{"id":207200,"date":"2025-07-08T09:23:30","date_gmt":"2025-07-08T01:23:30","guid":{"rendered":"https:\/\/server.hk\/cnblog\/207200\/"},"modified":"2025-07-08T09:23:30","modified_gmt":"2025-07-08T01:23:30","slug":"%e4%bd%bf%e7%94%a8-golang-%e5%a6%82%e4%bd%95%e7%94%9f%e6%88%90-rsa-%e8%af%81%e4%b9%a6%ef%bc%8c%e7%84%b6%e5%90%8e%e5%b0%86%e7%a7%81%e9%92%a5%e5%af%bc%e5%87%ba%e5%88%b0-pfx-%e6%96%87%e4%bb%b6%ef%bc%8c","status":"publish","type":"post","link":"https:\/\/server.hk\/cnblog\/207200\/","title":{"rendered":"\u4f7f\u7528 golang \u5982\u4f55\u751f\u6210 rsa \u8bc1\u4e66\uff0c\u7136\u540e\u5c06\u79c1\u94a5\u5bfc\u51fa\u5230 pfx \u6587\u4ef6\uff0c\u5c06\u516c\u94a5\u5bfc\u51fa\u5230 cer \u6587\u4ef6"},"content":{"rendered":"

<\/b> <\/p>\n

\u5f53\u524d\u4f4d\u7f6e\uff1a ><\/span> ><\/span> ><\/span> ><\/span> \u4f7f\u7528 golang \u5982\u4f55\u751f\u6210 rsa \u8bc1\u4e66\uff0c\u7136\u540e\u5c06\u79c1\u94a5\u5bfc\u51fa\u5230 pfx \u6587\u4ef6\uff0c\u5c06\u516c\u94a5\u5bfc\u51fa\u5230 cer \u6587\u4ef6<\/span><\/p>\n

\u6765\u6e90\uff1astackoverflow<\/span>
\n2024-04-20 19:33:40<\/span>
\n<\/i>0\u6d4f\u89c8<\/span>
\n<\/i>\u6536\u85cf<\/span> <\/p>\n

\u4ece\u73b0\u5728\u5f00\u59cb\uff0c\u6211\u4eec\u8981\u52aa\u529b\u5b66\u4e60\u5566\uff01\u4eca\u5929\u6211\u7ed9\u5927\u5bb6\u5e26\u6765\u300a\u4f7f\u7528 golang \u5982\u4f55\u751f\u6210 rsa \u8bc1\u4e66\uff0c\u7136\u540e\u5c06\u79c1\u94a5\u5bfc\u51fa\u5230 pfx \u6587\u4ef6\uff0c\u5c06\u516c\u94a5\u5bfc\u51fa\u5230 cer \u6587\u4ef6\u300b<\/span>\uff0c\u611f\u5174\u8da3\u7684\u670b\u53cb\u8bf7\u7ee7\u7eed\u770b\u4e0b\u53bb\u5427\uff01\u4e0b\u6587\u4e2d\u7684\u5185\u5bb9\u6211\u4eec\u4e3b\u8981\u4f1a\u6d89\u53ca\u5230<\/span>\u7b49\u7b49\u77e5\u8bc6\u70b9\uff0c\u5982\u679c\u5728\u9605\u8bfb\u672c\u6587\u8fc7\u7a0b\u4e2d\u6709\u9047\u5230\u4e0d\u6e05\u695a\u7684\u5730\u65b9\uff0c\u6b22\u8fce\u7559\u8a00\u5440\uff01\u6211\u4eec\u4e00\u8d77\u8ba8\u8bba\uff0c\u4e00\u8d77\u5b66\u4e60\uff01<\/p>\n

\u95ee\u9898\u5185\u5bb9
\n <\/p>\n

\u6211\u60f3\u901a\u8fc7 golang \u751f\u6210\u4e00\u4e9b\u8bc1\u4e66\uff0c\u4f46\u9047\u5230\u4e86\u95ee\u9898\u3002<\/p>\n

\u5f53\u6211\u5728 php \u4e2d\u6267\u884c\u6b64\u64cd\u4f5c\u65f6\uff0c\u53ef\u80fd\u4f1a\u50cf\u8fd9\u4e9b\u4ee3\u7801\u4e00\u6837\uff1a<\/p>\n

$privkey = openssl_pkey_new([\n    'digest_alg' => 'des3',\n    'private_key_bits' => 1024,\n    'private_key_type' => openssl_keytype_rsa\n\n]);\n$csr = openssl_csr_new([\n    \"countryname\" => \"en\",\n    \"stateorprovincename\" => \"province\",\n    \"localityname\" => \"city\",\n    \"organizationname\" => \"org\",\n    \"organizationalunitname\" => \"org\",\n    \"commonname\" => \"name\",\n], $privkey, ['digest_alg' => 'des3']);\n\n$x509 = openssl_csr_sign($csr, null, $privkey, $days=3650, ['digest_alg' => 'des3']);\n\nopenssl_x509_export_to_file($x509, \"\/path\/to\/pub.cer\");\nopenssl_pkcs12_export_to_file($x509, \"\/path\/to\/pri.pfx\", $privkey, \"password\");\n<\/pre>\n
\u73b0\u5728\u4f7f\u7528 golang \u6211\u53ea\u80fd\u521b\u5efa\u79c1\u94a5\uff0c\u4f46\u4e0d\u77e5\u9053\u4e0b\u4e00\u6b65\u8be5\u600e\u4e48\u505a\u3002\u8bf7\u5e2e\u52a9\u6211\uff0c\u975e\u5e38\u611f\u8c22\u3002<\/p>\n
func main() {\n    keyBytes, err := rsa.GenerateKey(rand.Reader, bitSize)\n    if err != nil {\n        panic(err)\n    }\n    if err := keyBytes.Validate(); err != nil {\n        panic(err)\n    }\n    dn := pkix.Name{\n        Country:            []string{\"EN\"},\n        Organization:       []string{\"org\"},\n        OrganizationalUnit: []string{\"org\"},\n        Locality:           []string{\"city\"},\n        Province:           []string{\"province\"},\n        CommonName:         \"name\",\n    }\n    asn1Dn, err := asn1.Marshal(dn)\n    if err != nil {\n        panic(err)\n    }\n    template := x509.CertificateRequest{\n        Raw:                asn1Dn,\n        SignatureAlgorithm: x509.SHA256WithRSA,\n    }\n\n    csrBytes, err := x509.CreateCertificateRequest(rand.Reader, &template, keyBytes)\n    \/\/ how to do with csrBytes next?\n}\n<\/pre>\n
 <\/p>\n
\u89e3\u51b3\u65b9\u6848<\/h2>\n
 <\/p>\n
\u6700\u540e\u6211\u81ea\u5df1\u89e3\u51b3\u4e86\u8fd9\u4e2a\u95ee\u9898\u3002\u73b0\u5728\u6211\u5e94\u8be5\u4e3a\u5176\u4ed6\u9762\u4e34\u540c\u6837\u95ee\u9898\u7684\u4eba\u5199\u4e0b\u7b54\u6848\u3002<\/p>\n
\u89e3\u51b3\u65b9\u6848\u662f\u4f7f\u7528 \uff0c\u5b83\u63d0\u4f9b\u51fd\u6570 \u6765\u7f16\u7801\u4ece x509.createcertificate<\/code> \u521b\u5efa\u7684\u7ed9\u5b9a\u5b57\u8282\u6570\u636e\u3002<\/p>\n
\u770b\u4e0b\u9762\u7684\u793a\u4f8b\u4ee3\u7801\uff1a<\/p>\n
func main() {\n    keyBytes, err := rsa.GenerateKey(rand.Reader, 1024)\n\n    if err != nil {\n        panic(err)\n    }\n\n    if err := keyBytes.Validate(); err != nil {\n        panic(err)\n    }\n\n    template := &x509.Certificate{\n        SerialNumber: big.NewInt(1),\n        Subject: pkix.Name{\n            Country:            []string{\"EN\"},\n            Organization:       []string{\"org\"},\n            OrganizationalUnit: []string{\"org\"},\n            Locality:           []string{\"city\"},\n            Province:           []string{\"province\"},\n            CommonName:         \"name\",\n        },\n    }\n\n    derBytes, err := x509.CreateCertificate(rand.Reader, template, template, &keyBytes.PublicKey, keyBytes)\n\n    if err != nil {\n        panic(err)\n    }\n\n    cert, err := x509.ParseCertificate(derBytes)\n\n    if err != nil {\n        panic(err)\n    }\n\n    pfxBytes, err := pkcs12.Encode(rand.Reader, keyBytes, cert, []*x509.Certificate{}, pkcs12.DefaultPassword)\n\n    if err != nil {\n        panic(err)\n    }\n\n    \/\/ see if pfxBytes valid\n    _, _, _, err = pkcs12.DecodeChain(pfxBytes, pkcs12.DefaultPassword)\n    if err != nil {\n        panic(err)\n    }\n    if err := ioutil.WriteFile(\n        \"\/path\/to\/pri.pfx\",\n        pfxBytes,\n        os.ModePerm,\n    ); err != nil {\n        panic(err)\n    }\n}\n<\/pre>\n
\u5927\u5bb6\u53ef\u4ee5\u5728\u6211\u7684github\u4ed3\u5e93\u4e2d\u627e\u5230\u6e90\u4ee3\u7801<\/p>\n
\u672c\u7bc7\u5173\u4e8e\u300a\u4f7f\u7528 golang \u5982\u4f55\u751f\u6210 rsa \u8bc1\u4e66\uff0c\u7136\u540e\u5c06\u79c1\u94a5\u5bfc\u51fa\u5230 pfx \u6587\u4ef6\uff0c\u5c06\u516c\u94a5\u5bfc\u51fa\u5230 cer \u6587\u4ef6\u300b\u7684\u4ecb\u7ecd\u5c31\u5230\u6b64\u7ed3\u675f\u5566\uff0c\u4f46\u662f\u5b66\u65e0\u6b62\u5883\uff0c\u60f3\u8981\u4e86\u89e3\u5b66\u4e60\u66f4\u591a\u5173\u4e8eGolang\u7684\u76f8\u5173\u77e5\u8bc6\uff0c\u8bf7\u5173\u6ce8\u516c\u4f17\u53f7\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5f53\u524d\u4f4d\u7f6e\uff1a > > ...<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4925],"tags":[],"class_list":["post-207200","post","type-post","status-publish","format-standard","hentry","category-4925"],"_links":{"self":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts\/207200","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/comments?post=207200"}],"version-history":[{"count":0,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts\/207200\/revisions"}],"wp:attachment":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/media?parent=207200"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/categories?post=207200"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/tags?post=207200"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}