November 2021
Beginner to intermediate
239 pages
4h 15m
Chinese
Content preview from Dapr学习手册
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
安全
｜
153
4.2.4.2
申请
X.509
证书
要向
CA
请求证书，请求者首先要生成一个公钥
/
私钥对。然后它创建一个证
书签名请求（
certificate signing request
，
CSR
），其中包含其公钥和请求的字段，
如域名。它用自己的私钥对
CSR
进行签名，并将
CSR
发送给
CA
。
CA
使用
请求者的公钥验证
CSR
。然后它生成一个数字证书，其中包含请求的字段、
请求者的公钥和
CA
的公钥。数字证书会用
CA
的私钥签名，然后发回给请
求者。
现在你对证书有所了解了，我们可以继续学习
Dapr mTLS
。
4.2.5 Dapr mTLS
相互
TLS
要求各方都要用证书来表明自己的身份，而要获得证书，你需要与
可信的
CA
合作。设置
CA
并完成证书申请的过程并不复杂，但这通常是开
发人员不喜欢的。这就是
Dapr
的优势所在。它自身托管有
CA
服务，它有自
动化证书生成过程，并在
Dapr sidecar
之间建立一个安全的通信通道。当你
的应用程序代码使用
Dapr sidecar
进行通信时，所有流量都会自动通过安全
的
HTTPS
通道发送，你不需要在代码中做任何特殊的操作。
Dapr mTLS
架构被设计为可以在
Kubernetes
模式和独立模式下工作。两种模
式的主要区别是根证书的存储位置，如下节所述。
4.2.5.1 Dapr mTLS
架构
Dapr
附带了一个名为
Sentry
的系统组件，充当
CA
。
CA
采用用户提供的根
证书或生成一个自签名证书作为根证书。当新的
Dapr sidecar
启动时，根证
书作为可信根证书被注入到 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.