如何在FreeBSD下使用加密算法OpenSSL

本文介绍如何在FreeBSD 11.1上使用OpenSSL加密算法，涵盖了生成密钥对、生成证书请求、签名证书和验证证书等过程。

#include <openssl/rsa.h>
#include <openssl/x509.h>

RSA *keypair = NULL;
BIO *outbio = NULL;
X509_REQ *certreq = NULL;
X509 *cert = NULL;
X509_NAME *certname = NULL;

// 生成密钥对
keypair = RSA_generate_key(2048, RSA_F4, NULL, NULL);

// 生成证书请求
certreq = X509_REQ_new();
X509_REQ_set_version(certreq, 0);
X509_REQ_set_pubkey(certreq, keypair);
certname = X509_NAME_new();
X509_NAME_add_entry_by_NID(certname, NID_commonName, MBSTRING_ASC, (unsigned char *)"www.example.com", -1, -1, 0);
X509_REQ_set_subject_name(certreq, certname);

// 签名证书请求
X509 *rootcert = NULL;
EVP_PKEY *rootkey = NULL;
STACK_OF(X509) *chain = NULL;
X509_REQ *req = NULL;
X509_NAME *name = NULL;

// 验证证书
X509_STORE *cert_ctx = X509_STORE_new();
X509 *trusted_cert = NULL;
X509_STORE_add_cert(cert_ctx, trusted_cert);
X509_STORE_CTX *store_ctx = X509_STORE_CTX_new();
X509_STORE_CTX_init(store_ctx, cert_ctx, cert, chain);

免责申明：文章和图片全部来源于公开网络，如有侵权，请通知删除 server@dude6.com