cer、pvk 和 pfx 文件之间有什么区别? [英] What is the difference between a cer, pvk, and pfx file?

问题描述

cer、pvk 和 pfx 文件有什么区别?另外，我应该保留哪些文件以及我应该将哪些文件提供给我的交易对手?

What is the difference between a cer, pvk, and pfx file? Also, which files do I keep and which am I expected to give to my counter-parties?

推荐答案

Windows 使用 .cer 扩展名作为 X.509 证书.这些可以是二进制"(ASN.1 DER)，也可以使用 Base-64 编码并应用页眉和页脚(PEM)；Windows 将识别.要验证证书的完整性，您必须使用颁发者的公钥来检查其签名……这又是另一个证书.

Windows uses .cer extension for an X.509 certificate. These can be in "binary" (ASN.1 DER), or it can be encoded with Base-64 and have a header and footer applied (PEM); Windows will recognize either. To verify the integrity of a certificate, you have to check its signature using the issuer's public key... which is, in turn, another certificate.

Windows 将 .pfx 用于 PKCS #12 文件.该文件可以包含各种加密信息，包括证书、证书链、根授权证书和私钥.其内容可以通过密码保护(使用密码)以保持私钥的私密性并保持根证书的完整性.

Windows uses .pfx for a PKCS #12 file. This file can contain a variety of cryptographic information, including certificates, certificate chains, root authority certificates, and private keys. Its contents can be cryptographically protected (with passwords) to keep private keys private and preserve the integrity of root certificates.

Windows 使用 .pvk 作为私钥文件.我不确定 Windows 遵循什么标准(如果有的话).希望它们是 PKCS #8 编码的密钥. Emmanuel Bourg 报告说这些是专有格式.一些文档 可用.

Windows uses .pvk for a private key file. I'm not sure what standard (if any) Windows follows for these. Hopefully they are PKCS #8 encoded keys. Emmanuel Bourg reports that these are a proprietary format. Some documentation is available.

你永远不应该泄露你的私钥.它们包含在 .pfx 和 .pvk 文件中.

You should never disclose your private key. These are contained in .pfx and .pvk files.

通常，您只与其他方交换您的证书 (.cer) 和任何中间颁发者的证书(即您所有 CA 的证书，根 CA 除外).

Generally, you only exchange your certificate (.cer) and the certificates of any intermediate issuers (i.e., the certificates of all of your CAs, except the root CA) with other parties.

这篇关于cer、pvk 和 pfx 文件之间有什么区别?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！