d7d303c3e" rel="noreferrer noopener nofollow">[email protected]</a>
CN = www.justlearn.rs

[ req_ext ]
subjectAltName = @alt_names

[ alt_names ]
DNS.1 = justlearn.rs
DNS.2 = www.justlearn.rs

第3步

openssl req -new -sha256 -nodes -out domain.rs.csr -newkey rsa:2048 -keyout domain.rs.key -config domain.rs.txt

第 4 步

openssl x509 -req -days 365 -in domain.rs.csr -signkey domain.rs.key -out domain.rs.crt

第5步

openssl pkcs12 -export -in domain.rs.crt -inkey domain.rs.key -out mycert.pfx

Answer 1

使用 XCA 创建您的证书。然后在 key 使用选项卡中确保选择“TLS Web 服务器身份验证”选项。检查也很关键。 enter image description here

之后您需要导出您的证书和 key 。 enter image description here然后根据需要使用 OpenSsl 将 .crt 转换为 PFX。请参阅下面的命令。

pkcs12 -export -out C:\Certificate\BBBakingdecor.pfx -inkey 
C:\Certificate\bakingdecor.pem -in C:\Certificate\bakingdecor.crt