June 2021
Intermediate to advanced
290 pages
9h 21m
Chinese
Content preview from Node与Express开发（第2版）
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
安全
｜
195
心
（
CA
）
，它们先创建出
受信任的根证书
以供浏览器提供商们使用。当你安装一个浏览器
时，就会把这些受信任的根证书包含进来，这就建立了
CA
跟浏览器之间的信任链
。为了
让这条信任链起作用，你的服务器必须使用由某个
CA
颁发的证书。
所以为了提供
HTTPS
，需要一个来自
CA
的证书
，那么怎么做才能得到这样一个证书呢？
大体来讲，你可以自己生成、从免费的
CA
获取，或者从商业
CA
购买。
18.1.1
生成自己的证书
生成自己的证书很容易，但通常只适用于开发和测试（而且还可能是局域网内的开发）。
由于证书中心建立了层级结构，浏览器只会信任由已知
CA
（你应该不在其中）生成的证
书。如果网站使用了浏览器未知
CA
的证书
，浏览器就会用非常严肃的话语警告你，你正
在跟一个未知的（因而也是不可信任的）实体建立安全连接。在开发和测试中，这是没问
题的：你和你的团队都知道证书是自己生成的，因此浏览器的行为也在意料之中。但如果
把这样一个网站部署到生产上让大众访问，那么大众都会离它而去的。
如果控制了浏览器的分发和安装，就可以在安装浏览器时自动安装自己的根
证书。这样的话，当使用这个浏览器的人连接到你的网站时，就可以避免收
到警告信息。可是，控制浏览器的分发和安装并不是一件容易的事，而且这
只适用于你能控制这个浏览器的环境。除非有非常过硬的理由，否则这种做
法通常并不值得。
要生成自己的证书，需要一个
OpenSSL
实现。表
18-1
说明了如何获取
OpenSSL
。
表18-1：不同的平台下获取OpenSSL的方法
平 台 方 法
macOS ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.