November 2021
Intermediate to advanced
410 pages
12h 1m
Chinese
Content preview from MongoDB权威指南（第3版）
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
MongoDB
安全介绍
｜
323
在
MongoDB
中使用
x.509
进行身份验证时，成员证书必须具有以下属性。
•
必须由单个
CA
来签发集群中成员的所有
x.509
证书。
•
成员证书主题中的
Distinguished
Name
（
DN
）必须为以下属性中的至少一个指定非空值：
Organization
（
O
）、
Organizational Unit
（
OU
）或
Domain Component
（
DC
）。
•
O
、
OU
和
DC
属性必须与其他集群成员证书中的属性匹配。
• Common Name
（
CN
）或
Subject Alternative Name
（
SAN
）必须与集群其他成员所使用的
服务器主机名匹配。
19.2
MongoDB
的认证和传输层加密教程
本教程将设置根
CA
和中间
CA
。在最佳实践中，建议使用中间
CA
对服务器和客户端证
书进行签名。
19.2.1
建立
CA
在为副本集的成员生成签名证书之前，必须首先解决证书颁发机构的问题。如前所述，我
们可以生成并维护一个独立的证书颁发机构，也可以使用第三方
TLS/SSL
供应商生成的证
书。在本章的示例中，我们会生成自己的
CA
。注意
，你可以在随书代码包中获取本章的
所有代码示例。这些示例取自一个用于部署安全副本集的脚本。在这些示例中，可以看到
该脚本的注释。
1.
生成根
CA
我们会使用
OpenSSL
生成
CA
。为了继续后面的内容
，请确保你能够访问本地机器上的
OpenSSL
。
根
CA
位于证书链的顶端
。这是信任的最终来源。理想情况下，应该使用第三方
CA
。然而，
在网络隔离的情况下（通常是在大型企业环境中）或出于测试目的，就需要使用本地 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.