Tag：Private key
-
Time：2021-9-13
Json web token Import jjwt dependencies <dependency> <groupId>io.jsonwebtoken</groupId> <artifactId>jjwt</artifactId> <version>0.9.0</version> </dependency> Generate a token, use the builder () method of tool class jwts, and return the token to the client after user authentication public class CreateJwt { public static void main(String[] args) { Jwtbuilder jwtbuilder = jwts. Builder(). Setid (“88”). Setsubject (“Xiaobai”) .setIssuedAt(new Date()) .signWith(SignatureAlgorithm.HS256, […]
-
Time：2021-9-9
WireShark Wireshark decrypts TLS data stream in two ways: one is to directly decrypt the server private key, and the other is to use sslkeylogfile to obtain the session key information in the handshake process for decryption. Only the second way to decrypt TLS data is tried here. Available applications include: chrome, Firefox, curl. First, […]
-
Time：2021-9-4
The following is a review of the previous top, middle and bottom three interview questions, with answers. As the saying goes, if the bottom is not firm, the earth will shake. These answers are just for your reference. You can answer them in combination with your own understanding. Let’s take a look at them together, […]
-
Time：2021-9-3
Recently, due to the consideration of interface security, a unified parameter authentication function has been implemented for the web API to prevent the request parameters from being tampered with or repeatedly executed. The parameter authentication method is basically the same as the common authentication idea, using (timestamp + sign). In order to prevent the timestamp […]
-
Time：2021-8-30
origin enterprise projects need to be connected with third parties, which inevitably involves some encryption and decryption. As a member of an outsourcing company, this situation is more common. I’ve done it several times in the middle, and I met it allRSAEncryption, and then this is a special case.pfxPrivate key certificate encryption and.cerThe function […]
-
Time：2021-8-17
SSL SSL-The secure sockets layer should be called “TLS” now, but due to habit problems, we still call it “SSL” more often. The HTTP protocol does not encrypt content by default, so it is likely to be monitored by others during content dissemination. For situations with high security requirements, it must be encrypted. HTTPS is […]
-
Time：2021-8-10
1、 Foreword Before we understand the principle of encryption, let’s take a look at such a story. Xiaohong and Xiaoming are lovers. One day, Xiaohong sent a text message to Xiaoming and said, “honey, I have no money on my bank card. Please transfer 10000 yuan to me.” People who have been cheated know that […]
-
Time：2021-8-4
Summary:In general, there is plaintext transmission of request information in HTTP, which is easy to be intercepted by eavesdropping; The integrity of the data is not verified and is easy to be tampered with; The identity of the other party is not verified, and there is a risk of impersonation. How to solve these problems? […]
-
Time：2021-8-3
1 Overview This article mainly describes how to use in the process of master-slave replicationSSLEncryption, andbinlogEncryption（MySQL 8.0.14+）Implementation of. 2 Environment MySQL 8.0.25 Docker One master and one slave 3 prepare the container First pull the image and start the main library3306, from library3307, plus–sslParameter to turn onSSLFunctions of encrypted connection: docker pull mysql docker run […]
-
Time：2021-7-25
Smart contract is equivalent to a small program deployed and running on the blockchain node. In order to access the functions of the contract, the front-end web page can be accessed directly through ether JS or Web3 JS class library through RPC Protocol. The figure above shows the basic process of web call contract. React […]
-
Time：2021-7-25
1 Overview useSSHConnecting to the server is a common thing, but whether the connection is safe enough is a worrying problem. This paper introduces how to establish a sufficiently secure network from the following aspectsSSHconnect: port agreement user password Key pair ssh-agent 2 ports The first step is to modify the default port22, modify/etc/ssh/sshd_configMediumPortFor example, […]
-
Time：2021-6-22
With the increase of our website users, we will gradually realize the importance of HTTPS encryption. To upgrade from HTTP to HTTPS without modifying the existing code, it is a good choice for nginx to support HTTPS. Today, let’s talk about how to start with nginx, upgrade from HTTP to HTTPS, support static websites and […]
