IndySSL - using certificate authentication - Client side issues [zz]

最新推荐文章于 2024-05-08 10:25:09 发布

原创

最新推荐文章于 2024-05-08 10:25:09 发布 · 1.1w 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#authentication #file #components #properties #ssl #server

本文档解释了如何在连接到需要证书认证的站点时使用证书认证。客户端使用Indy组件，服务器端可以是MS IIS或Apache等。我们将使用http协议作为示例，因为它很容易设置。主要内容包括证书格式转换、证书文件配置、Delphi应用示例及客户端验证策略。

This document explains how to use certificate authentication when connecting to a site that requires certificate authentication. We are using Indy components on the client side and some server (MS IIS, Apache, …) on the server side. In the example we will be using http protocol, cause it is very easy to set such an environment.
First of all we must get certificates and private keys for the client. Let's suppose that we got some private key/certificate pair from some Certificate Authority (like Verisign) and we have this listed in MS IE in Personal Certificates Store.

Task 1. Convert the certificate from MS format to PEM format used by OpenSSL

First we have to export the certificate, I don't write down but it is assumed that also private key is e