After the context structure is created, a trust certificate store must be loaded.
在创建上下文结构之后，必须加载一个可信任证书库。
For example, a failed trust verification could simply mean that the trust certificate is not available.
例如，失败的信任验证可能只是意味着没有可信任的证书。
The user signifies trust in the certificate authority by possessing and using the ca's trust certificate.
用户通过拥有并使用CA的信任证书来表明自己对认证权威的信任。
Verifying that the certificate is trusted requires that a trust certificate store be loaded prior to establishing the connection.
要检验证书是可信任的，需要在连接建立之前提前加载一个可信任证书库。
For example, if the trust cannot be verified because a trust certificate store has not been loaded, then whether to continue with the communication is strictly up to the developer.
例如，如果由于没有加载所保存的信任证书，而不能对信任证书进行验证，那么是否继续进行通信，就完全取决于开发者了。
Why should we trust this certificate?
为什么我们应该相信这个证书呢？
The certificate and its trust are valid and the name checks out.
证书及其信任关系都是有效的，名字也检查出来了。
In other words, adding a ca to a keyring establishes a trust policy for every certificate that ca has ever signed or will sign in the future.
换句话说，对一个密匙环添加一个CA将对那个CA已经签名的或未来即将签名的每个证书建立一个信任策略。
There is still the basic check, meaning that the certificate signer must be present in the trust store.
但仍需要基本检查，这意味着证书签名者必须存在于信任存储区中。
When using SSL for communication, a key element of the secure exchange is validation of the server's certificate against the client trust store.
当使用SSL进行通信时，安全地交换信息的关键之一是根据客户机信任存储库检验服务器的证书。
This is where the chain of trust and the common name on a certificate can prevent this from occurring.
在这种情况中，信任链和证书中的通用名可以防止中间人攻击的发生。
If access is based entirely on self-signed certificates, deleting the public key of a certificate from the trust store revokes its access.
如果访问完全基于自签名证书，则从信任存储区中删除证书的公钥将撤销其访问权。
Even if you don't follow this advice, at least when you get this challenge the first time, import the certificate into the client trust store.
即使您不采纳这个建议，至少应该在第一次遇到警告时把证书导入客户机信任存储库。
Thus to trust the certificate, the user only needs to trust the certificate authority.
因此，要信任一个证书，用户只需要信任证书权威即可。
Import the server certificate into client trust store.
将服务器证书导入到客户机信任存储中。
Revoking access privileges and revoking a certificate are functionally equivalent; removing the certificate from the trust store accomplishes both tasks.
撤销访问权限和撤销证书在功能上相当；从信任存储区中删除证书可同时完成这两项任务。
The trust store entry for a self-signed certificate matches one and only one certificate.
自签名证书的信任存储区项与一个且仅与一个证书匹配。
This due diligence on the part of the ca provides a basis to trust the identity bound to the certificate.
ca部分的这些前期工作提供了信任绑定到该证书的标识的基础。
However, we'll need to configure the client to trust the certificate authority (ca) that signed the server's public key certificate.
然而，我们需要将客户机配置为信任签署服务器的公钥证书的认证中心(CA)。
This handshake involves verification of the LDAP server's certificate and acknowledgement of the trust to it.
这个握手过程要检查 LDAP服务器的证书并确认对它的信任。
If you do not want cell a to trust cell b, use certificate authentication for the server to server authentication step, not basic auth.
如果不希望计算单元a信任计算单元b，则请在服务器身份验证步骤中为服务器使用证书身份验证，而不是采用基本身份验证。
To show trust, a digital certificate is signed by a Certificate Authority (CA).
为了显示信任关系，数字证书可以由认证权威（CA）机构进行签名。
The set of potential SSLPEER matches for any given DN is at least as large as the number of CAs in the trust store, larger if certificate reissuance is taken into account.
任何给定DN的潜在SSLPEER匹配项至少要与信任存储区中CA的数量一样多，如果将证书重新颁发计入在内数量会更大。
Import the client certificate into server trust store.
将客户机证书导入到服务器信任存储区中。
Thus an additional step is required to establish ETLDAP's trust to the LDAP server's certificate.
因此，建立ETLDAP对LDAP服务器证书的信任需要一个额外步骤。
Check for proper certificate Subject (should be the DNS name) and certificate trust options.
检查证书的主题(应该是DNS名称)和证书信任选项。
That's it, the certificate has been added and ETLDAP will trust each certificate presented to it which was signed using the imported certificate.
这样就添加了证书，ETLDAP会信任用导入的证书签署的所有证书。
If it is not, then remove other certificate authorities using certutil -viewdelstore TRUST.
如果不是这样，就使用certutil -viewdelstore TRUST删除其他证书机构。
Add the server certificate to the client trust store.
将服务器证书添加到客户端信任存储。
Add the server certificate to the client trust store.
将服务器证书添加到客户端信任存储。
应用推荐