用了一段的时间的 Comodo RSA SSL证书,马上过期,换了一个新的ssl证书 Comodo PositiveSSL 证书现在已经支持了ECC。感谢imlonghao的博文提醒。 证书csr创建略有不同。大家可以参考,需要使用openssl生成,在线的csr生成器不能用。 root@vultr:~# openssl ecparam -genkey -name secp384r1 -out www.crazycen.com-ecc.keyroot@vultr:~# openssl req -new -sha384 -key www.crazycen.com-ecc.key -out www.crazycen.com-ecc.csr
You are about to be asked to enter information that will be incorporatedinto your certificate request.What you are about to enter is what is called a Distinguished Name or a DN.There are quite a few fields but you can leave some blankFor some fields there will be a default value,If you enter '.', the field will be left blank.-----Country Name (2 letter code) [AU]:CNState or Province Name (full name) [Some-State]:ShanghaiLocality Name (eg, city) []:ShanghaiOrganization Name (eg, company) [Internet Widgits Pty Ltd]:Crazycen BlogOrganizational Unit Name (eg, section) []:Crazycen BlogCommon Name (e.g. server FQDN or YOUR name) []:www.crazycen.comEmail Address []:cenxuebo@outlook.com Please enter the following 'extra' attributesto be sent with your certificate requestA challenge password []:An optional company name []:
博主使用的是gogetssl的Comodo PositiveSSL,现在价格已经很便宜。
购买地址:https://www.gogetssl.com/domain-validation/comodo-positive-ssl/ 详细操作流程可以参考 https://imlonghao.com/15.html 得到证书后,将 yourdomain_com.crtCOMODORSADomainValidationSecureServerCA.crtCOMODORSAAddTrustCA.crt 这三个文件,分别打开,将内容按顺序复制,生成新的crt证书 RSA证书个ECC证书的区别,证书已经从RSA变为ECC证书
文章评论
泛域名的Comodo ECC 400左右一年 可以考虑考虑 https://item.taobao.com/item.htm?spm=a1z10.1-c.w4004-8104072791.2.d6NO9t&id=521194243408