5. NetCert6.1 ..................................................
4
6. IE 800… .......................................... 6
7. NetCert MySQL
.................................................................................
7
8. id
..............................................................................................
7
9. oracle V6.1CAKMC ............................................
7
10.
.................................................................................................
7
13. NetCert-KMC6.1 CA ................................. 18
14.
...............................................................................................
18
16. 613902011
...............................................................
19
18. OCSPclient ,internalError
......................................................................
21
.........................................................................................................................
21
21. SM1 KMC CA6.2 CAAdmin
...................................................................................................
24
23. CA ................................................. 25
24. CA6.2 CA CA KMC RA ......... 25
25. ca5.5 dn .....................................................
25
NetCertRA
................................................................................................................
26
4. Demo6.1 linux tomcat .................... 28
5. RA
...............................................................
28
10. RA6.1 -10054
................................................... 34
11. -10029
...............................................................................................
37
14. sm2 61990104................................. 38
15. oracle , ............................................ 39
16. 61380212 ................................ 39
17. RA
................................................................
39
18. KEY KEY
...................................................................
39
19. RA6.2 RSA ...................................... 40
.......................................................................................................................
40
2. CA
.....................................................................................
41
4. RA 130013kmc ......................... 41
5. HSM[ SJJ1507] NOT support ...............................
42
6. RA
......................................................................................
42
pa
license
cassl.jks p10 p10
cassl.jks ca
2. CA
CA PA CA_SSL 10
(2)PA CA CAadmin PA
CA_SSL PA CAadmin PA
CA_SSL CA CAadmin PA
CA_SSL PA CAadmin
SECURE_communication Keytool
P10 PA CA_SSL P10
store.jis storejks cert ssl.jks caserver.xml
ssl.jkss jks caserrver.jks CA
3. OCSP
OCSP
CA6.1 keyLDAP
key LDAP
SJJ1115 B Oracle10g/11g ArgusKey300 Auto Novell
SJJ0929 Sybase V15.0.3 ArgusKey100 Auto OpenLDAP
SJJ1308 MariaDB 10.0
SJY42C key
SJJ1310 key
SHJ0901 A/B key
SHJ0901-C key
key 3
ArgusKey300 Auto
ArgusKey100 Auto CA
ArguSec
CERTTYPENAME='ee_sign'
standalone="yes"
?><certtemplate><base><certificateversion>3</certificateve
rsion>
ycanb
th>1024
nsions>< level1extensions><extension name="KEY USAGE"
OID="2.5.29.15"
iscritical="false"><entry name="DIGITALSIGNATURE"
value="true" /><entry
name="NONREPUDIATION" value="true"
/></extension><extension
name="BASIC CONSTRAINTS" OID="2.5.29.19"
iscritical="false"><entry
name="ISCA" value="false"
name="ID_KP_EMAILPROTECTION" value="true" />
</extension><extension
name="CRL DISTRIBUTION POINTS" OID="2.5.29.31"
iscritical="false"><point type="DIR"
appendsysbasedn="true"
basecdp="cn=crl*,ou=crl"
/></extension><extension name="NETSCAPECERTTYPE"
/></extension></level1extensions><level3extensions><allowappend>false</al
lowap
<certpu
publi
ish><
update CA_CERTTEMPLATE set CERTTEMPLATE='
Xml
CERTTEMPLATE …->
xml ->->
plsql -> F10
CERTTYPENAME=''
CA_CERTTEMPLATE ISUSED
0 ca caAdmin PA
CA
MySQL
CA5.5 MySQL 6.1 cakmc mariaDB
mariaDB MySQL
8. id
id
9. oracle V6.1CAKMC
V6.1 CAKMC ojdbc14.jar Oracle10.2 Oracle11g
oracle12C ojdbc6.jar
V6.1 CA KMC Oracle10.1 Oracle
CSP Microsoft Base Cryptographic Provider v1.0
CA
2
64 IE 64 IE
IE 64
window iexplore.exe 32 IE
32 IE
SSL server requires client certificate
-
2 chrome
chrome google chrome-
4 chrome
chrome
CA
11. CA
/lib/ld-linux-x86-64.so.2: bad ELF interpreter: No such file or
directory
yum
[local_server]
name=This is a local repo baseurl=file:///mnt enabled=1
gpgcheck=0
2
CA systemctl stop firewalld
swsds.ini etc
#SWXA
logfile=swsds.log maxsize=10 [HSM1]
ip=36.33.225.190
[ConnectionPool] PoolSize=5
3CA
db2 "create bufferpool BP_16K size 5000 pagesize 16 K"
CA
schemaUser Schema
Schema
Schema
BO:ee_sign
SECURE_COMM
license
hostname /etc/hosts
license
SHA256withRSA 12345678 ./ 1234567812345678
SM3withSM2 12345678 ./ 1234567812345678
7RA
RA
8RA
RA CA SubCA_BA BO CAAdmin
RA ee_sign advance
10 CA
CA
bank‘’’ ca
jsp
Ca ca
Ca ca
AUTCAINO
12RA
RA
MYSQL
decimal
KMCServer6.1.003.3_linux CA
KMC
select * from AUTHCA_INFO
'
16. 613902011
secure_comm secure_comm_enc
17. LDAP 0
openldap LDAP O CN CA
18. OCSPclient ,internalError
)
19. Table_SELFINFO doesn‘t existSELFINFO
MySQL
CA 22345 debug
CA tomcat
CA cert cassl.jks
cassl.jks
CA caadmin ca
21. SM1 KMC CA6.2 CAAdmin
CAAdmin
AlgorithmEnc=SM4 SM1
2020Q3
23. CA
oracle 2020Q4
24. CA6.2 CA CA KMC RA
KMC RA 2020Q4
25. ca5.5 dn
firstpa caadmin DN DN
2020Q4
NetCertRA
SM2 id SM2id.conf
RA
sm2id.conf
server lib /opt/IBM/WebSphere_32/profiles/AppSrv01/lib
Tomcat tomcat bin lib
NetCertRAServer5.5
Struts
CVE-2017-5638
-spring-plugin-2.3.28.1.jarxwork-core-2.3.28.1.jarognl-3.0.14.jar
comm
ons-fileupload-1.2.1.jar jar lib
CBRCRA_6.1.001.6-CBRCRA_6.1.001.7
WEB-INF\lib struts2-core-2.3.28.1.jar
struts2-spring-plugin-2.3.28.1.jarxwork-core-2.3.28.1.jarognl-3.0.14.jar
struts2-spring-plugin-2.3.15.1.jarxwork-core-2.3.15.1.jarognl-3.0.6.jar
UTF8
tomcat
linux UTF8 zh_CN.GBK
PC
netsign.properties
RSA
netsign.properties nsSignMode = 3 1
1 rsa 2 3 rsa 4
CA 22345 debug
CA tomcat
CA cert cassl.jks
cassl.jks
CA caadmin ca
CA RA CA RA
config.xml CA CA
CommunicationsRA6.1.003.6
mysql
[mysqld] lower_case_table_names=1 0:
;1:
#
http://dev.mysql.com/doc/refman/5.7/en/server-configuration-defaults.html
[mysqld] #
# Remove leading # and set to the amount of RAM for the most
important data
# cache in MySQL. Start at 70% of total RAM for dedicated server,
else 10%. #
innodb_buffer_pool_size = 128M
#
# Remove leading # to turn on a very important data integrity
option: logging #
changes to the binary log between backups.
# log_bin #
# Remove leading # to set options mainly useful for reporting
servers. # The
server defaults are faster for transactions and fast SELECTs.
# Adjust sizes as needed, experiment to find the optimal values.
#
join_buffer_size = 128M
# sort_buffer_size = 2M
symbolic-links=0
log-error=/var/log/mysqld.log
11. -10029
KEY
genCSR.sh p10 rads.csrrads.jks p10
CAAdmin
15. oracle ,
linux
ssl_server
18. KEY KEY
19. RA6.2 RSA
6.1.003.3_(WST) KMC Server 6.1.003.3
meWork_6.1.003.3 kmc server
ServerFrameWork jar
3. CA RA
x1000039
4. RA 130013kmc
5. HSM[ SJJ1507] NOT support
tacipher.ini tomcat/bin
libSDF_SJJ1507.so /home/nativelib ,
/etc/profile
/genCSR.sh "cn=ra,c=cn" SJJ1507 10 2048 SHA256withRSA
11111111 ./ ()
7. CA6.2
NetCertFAQ
5. NetCert6.1
7. NetCert MySQL
8. id
10.
2
12RA
20. CA
21. SM1KMCCA6.2CAAdmin
10. RA6.1-10054
11. -10029
14. sm261990104
17. RA
18. KEYKEY
2. CA
5. HSM[SJJ1507] NOT support
6. RA
7. CA6.2