关于证书 秘钥等的简单不系统的理解

1. linux生成秘钥的命令

ssh-keygen

2. 实现无秘钥共享登录的命令

ssh-copy-id 10.24.103.1

3. 设置完之后 就会出现known_hosts 列表 ssh 就可以直接登录了

root@ubuntu16:~/.ssh# ssh 10.24.34.1
Last login: Tue May 22 09:17:53 2018 from 10.72.143.153
[root@db-test01 ~]# 

4. 证书文件的说明 openssl 可以生成 秘钥 生成证书 生成公钥等信息,主要说明:

1. der 是秘钥或者是证书的存放格式之一, der是二进制格式存放的.
2. cer、crt是证书的后缀名，其中cer 是微软平台的后缀，crt是linux平台的后缀
3. csr： certificates signing request 证书签名申请，一般是用来通过私钥来生成证书用的 包含comman name还有域名以及国家地址等信息。
4. pem： 一种存放格式，一般是base64存放，一般用来存放证书，或者是私钥，但是可能同时存放证书和私钥。如果是密钥 会议 begin private key 开头来进行显示。
5. key： 密钥的后缀名，一般只存放密钥 需要自己存放。
6. pub： 公钥的后缀名，一般存在与证书中，可以用来进行公钥加密，然后自己私钥解密进行处理。

5. 查看证书内容的命令

 openssl x509  -in ca.crt -text

6. 自己的一个kubeadm的证书信息。。

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 0 (0x0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=kubernetes
        Validity
            Not Before: May 19 06:00:14 2018 GMT
            Not After : May 16 06:00:14 2028 GMT
        Subject: CN=kubernetes
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:5e:8b:c0:6f:f2:68:e8:89:fc:8f:bd:61:
                    d3:8a:90:06:cd:2d:70:ad:4e:ba:bb:fb:f5:73:a5:
                    15:0c:46:89:02:53:56:ae:3f:50:15:31:33:3c:68:
                    89:08:21:d2:38:ef:9a:2e:ce:75:cd:95:4c:d7:6e:
                    99:93:a7:ff:e7:0f:bb:65:9d:53:5c:c6:36:4a:0d:
                    db:15:7f:85:2b:5c:cb:84:5a:6f:80:31:d3:ec:77:
                    b0:a2:82:11:c5:e2:c9:57:9b:32:79:ef:ea:ce:4e:
                    7b:6f:6e:23:f8:40:f9:6d:55:b6:7c:c6:d6:b6:63:
                    8b:bc:91:8f:a9:d9:3d:fb:2e:5e:77:7b:94:f8:05:
                    54:54:e5:32:58:b5:d5:49:2d:c8:45:fc:90:b5:be:
                    e8:92:f2:ca:73:98:16:0b:97:f2:98:ee:8f:01:f9:
                    95:e6:24:e0:69:49:58:21:79:32:db:34:7a:f4:59:
                    2d:42:d8:5d:30:7f:cf:8e:83:ff:31:2e:1f:5b:08:
                    77:29:4b:64:d5:3b:8c:f3:41:f8:a5:75:13:45:66:
                    79:57:68:94:c5:73:db:c2:1f:62:61:21:19:02:0c:
                    de:e2:5c:30:4e:1e:63:54:41:51:35:f5:4e:5b:78:
                    35:c2:c9:cf:64:82:a1:fa:39:0c:c4:77:95:0e:c2:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         60:65:01:c8:e8:f2:3c:77:0c:a8:3e:bb:e1:cf:3b:ac:20:c1:
         7d:37:9c:7f:6b:b3:6d:04:6f:8a:57:89:49:11:26:a3:e2:0a:
         43:b3:62:7a:9a:62:e2:a3:30:5f:05:a1:e5:05:79:b8:75:f8:
         2a:6e:85:5e:52:1c:f6:18:97:e4:3f:0f:ec:6d:2d:ce:5e:e1:
         48:74:57:31:6b:e7:56:cb:5f:bb:50:a8:c8:73:a9:96:78:b3:
         81:d4:98:71:54:ae:b4:4e:76:5e:c1:82:71:50:61:f1:05:15:
         32:5e:f4:00:df:f1:ed:0f:58:00:90:59:ea:e8:3e:33:b4:57:
         af:ac:85:2b:a2:7d:02:e8:63:9e:7e:54:31:b3:8e:a3:59:ca:
         34:46:4f:d0:20:3c:f2:2d:ee:4f:2e:1c:db:62:00:33:7d:68:
         75:26:ee:d9:06:c5:ee:07:2f:aa:ac:27:0f:6d:84:c0:ae:e4:
         6c:28:97:5c:cb:c3:ed:fa:4e:fe:2d:6f:67:d9:56:d4:3a:5a:
         31:f1:10:02:75:45:8a:56:85:22:a5:57:38:d0:e5:95:72:12:
         1f:a1:ea:cf:cc:5c:63:e6:12:74:61:dd:4d:a1:e9:be:dc:31:
         24:3c:20:f7:75:78:bd:7d:26:9e:6e:be:ce:ee:8e:92:37:8c:
         fb:ee:21:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----