因为这是使用非对象加密技术，而每一端有自己的证书和私有密钥，比起清单5对称加密技术示例，它处理起来更为简单。
Because this is using asymmetric encryption, where each side has its own certificate and private key, it should be somewhat simpler to handle than the Listing 5 symmetric-encryption example.
应用程序或代码签名是这样一个过程，即生成私有、公共密钥和公共密钥证书，签署和优化应用程序。
Application or code signing is the process of generating private and public keys and public-key certificates, signing and optimizing the application.
在图8中，输入信息以创建私有密钥和数字证书。
In Figure 8, enter the information to create the private key and the digital certificate.
因此，您应该将ca证书和其他签名证书放入信任存储库，并将私有信息(含有私钥的个人证书)放入密钥存储库中。
Thus, you should place ca certificates and other signing certificates in a trust store and private information (personal certificates with private keys) in the key store.
手动创建私有、公共密钥和公共密钥证书。
Manually creating the private and public keys and public-key certificate.
alias是用于keystore项的别名，keystore存储生成的私有密钥和证书。
Alias is the alias to use for the keystore entry that stores the generated private key and certificate.
应用程序签名首先是生成一个私有、公共密钥对和一个相关公共密钥证书，简称为公共密钥证书。
Application signing begins by generating a private and public key pair and a related public-key certificate, also known as a public-key certificate.
当询问是否与证书一起导出私有密钥时，选择 “No”并单击 “Next”。
When asked whether to export the private key with the certificate, select “No” and press “Next”.
与简单的UsernameToken示例相比，使用私有密钥-证书对进行消息签名和加密的配置比较复杂。
Using private key-certificate pairs for signing and encrypting messages is more complex to configure than the simple UsernameToken example.
在清单1中，- genkey表示一个公共、私有密钥对项，以及一个X . 509v 1自签署的单个元素证书链，其中包含生成的公共密钥。
In Listing 1, -genkey indicates a public and private key pair entry, as well as an X.509 v1 self-signed, single-element certificate chain that includes the generated public key.
创建一个根(root)级私有密钥和根级证书请求(包含公共密钥)。
Create a root-level private key and root-level certificate request (holding the public key).
存储根证书和单个服务证书以及相关私有密钥。
Stores root certificates along with single service certificate and associated private key.
CA的私有密钥一旦泄露，该CA签发的所有证书就只能全部作废。
When the private key of a ca is compromised, all the certificates issued by that ca should be revoked.
CA的私有密钥一旦泄露，它所签发的所有证书将全部作废。
When the private key of a ca is compromised, all the certificates that are issued by this ca would be revoked.
保护私钥不泄露是整个CA域的安全基础，CA的私有密钥一旦泄露，该CA签发的所有证书就只能全部作废。
It is the foundation of entire ca field safety that protection private key do not reveal. When the private key of a ca is compromised, all the certificates by that ca should be revoked.
保护私钥不泄露是整个CA域的安全基础，CA的私有密钥一旦泄露，该CA签发的所有证书就只能全部作废。
It is the foundation of entire ca field safety that protection private key do not reveal. When the private key of a ca is compromised, all the certificates by that ca should be revoked.
应用推荐