N46期第八周作业

1、对称加密过程由哪三部分组成

2、使用 openssl 中的 aes 对称加密算法对文件 file.txt 进行加密，然后解密

openssl enc -e -aes-256-cbc -in file.txt -out file.enc
openssl enc -d -aes-256-cbc -in file.enc -out file.txt

3、搭建CA和申请证书

mkdir /etc/pki/CA/{certs,crl,newcerts,private} -pv

touch /etc/pki/CA/index.txt

echo 0F > /etc/pki/CA/serial

(umask 066; openssl genrsa -out private/cakey.pem 2048)

openssl req -new -x509 -key /etc/pki/CA/private/cakey.pem -days 3650 -out /etc/pki/CA/cacert.pem

(umask 066 ; openssl genrsa -out app.key 2048)

openssl req -new -key /root/app.key -days 300 -out /root/app.csr

scp app.csr root@10.0.0.8:/tmp

openssl ca -in /tmp/app.csr -out /tmp/app.crt -days 300

scp certs/10.0.0.6httpd.pem root@10.0.0.6:/tmp

4、使用脚本实现多个用户key验证免密登录

#!/bin/bash

NET=10.0.0

PASS=david

ssh-keygen -P "" -f /root/.ssh/id_rsa &> /dev/null

rpm -q sshpass &> /dev/null || yum -y install sshpass &> /dev/null

for i in {1..100}; do

{ 

sshpass -p $PASS ssh-copy-id -o StrictHostKeyChecking=no -i

/root/.ssh/id_rsa.pub $NET.$i &> /dev/null

} &

done

wait