Mene ne fayil na PEM?

Yadda za a bude, gyara, da kuma canza fayilolin PEM

Fayil ɗin da ke da fayil na PEM yana mai amfani da asusun Fayil na Asiri wanda aka yi amfani dasu don watsawa imel. Mutumin da yake karɓar wannan imel na iya tabbatar da cewa ba a canza saƙo ba a yayin da aka watsa shi, ba a nuna shi ga wani ba, kuma wanda ya yi iƙirarin aika shi.

Tsarin PEM ya fito ne daga wahalar aika bayanai na binary ta hanyar imel. Tsarin PEM ya tsara binary tare da base64 don haka akwai wanzuwar ASCII.

An maye gurbin tsarin PEM da sababbin hanyoyin fasaha amma har yanzu ana amfani da akwati na PEM a yau don riƙe takardun izini na takardar shaidar, kullun jama'a da masu zaman kansu, takaddun shaida, da dai sauransu.

Lura: Wasu fayiloli a tsarin PEM zasuyi amfani da tsawo daban-daban na fayil, kamar CER ko CRT don takaddun shaida, ko KEY don maɓalli na jama'a ko masu zaman kansu.

Yadda zaka bude fayilolin PEM

Matakai na buɗe fayil ɗin PEM sun bambanta dangane da aikace-aikacen da ke buƙatar shi da tsarin aiki da kake amfani dasu. Duk da haka, kuna iya buƙatar fayil ɗin PEM zuwa CER ko CRT don wasu daga cikin waɗannan shirye-shiryen don karɓar fayil.

Windows

Idan kana buƙatar fayil na CER ko CRT a cikin imel ɗin imel na Microsoft kamar Outlook, bude shi a cikin Internet Explorer don a ɗora shi ta atomatik a cikin matattun bayanai. Mai imel na imel zai iya amfani da shi ta atomatik daga can.

Don ganin wace takaddun fayilolin da aka ɗora a kan kwamfutarka, da kuma shigo da su da hannu, amfani da menu na Intanit ta Intanet don samun damar Zaɓuɓɓukan Intanit> Abubuwan ciki> Takaddun shaida .

Don shigo da CER ko CRT fayil zuwa Windows, fara da bude Kwamfuta Console Microsoft daga Run maganganun maganganu (yi amfani da gajerar hanyar Windows Key + R don shigar da mmc ). Daga can, je zuwa Fayil> Ƙara / Cire Snap-in ... kuma zaɓi Takaddun shaida daga gefen hagu, sannan kuma Ƙara> button a cikin tsakiyar taga. Zaɓi asusun Kwamfuta a kan allon mai biyowa, sa'an nan kuma motsa ta wurin maye, zaɓan Kwamfuta na gida idan aka nema.

Da zarar "Takaddun shaida" aka ɗora a ƙarƙashin "Tushen Shafin Farko," fadada babban fayil da kuma danna-dama Amincewa Tabbatacciyar Hukumomin Hukumomin , kuma zaɓi Duk Ɗawainiya> Fitarwa ....

MacOS

Haka ka'idar ita ce gaskiya ga Mac ɗin imel na abokin ciniki kamar yadda yake don Windows daya; Yi amfani da Safari don samun fayil ɗin PEM shigo da shi zuwa cikin Ƙarin Maɓallai Keychain.

Zaka kuma iya shigo da takaddun shaida SSL ta hanyar Fayil> Shigo da Abubuwan ... menu a cikin Maɓallin Keychain Access. Zabi System daga menu mai saukewa kuma sannan ku bi allon akan.

Idan waɗannan hanyoyi basuyi aiki ba don sayo fayil ɗin PEM zuwa MacOS, zaka iya gwada umarnin nan :

tsaro shigo yourfile.pem -k ~ / Kundin / Keychains / login.keychain

Linux

Yi amfani da wannan umarnin keytool don duba abinda ke ciki na fayil na PEM akan Linux:

keytool -printcert -file yourfile.pem

Bi wadannan matakai idan kana so ka shigo da fayil CRT zuwa cikin takardun shaidar haƙƙin mallaka na Linux (tabbacin hanyar PEM zuwa hanyar CRT a cikin sashe na gaba idan kana da fayilolin PEM a maimakon haka):

1. Gudura zuwa / usr / share / ca-takaddun shaida / .
2. Ƙirƙiri babban fayil a can (misali, sudo mkdir / usr / share / ca-takaddun shaida / aikin ).
3. Kwafi fayil ɗin .CRT a cikin sabon babban fayil ɗin. Idan ba za ku yi ba da hannu ba, za ku iya amfani da wannan umarni a maimakon: sudo cp yourfile.crt /usr/share/ca-certificates/work/yourfile.crt .
4. Tabbatar da izinin izini daidai (755 don babban fayil da 644 don fayil ɗin).
5. Gudun umarni su -update-ca-certificates .

Firefox da Thunderbird

Idan fayil ɗin PEM ya buƙaci shigo da shi a cikin abokin ciniki na Mozilla kamar Thunderbird, zaku iya fitar da fayil ɗin PEM daga Firefox. Bude menu na Firefox kuma zaɓi Zabuka . Je zuwa Ci gaba> Takaddun shaida> Duba Takaddun shaida> Ku Takaddun shaida kuma zaɓi abin da kuke buƙatar fitarwa, sa'an nan kuma zaɓi Ajiyayyen ....

Sa'an nan, a Thunderbird, bude menu kuma danna ko taɓa Zabuka . Nuna zuwa Babba> Takaddun shaida> Sarrafa Takaddun shaida> Ku Takaddun shaida> Shigo .... Daga "Fayil fayil:" sashe na Fitar da shigo , zaɓi Fayilolin Fayiloli daga saukewa, sa'annan ka sami kuma buɗe fayil ɗin PEM.

Don shigo da fayil ɗin PEM zuwa Firefox, kawai bi irin matakan da za ku fitar da ita, amma zaɓa Import ... maimakon madadin Ajiyayyen ... button.

Java KeyStore

Dubi wannan Sasshuwar Maɓallin Ɗauki a kan shigo da fayil ɗin PEM zuwa cikin Java KeyStore (CPC) idan kana buƙatar yin haka. Wani zaɓi wanda zai iya aiki shi ne yin amfani da wannan kayan aiki.

Yadda zaka canza Fayil ɗin PEM

Sabanin yawancin fayilolin fayilolin da za a iya tuba tare da kayan aiki na musayar fayil ko yanar gizon , kana buƙatar shigar da umarni na musamman akan wani shirin na musamman don juyar da tsarin fayil na PEM zuwa mafi yawan sauran samfurori.

Sanya PEM zuwa PPK tare da PuTTYGen. Zaɓi Load daga gefen dama na shirin, saita nau'in fayil ɗin don zama wani fayil (*. *), Sannan kuma bincika don bude fayil ɗin PEM. Zaɓi Ajiye maɓalli na sirri don yin fayil ɗin PPK.

Tare da OpenSSL (samo Windows version a nan), zaka iya juyawa fayil ɗin PEM zuwa PFX tare da umurnin mai biyowa:

Kayan aiki na pkcs12 -inkey yourfile.pem -in yourfile.cert -export -out yourfile.pfx

Idan kana da fayilolin PEM da ke buƙatar tuba zuwa CRT, kamar haka yake tare da Ubuntu, yi amfani da wannan umurnin tare da OpenSSL:

openssl x509 -in yourfile.pem -inform PEM -out yourfile.crt

OpenSSL yana goyan bayan sauyawa .PEM zuwa .P12 (PKCS # 12, ko Maɓallin Kira na Jama'a Standard # 12), amma sun haɗa da tsawo na fayil na ".TXT" a ƙarshen fayil ɗin kafin gudanar da wannan umurnin:

Kayan aiki na pkcs12 -export -inkey yourfile.pem.txt -in yourfile.pem.txt -out yourfile.p12

Dubi tashar Siffar Siffar da ke sama akan amfani da fayil ɗin PEM tare da Keyboard na Java idan kana so ka juyo da fayil din zuwa CKS, ko wannan koyo daga Oracle don shigo da fayil a cikin tashar ta Java.

Ƙarin Bayani akan PEM

Halin haɓakaccen bayanan bayanan Tsarin Lissafi na Sirri yana amfani da RSA-MD2 da RSA- MD5 saitunan saƙo don kwatanta saƙo kafin da kuma bayan an aiko shi, don tabbatar da cewa ba a haɓaka ba tare da hanya.

A farkon fayil na PEM shine rubutun da ke karantawa ----- SAN [lakabi] ----- , kuma ƙarshen bayanan mai amfani ne kamar wannan: ----- END [lakabi] - ----. Sashen "[lakabi]" ya siffanta sakon, saboda haka zai iya karanta KEYAR KARANTA, BABI NA BAYA, ko CERTIFICATE .

Ga misali:

----- FARA PRIVATE KEY ----- MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAMLgD0kAKDb5cFyP jbwNfR5CtewdXC + kMXAWD8DLxiTTvhMW7qVnlwOm36mZlszHKvsRf05lT4pegiFM 9z2j1OlaN + CI / X7NU22TNN6crYSiN77FjYJP464j876ndSxyD + rzys386T + 1r1aZ aggEdkj1TsSsv1zWIYKlPIjlvhuxAgMBAAECgYA0aH + T2Vf3WOPv8KdkcJg6gCRe yJKXOWgWRcicx / CUzOEsTxmFIDPLxqAWA3k7v0B + 3vjGw5Y9lycV / 5XqXNoQI14j y09iNsumds13u5AKkGdTJnZhQ7UKdoVHfuP44ZdOv / rJ5 / VD6F4zWywpe90pcbK + AWDVtusgGQBSieEl1QJBAOyVrUG5l2yoUBtd2zr / kiGm / DYyXlIthQO / A3 / LngDW 5 / ydGxVsT7lAVOgCsoT + 0L4efTh90PjzW8LPQrPBWVMCQQDS3h / FtYYd5lfz + FNL 9CEe1F1w9l8P749uNUD0g317zv1tatIqVCsQWHfVHNdVvfQ + vSFw38OORO00Xqs9 1GJrAkBkoXXEkxCZoy4PteheO / 8IWWLGGr6L7di6MzFl1lIqwT6D8L9oaV2vynFT DnKop0pa09Unhjyw57KMNmSE2SUJAkEArloTEzpgRmCq4IK2 / NpCeGdHS5uqRlbh 1VIa / xGps7EWQl5Mn8swQDel / YP3WGHTjfx7pgSegQfkyaRtGpZ9OQJAa9Vumj8m JAAtI0Bnga8hgQx7BhTQY4CadDxyiRGOGYhwUzYVCqkb2sbVRH9HnwUaJT7cWBY3 RnJdHOMXWem7 / w == ----- KARSHEN PRIVATE KEY -----

Ɗaya fayil ɗin PEM zai iya ƙunsar takardun shaida masu yawa, a cikin wane ne sashin makullin "END" da "GAME" sashe juna.

Shin Fileka Duk da haka Ba Ta Gudu ba?

Ɗaya daga cikin dalilan da fayil ɗinku bai buɗe a cikin hanyoyi da aka bayyana a sama ba shine cewa ba a ba ku da wani fayil na PEM ba. Kuna iya samun fayil ɗin da kawai ke amfani da irin wannan lakabin fayil din. Idan wannan lamari ne, babu wani wajibi don fayiloli guda biyu da za a haɗa su ko don suyi aiki tare da wannan shirye-shiryen software.

Alal misali, PEF ya dubi kyawawan abubuwa kamar PEM amma a maimakon haka ya zama ko dai Pentax Raw Image file format ko Fassara Tsarin Faya. Bi wannan haɗin don ganin yadda zaka bude ko sauya fayilolin PEF, idan wannan shine abin da kake da shi.

Idan kana aiki da fayil na KEY, ka sani cewa ba duk fayilolin da suka ƙare ba .KEY yana cikin tsarin da aka bayyana a wannan shafin. Za su iya kasancewa fayilolin lasisin lasisin Software wanda aka yi amfani dasu lokacin yin rajistar shirye-shirye na software kamar LightWave, ko Keynote Presentation fayilolin da Apple Keynote ya samar.

Idan kana da tabbacin cewa kana da fayil na PEM amma ana fama da matsalolin buɗewa ko amfani da shi, duba Ƙara Ƙarin Taimako don ƙarin bayani game da tuntuɓar ni a kan sadarwar zamantakewar yanar gizo ko ta hanyar imel, aikawa kan dandalin shafukan fasaha, da sauransu. Bari in san irin matsalolin da kake da shi kuma zan ga abin da zan iya yi don taimakawa.