Introduction to SSL encryption technology, how to build an SSL secure encrypted website?

On April 8, 2014, OpenSSL was a big vulnerability**. A large number of ** are affected by the vulnerability, including but not limited to Alipay, **, WeChat***, YY voice, Momo, Yahoo mail, online banking, portals, etc.

Hello! First, first of all, answer on an independent server (cloud service bender, VPS), set up an ordinary **, and this ** can be accessed.

Obtain an SSL certificate.

3. Get the SSL certificate and install the book to the server to achieve https**.

Note: Web hosting is generally not supported.

In today's society, more and more applications and services use encrypted traffic, which makes SSL decryption increasingly important in ensuring enterprise cybersecurity.

SSL (Secure Socket Layer) is an industry standard for transmitting secure data over the Internet. This standard is based on the Trusted Certificate System, which is issued by the certificate administration and accepted by the server. In recent years, the SSL standard has evolved into the Transport Layer Security (TLS) standard.

More and more malware is now using SSL TLS sessions to stealth and be convinced that security tools can't detect their presence or block their traffic. The technologies that ensure cyber security have become a serious threat to cyber security.

In light of this, it is increasingly important to decrypt SSL TLS traffic while respecting privacy controls.

TLS SSL is a specification for encrypted channels.

It uses symmetric encryption, public-private key asymmetric encryption and its key exchange algorithm to encrypt and trust information transmission in the CA system.

Symmetric encryption algorithms commonly used in HTTP SSL include RC4, AES, 3DES, Camellia, etc.

SSL was developed by a former Netscape company.

There are three versions, 1, 2, 3, but now only version 3 is used

TLS is a standardized product of SSL.

There are three versions.

Default use. And there is almost no difference.

In fact, we all use TLS now, but because we are used to the term SSL in history, it is still more often referred to as SSL.

The functional implementation of TLS SSL mainly relies on three basic algorithms: hash function hash, symmetric encryption and asymmetric encryption, which uses asymmetric encryption to achieve identity authentication and key negotiation, and the symmetric encryption algorithm uses a negotiated key pair to encrypt data and verify the integrity of information based on the hash function.

The key to solving the above authentication problem is to ensure that the public key obtained is legitimate and able to verify the identity information of the server, for which it is necessary to introduce an authoritative third-party agency responsible for verifying the information of the owner of the public key and issuing authentication"Certificates"At the same time, it can provide users with certificate verification services, that is, PKI system.

The basic principle is that the CA is responsible for reviewing the information and then using the private key for the critical information"Signature", the corresponding public key is exposed, and the client can use the public key to verify the signature. CA can also revoke certificates that have already been issued, the basic way includes two types of CRL files and The specific process is as follows:

Here's how the SSL protocol works:

1) Handshake Protocol: This protocol is responsible for the encryption parameters used by the quilt for the session between the client and the server. When an SSL client and server start communicating, they agree on a protocol version, choose the encryption algorithm and authentication method, and use public key technology to generate a shared key.

2) Recording protocol: This protocol is used to exchange application data. Application messages are split into manageable chunks, which can also be compressed, and a MAC (Message Authentication**) is generated, and the result is then encrypted and transmitted.

The receiver accepts the data and decrypts it, validates the MAC, decompresses and reassembles it, and provides the result to the application protocol.

3) Warning Protocol: This protocol is used to indicate at all times when an error occurred or when the session between two hosts was terminated. The handshake steps for SSL communication are as follows: