{"id":958,"date":"2020-04-07T16:22:10","date_gmt":"2020-04-07T08:22:10","guid":{"rendered":"http:\/\/39.97.231.10\/?p=958"},"modified":"2020-04-07T16:22:10","modified_gmt":"2020-04-07T08:22:10","slug":"%e7%bd%91%e7%ab%99ssl%e8%af%81%e4%b9%a6","status":"publish","type":"post","link":"http:\/\/www.weijing.co\/?p=958","title":{"rendered":"\u7f51\u7ad9SSL\u8bc1\u4e66"},"content":{"rendered":"\n<h1><a>1 SSL<\/a>\u8bc1\u4e66\u4ecb\u7ecd<\/h1>\n\n\n<h2><a>1.1 SSL<\/a>\u8bc1\u4e66\u8bf4\u660e<\/h2>\n\n\n<p>SSL \u8bc1\u4e66\uff08SSL Certificates\uff09\u9075\u5b88SSL\u534f\u8bae\uff0c\u7531\u53d7\u4fe1\u4efb\u7684\u6570\u5b57\u8bc1\u4e66\u9881\u53d1\u673a\u6784CA\u9881\u53d1\uff0c\u4e3b\u8981\u7528\u6765\u63d0\u4f9b\u5bf9\u7528\u6237\u548c\u670d\u52a1\u5668\u7684\u8ba4\u8bc1\uff0c\u5728\u57fa\u4e8eHTTP\u8bbf\u95ee\u7684Web\u7f51\u7ad9\u57fa\u7840\u4e0a\u52a0\u5165SSL\uff08Secure\nsocket layer\uff09\uff0c\u7531HTTPS\u901a\u8fc7\u4f20\u8f93\u52a0\u5bc6\u548c\u8eab\u4efd\u8ba4\u8bc1\u4fdd\u8bc1\u4e86\u4f20\u8f93\u8fc7\u7a0b\u7684\u5b89\u5168\u6027\u3002<br \/>\n&nbsp;&nbsp;&nbsp; 2014\u5e74Google\u8c03\u6574\u4e86\u641c\u7d22\u5f15\u64ce\u7b97\u6cd5\uff0c\u6bd4\u8d77\u540c\u7b49HTTP\u7f51\u7ad9\uff0c\u91c7\u7528HTTPS\u52a0\u5bc6\u7684\u7f51\u7ad9\u5728\u641c\u7d22\u7ed3\u679c\u4e2d\u7684\u6392\u540d\u66f4\u9760\u524d\u3002\u5e76\u4e14\u4ece 2017 \u5e74\u5f00\u59cb\uff0cChrome \u6d4f\u89c8\u5668\u5df2\u628a\u91c7\u7528 HTTP \u534f\u8bae\u7684\u7f51\u7ad9\u6807\u8bb0\u4e3a\u4e0d\u5b89\u5168\u7f51\u7ad9\uff0c\u82f9\u679c App Store \u4e2d\u7684\u6240\u6709\u5e94\u7528\u4e5f\u90fd\u5fc5\u987b\u4f7f\u7528 HTTPS \u52a0\u5bc6\u8fde\u63a5\uff1b\u5fae\u4fe1\u5c0f\u7a0b\u5e8f\u4e5f\u8981\u6c42\u5fc5\u987b\u4f7f\u7528 HTTPS \u534f\u8bae\uff1b\u65b0\u4e00\u4ee3\u7684 HTTP\/2 \u534f\u8bae\u7684\u652f\u6301\u9700\u4ee5 HTTPS \u4e3a\u57fa\u7840\u3002\u73b0\u5df2\u6210\u4e3a\u7f51\u7edc\u9886\u57df\u4e2d\u5168\u7403\u5316\u7684\u6807\u51c6\u3002<\/p>\n\n\n<h2><a>1.2 SSL<\/a>\u8bc1\u4e66\u7c7b\u578b<\/h2>\n\n\n<p>SSL\u8bc1\u4e66\u9700\u8981\u5411\u56fd\u9645\u516c\u8ba4\u7684\u8bc1\u4e66\u8bc1\u4e66\u8ba4\u8bc1\u673a\u6784\uff08\u7b80\u79f0CA\uff0cCertificate Authority\uff09\u7533\u8bf7\u3002SSL\u8bc1\u4e66\u5206\u4e3a\u57df\u540d\u578bSSL\u8bc1\u4e66\uff08DV SSL\uff09\u3001\u4f01\u4e1a\u578bSSL\u8bc1\u4e66\uff08OV SSL\uff09\u3001\u589e\u5f3a\u578bSSL\u8bc1\u4e66\uff08EV SSL\uff09\u4e09\u79cd\u7c7b\u578b\u3002<\/p>\n\n\n<figure class=\\\"wp-block-table\\\"><table class=\\\"\\\"><tbody><tr><td>\n  \u6570\u5b57\u8bc1\u4e66\n  <\/td><td>\n  \u4fe1\u4efb\u7b49\u7ea7\n  <\/td><td>\n  \u8ba4\u8bc1\u5f3a\u5ea6\n  <\/td><td>\n  \u9002\u7528\u7f51\u7ad9\u7c7b\u578b\n  <\/td><\/tr><tr><td>\n  DV SSL\n  <\/td><td>\n  \u666e\u901a\n  <\/td><td>\n  \u9a8c\u8bc1\u7f51\u7ad9\u7684\u771f\u5b9e\u6027\u4fbf\u53ef\u9881\u53d1\u8bc1\u4e66\n  <\/td><td>\n  \u4e2a\u4f01\u3001APP\n  <\/td><\/tr><tr><td>\n  OV SSL\n  <\/td><td>\n  \u5f3a\n  <\/td><td>\n  \u987b\u5ba1\u9a8c\u8bc1\u4f01\u4e1a\u8eab\u4efd\n  <\/td><td>\n  \u653f\u5e9c\u7ec4\u7ec7\u3001\u4f01\u4e1a\n  <\/td><\/tr><tr><td>\n  EV SSL\n  <\/td><td>\n  \u6700\u9ad8\n  <\/td><td>\n  \u5ba1\u6838\u4e25\u683c\uff0c\u6fc0\u6d3b\u7eff\u8272\u5730\u5740\u680f\n  <\/td><td>\n  \u91d1\u878d\u673a\u6784\n  <\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n<h2><a>1.3 \u542f\u7528SSL<\/a>\u8bc1\u4e66\u4f18\u52bf<\/h2>\n\n\n<h3><a>1.3.1 \u9632\u6d41\u91cf\u52ab\u6301<\/a><\/h3>\n\n\n<p>\u542f\u7528SSL\u8bc1\u4e66\uff0c\u901a\u8fc7HTTPS\u534f\u8bae\u8bbf\u95ee\u7f51\u7ad9\uff0c\u7528\u6237\u8bbf\u95ee\u7f51\u7ad9\u7684\u6570\u636e\u5b9e\u73b0\u52a0\u5bc6\u8bbf\u95ee\uff0c\u5b9e\u73b0\u4ea4\u4e92\u7684\u6570\u636e\u7684\u5b89\u5168\uff0c\u9632\u6b62\u6d41\u91cf\u52ab\u6301\u3001\u9632\u6b62\u6570\u636e\u7be1\u6539\u3001\u9632\u6b62\u76d1\u542c\u3002<\/p>\n\n\n<h3><a>1.3.2 \u63d0\u5347\u641c\u7d22\u6392\u540d<\/a><\/h3>\n\n\n<p>\u91c7\u7528 HTTPS\u52a0\u5bc6\u7684\u7f51\u7ad9\uff0c\u901a\u8fc7google\u3001\u767e\u5ea6\u7b49\u641c\u7d22\u5f15\u64ce\u663e\u793a\u7684\u7ed3\u679c\u6392\u540d\u66f4\u9ad8\uff0c\u53ef\u63d0\u5347\u641c\u7d22\u6392\u540d\u548c\u7f51\u7ad9\u7684\u53ef\u4fe1\u5ea6\u3002<\/p>\n\n\n<h3><a>1.3.3 \u675c\u7edd\u9493\u9c7c\u7f51\u7ad9<\/a><\/h3>\n\n\n<p>\u4f7f\u7528SSL\u8bc1\u4e66\u53ef\u4ee5\u5f3a\u5316\u7f51\u7ad9\u7684\u53ef\u4fe1\u7a0b\u5ea6\uff0c\u4f7f\u7528\u6237\u5b89\u5168\u7684\u8bbf\u95ee\u7f51\u7ad9\uff0c\u589e\u5f3a\u7528\u6237\u4fe1\u4efb\u3002<\/p>\n\n\n<h2><a>1.4 CA<\/a>\u5382\u5546<\/h2>\n\n\n<p>\u76ee\u524d\u5e38\u7528\u7684CA\u5382\u5546\u6709Symante\u3001GeoTrust\u3001TrustAsia\u3001Let\\&#8217;s Encrypt\u3001GMO GlobalSign\u3001CFCA\u3002<\/p>\n\n\n<h3><a>1.4.1 Symantec<\/a><\/h3>\n\n\n<p>Symantec \u662f\u5168\u7403\u6700\u5927\u7684\u4fe1\u606f\u5b89\u5168\u670d\u52a1\u63d0\u4f9b\u5546\uff0c \u5176\u9881\u53d1\u7684\u8bc1\u4e66\u80fd\u88ab\u6240\u6709\u6d4f\u89c8\u5668\u652f\u6301\u4e0e\u4fe1\u4efb\uff0c\u53ef\u786e\u4fdd\u7528\u6237\u8bbf\u95ee\u65f6\u6d4f\u89c8\u5668\u7ed9\u4e88\u6b63\u786e\u7684\u7f51\u9875\u5b89\u5168\u63d0\u793a\uff0c\u4e3a\u5168\u7403\u4e00\u767e\u591a\u4e07\u53f0\u7f51\u7edc\u670d\u52a1\u5668\u63d0\u4f9b\u5b89\u5168\u9632\u62a4\u3002\u8be5\u54c1\u724c\u8bc1\u4e66\u7531\u5de5\u4fe1\u90e8\u8bb8\u53ef\u8bbe\u7acb\u7684\u7535\u5b50\u8ba4\u8bc1\u670d\u52a1\u673a\u6784\u201c\u5929\u5a01\u8bda\u4fe1\u201d\u63d0\u4f9b\u9274\u8bc1\u670d\u52a1\u3002<\/p>\n\n\n<h3><a>1.4.2 GeoTrus<\/a><\/h3>\n\n\n<p>GeoTrust \u662f\u5168\u7403\u7b2c\u4e8c\u5927\u6570\u5b57\u8bc1\u4e66\u63d0\u4f9b\u5546\uff0c\u4e5f\u662f\u8eab\u4efd\u8ba4\u8bc1\u548c\u4fe1\u4efb\u8ba4\u8bc1\u9886\u57df\u7684\u9886\u5bfc\u8005\uff0c\u8be5\u516c\u53f8\u5404\u79cd\u5148\u8fdb\u7684\u6280\u672f\u4f7f\u5f97\u4efb\u4f55\u5927\u5c0f\u7684\u673a\u6784\u548c\u516c\u53f8\u90fd\u80fd\u5b89\u5168\u3001\u4f4e\u6210\u672c\u5730\u90e8\u7f72 SSL \u6570\u5b57\u8bc1\u4e66\u548c\u5b9e\u73b0\u5404\u79cd\u8eab\u4efd\u8ba4\u8bc1\u3002\u76ee\u524d\u5df2\u88abSymantec\u6536\u8d2d\u3002<\/p>\n\n\n<h3><a>1.4.3 GMO\nGlobalSign<\/a><\/h3>\n\n\n<p>GMO GlobalSign\u662f\u5168\u7403\u6700\u65e9\u7684\u6570\u5b57\u8bc1\u4e66\u8ba4\u8bc1\u673a\u6784\u4e4b\u4e00\uff0c\u662f\u4e00\u4e2a\u5907\u53d7\u4fe1\u8d56\u7684 CA \u4e2d\u5fc3\u548c SSL \u6570\u5b57\u8bc1\u4e66\u63d0\u4f9b\u5546\uff0c\u5728\u5168\u7403\u603b\u8ba1\u9881\u53d1\u8d85\u8fc7 2000 \u4e07\u5f20\u6570\u5b57\u8bc1\u4e66\uff1b\u5176\u4e13\u4e1a\u5b9e\u529b\u83b7\u5f97\u4e2d\u56fd\u5e02\u573a\u4f17\u591a\u670d\u52a1\u5668\u3001\u57df\u540d\u6ce8\u518c\u5546\u3001\u7cfb\u7edf\u670d\u52a1\u4f9b\u5e94\u5546\u7684\u9752\u7750\uff0c\u6210\u4e3a\u5176\u6570\u5b57\u8bc1\u4e66\u670d\u52a1\u7684\u5408\u4f5c\u4f19\u4f34\u3002<\/p>\n\n\n<h3><a>1.4.4 TrustAsia\u00ae<\/a><\/h3>\n\n\n<p>TrustAsia\u00ae\uff08\u4e9a\u6d32\u8bda\u4fe1\uff09\u662f\u4e9a\u6570\u4fe1\u606f\u79d1\u6280\uff08\u4e0a\u6d77\uff09\u6709\u9650\u516c\u53f8\u5e94\u7528\u4e8e\u4fe1\u606f\u5b89\u5168\u9886\u57df\u7684\u54c1\u724c\uff0c \u4e13\u4e1a\u4e3a\u4f01\u4e1a\u63d0\u4f9b\u5305\u542b\u6570\u5b57\u8bc1\u4e66\u5728\u5185\u7684\u6240\u6709\u7f51\u7edc\u5b89\u5168\u670d\u52a1\uff0c\u662fSymantec\u2122\uff08\u8d5b\u95e8\u94c1\u514b\uff09\u7684\u767d\u91d1\u5408\u4f5c\u4f19\u4f34<\/p>\n\n\n<h3><a>1.4.5 Let\\&#8217;s\nEncrypt<\/a><\/h3>\n\n\n<p>Let\\&#8217;s Encrypt\u662f\u56fd\u5916\u4e00\u4e2a\u516c\u5171\u7684\u514d\u8d39SSL\u9879\u76ee\uff0c\u7531 Linux \u57fa\u91d1\u4f1a\u6258\u7ba1\uff0c\u7531Mozilla\u3001\u601d\u79d1\u3001Akamai\u3001IdenTrust\u548cEFF\u7b49\u7ec4\u7ec7\u53d1\u8d77\uff0c\u76ee\u7684\u5c31\u662f\u5411\u7f51\u7ad9\u81ea\u52a8\u7b7e\u53d1\u548c\u7ba1\u7406\u514d\u8d39\u8bc1\u4e66\uff0c\u4ee5\u4fbf\u52a0\u901f\u4e92\u8054\u7f51\u7531HTTP\u8fc7\u6e21\u5230HTTPS\u3002<\/p>\n\n\n<h1><a>2 SSL<\/a>\u5b89\u88c5\u914d\u7f6e<\/h1>\n\n\n<h2><a>2.1 \u7533\u8bf7\u514d\u8d39SSL<\/a>\u8bc1\u4e66<\/h2>\n\n\n<p>SSL\u8bc1\u4e66\u53ef\u5230\u5404\u4e91\u5382\u5546\u514d\u8d39\u7533\u8bf7\u3002<\/p>\n\n\n<ul><li><a rel=\\\"noreferrer noopener\\\" aria-label=\\\"\u963f\u91cc\u4e91\uff08\u5728\u65b0\u7a97\u53e3\u6253\u5f00\uff09\\\" href=\\\"https:\/\/common-buy.aliyun.com\/?spm=a2c4g.11186623.2.11.354e3c93eyZuSG&amp;commodityCode=cas#\/buy\\\" target=\\\"_blank\\\"><strong>\u963f\u91cc\u4e91<\/strong><\/a><\/li><\/ul>\n\n\n<ul><li><a href=\\\"https:\/\/buy.cloud.tencent.com\/ssl?fromSource=ssl\\\">\u817e\u8baf\u4e91<\/a><\/li><\/ul>\n\n\n<ul><li><a href=\\\"https:\/\/cloud.baidu.com\/product\/ssl.html\\\"><strong>\u767e\u5ea6\u4e91<\/strong><\/a><\/li><\/ul>\n\n\n<ul><li><a href=\\\"https:\/\/www.bt.cn\/admin\/safe\\\">\u5b9d\u5854<\/a><\/li><\/ul>\n\n\n<div class=\\\"wp-block-group\\\"><div class=\"wp-block-group__inner-container\"><div class=\\\"wp-block-group__inner-container\\\"><\/div><\/div><\/div>\n\n\n<h2><a>2.2 SSL<\/a>\u8bc1\u4e66\u6587\u4ef6\u8bf4\u660e<\/h2>\n\n\n<p>SSL\u8bc1\u4e66\u670d\u52a1\u652f\u6301Apache\u3001Nginx\u3001Tomcat\u3001IIS\u7b49\uff0c\u7533\u8bf7\u6210\u529f\u540e\u65b9\u53ef\u5c06\u4e0b\u8f7d\u8bc1\u4e66\u5e76\u5b89\u88c5\u5230\u5bf9\u5e94\u7684\u670d\u52a1\u5668\u4e2d\u3002<\/p>\n\n\n<p>\u4e0b\u8f7d\u7684\u8bc1\u4e66\u4e0b\u8f7d\u4e3b\u8981\u6709\u4ee5\u4e0b\u6587\u4ef6\uff1a<\/p>\n\n\n<ol><li>.key\u6587\u4ef6\u662f\u8bc1\u4e66\u79c1\u94a5\u6587\u4ef6\uff0c\u5982\u679c\u7533\u8bf7\u8bc1\u4e66\u65f6\u6ca1\u6709\u9009\u62e9\u7cfb\u7edf\u521b\u5efaCSR\uff0c\u5219\u6ca1\u6709\u8be5\u6587\u4ef6\u3002<\/li><li>.crt\u6587\u4ef6\u662f\u8bc1\u4e66\u6587\u4ef6\uff0c\u4e00\u822c\u5305\u542b\u4e24\u6bb5\u5185\u5bb9\u3002\u5982\u679c\u662fApache\u670d\u52a1\u5668\uff0c\u4f1a\u5c06\u8bc1\u4e66\u6587\u4ef6\u62c6\u5206\u6210 _public.crt\uff08\u8bc1\u4e66\u6587\u4ef6\uff09\u548c_chain.crt\uff08\u8bc1\u4e66\u94fe\u6216\u4e2d\u95f4\u8bc1\u4e66\u6587\u4ef6\uff09\u3002<\/li><li>.pem\u6587\u4ef6\u662f\u8bc1\u4e66\u6587\u4ef6\u3002<\/li><\/ol>\n\n\n<p><strong>\u8bf4\u660e<\/strong>\uff1a.crt\u6269\u5c55\u540d\u7684\u8bc1\u4e66\u6587\u4ef6\u91c7\u7528Base64-encoded\u7684PEM\u683c\u5f0f\u6587\u672c\u6587\u4ef6\uff0c\u53ef\u6839\u636e\u9700\u8981\uff0c\u4fee\u6539\u6210.pem\u7b49\u6269\u5c55\u540d\u3002<\/p>\n\n\n<p>          .pfx\u6587\u4ef6\uff0c\u4e00\u822c\u9002\u5408Tomcat\/IIS\u670d\u52a1\u5668\u3002\u6bcf\u6b21\u4e0b\u8f7d\u6216\u66f4\u65b0\u90fd\u4f1a\u4ea7\u751f\u65b0\u5bc6\u7801\uff0c\u8be5\u5bc6\u7801\u4ec5\u5339\u914d\u672c\u6b21\u4e0b\u8f7d\u7684\u8bc1\u4e66\u3002<\/p>\n\n\n<p>          CSR \u6587\u4ef6\u662f\u7533\u8bf7\u8bc1\u4e66\u65f6\u7531\u60a8\u4e0a\u4f20\u6216\u7cfb\u7edf\u5728\u7ebf\u751f\u6210\u7684\uff0c\u63d0\u4f9b\u7ed9 CA \u673a\u6784\u3002\u5b89\u88c5\u65f6\u53ef\u5ffd\u7565\u8be5\u6587\u4ef6\u3002<\/p>\n\n\n<h2><a>2.3 Apache<\/a>\u90e8\u7f72SSL\u8bc1\u4e66<\/h2>\n\n\n<h3><a>2.3.1 \u73af\u5883\u51c6\u5907<\/a><\/h3>\n\n\n<ul><li>\u4e0b\u8f7dApache\u670d\u52a1\u5668\u8bc1\u4e66<\/li><li>\u5b89\u88c5Open SSL<\/li><\/ul>\n\n\n<h3><a>2.3.2 \u5b89\u88c5\u90e8\u7f72<\/a><\/h3>\n\n\n<ul><li>\u521b\u5efassl\u76ee\u5f55<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> mkdir \/etc\/httpd\/ssl <\/pre>\n\n\n<ul><li>\u590d\u5236\u8bc1\u4e66\u6587\u4ef6\u5230SSL\u76ee\u5f55\u4e2d<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> cp *bundle.crt \/etc\/httpd\/ssl\n cp *.crt \/etc\/httpd\/ssl\n cp *.key \/etc\/httpd\/ssl <\/pre>\n\n\n<ul><li>\u5b89\u88c5 mod_ssl.so \u6a21\u5757<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> yum install mod_ssl <\/pre>\n\n\n<p><\/p>\n\n\n<ul><li>http.conf\u4fee\u6539\u52a0\u8f7d\u914d\u7f6e SSL \u7684\u914d\u7f6e\u76ee\u5f55<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> vi \/etc\/httpd\/conf\/httpd.conf\n Include conf.modules.d\/*.conf #\u53d6\u6389\u6ce8\u91ca\u7b26\u53f7\uff08#\uff09 <\/pre>\n\n\n<ul><li>\u914d\u7f6eSSL\u6a21\u5757<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> yum install mod_ssl\n vi \/etc\/httpd\/conf.modules.d\/00-ssl.conf\n LoadModule ssl_module modules\/mod_ssl.so \u53bb\u6389\u6ce8\u91ca\u7b26\u53f7\uff08#\uff09\n \u7f16\u8f91 \/etc\/httpd\/conf.d\/ssl.conf \u914d\u7f6e\u6587\u4ef6\u3002\u4fee\u6539\u5982\u4e0b\u5185\u5bb9\uff1a\n &lt;VirtualHost 0.0.0.0:443&gt;\n &nbsp;&nbsp;&nbsp;&nbsp; DocumentRoot \\\"\/var\/www\/html\\\"\n &nbsp;&nbsp;&nbsp;&nbsp; #\u586b\u5199\u8bc1\u4e66\u540d\u79f0\n &nbsp;&nbsp;&nbsp;&nbsp; ServerName www.weijing.co\n &nbsp;&nbsp;&nbsp;&nbsp; #\u542f\u7528 SSL \u529f\u80fd\n &nbsp;&nbsp;&nbsp;&nbsp; SSLEngine on\n &nbsp;&nbsp;&nbsp;&nbsp; #\u8bc1\u4e66\u6587\u4ef6\u7684\u8def\u5f84\n &nbsp;&nbsp;&nbsp;&nbsp; SSLCertificateFile \/etc\/httpd\/ssl\/2_www.weijing.co.crt\n &nbsp;&nbsp;#\u79c1\u94a5\u6587\u4ef6\u7684\u8def\u5f84\n &nbsp;&nbsp;&nbsp;&nbsp; SSLCertificateKeyFile \/etc\/httpd\/ssl\/3_www.weijing.co.key\n &nbsp;&nbsp;&nbsp;&nbsp; #\u8bc1\u4e66\u94fe\u6587\u4ef6\u7684\u8def\u5f84\n &nbsp;&nbsp;&nbsp;&nbsp; SSLCertificateChainFile \/etc\/httpd\/ssl\/1_root_bundle.crt\n &lt;\/VirtualHost&gt; <\/pre>\n\n\n<ul><li>\u81ea\u52a8\u8df3\u8f6cHTTPS<\/li><\/ul>\n\n\n<p>\u901a\u8fc7\u4ee5\u4e0b\u914d\u7f6e\uff0c\u5c06HTTP\u8bf7\u6c42\u81ea\u52a8\u91cd\u5b9a\u5411\u5230HTTPS\uff0c\u589e\u52a0\u4ee5\u4e0b\u5185\u5bb9\uff1a<\/p>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> Vi httpd.conf\n LoadModule rewrite_module modules\/mod_rewrite.so\n &lt;Directory \\\"\/var\/www\/html\\\"&gt;\n # \u65b0\u589e\n RewriteEngine on\n RewriteCond %{SERVER_PORT} !^443$\n RewriteRule ^(.*)?$ https:\/\/%{SERVER_NAME}%{REQUEST_URI} [L,R]\n &lt;\/Directory&gt; <\/pre>\n\n\n<p>\u5982\u679c\u4e0d\u5b58\u5728\u53ef\u6dfb\u52a0\u6587\u4ef6<\/p>\n\n\n<pre class=\\\"wp-block-preformatted\\\">echo \u2018LoadModule rewrite_module modules\/mod_rewrite.so\u2019 &gt;&gt; \/etc\/httpd\/conf.modules.d\/00-rewrite.conf <\/pre>\n\n\n<ul><li>\u91cd\u542fApache\u670d\u52a1<\/li><\/ul>\n\n\n<p>\u901a\u8fc7\u6d4f\u89c8\u5668https:\/\/www.weijing.co\u8fdb\u884c\u8bbf\u95ee\u3002<\/p>\n\n\n<h2><a>2.4 Nginx<\/a>\u90e8\u7f72SSL\u8bc1\u4e66<\/h2>\n\n\n<h3><a>2.4.1 \u73af\u5883\u51c6\u5907<\/a><\/h3>\n\n\n<ul><li>\u4e0b\u8f7dSSL\u8bc1\u4e66\u5e76\u4e0a\u4f20\u5230Nginx\u670d\u52a1\u5668\u4e2d<\/li><li>Nginx SSL\u7684\u6587\u4ef6<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> \u8bc1\u4e66\u6587\u4ef6\uff1a.pem\n \u79d8\u94a5\u6587\u4ef6\uff1a.key <\/pre>\n\n\n<h3><a>2.4.2 \u5b89\u88c5\u90e8\u7f72<\/a><\/h3>\n\n\n<ul><li>\u521b\u5efacert\u76ee\u5f55<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> mkdir \/usr\/local\/nginx\/conf\/cert\n cp weijing.co.pem \/usr\/local\/nginx\/conf\/cert\n cp weijing.co.key \/usr\/local\/nginx\/conf\/cert <\/pre>\n\n\n<ul><li>\u4fee\u6539nginx.conf<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> server {\n &nbsp;&nbsp;&nbsp;&nbsp; #SSL \u8bbf\u95ee\u7aef\u53e3\u53f7\u4e3a 443\n &nbsp;&nbsp;&nbsp;&nbsp; listen 443 ssl;\n &nbsp;&nbsp;&nbsp;&nbsp; #\u586b\u5199\u7ed1\u5b9a\u8bc1\u4e66\u7684\u57df\u540d\n &nbsp;&nbsp;&nbsp;&nbsp; server_name www.weijing.co;\n &nbsp;&nbsp;&nbsp;&nbsp; #\u8bc1\u4e66\u6587\u4ef6\u540d\u79f0\n &nbsp;&nbsp;&nbsp;&nbsp; ssl_certificate cert\/www.weijing.co_bundle.crt;\n &nbsp;&nbsp;&nbsp;&nbsp; #\u79c1\u94a5\u6587\u4ef6\u540d\u79f0\n &nbsp;&nbsp;&nbsp;&nbsp; ssl_certificate_key cert\/www.weijing.co.key;\n &nbsp;&nbsp;&nbsp;&nbsp; ssl_session_timeout 5m;\n &nbsp;&nbsp;&nbsp;&nbsp; #\u8bf7\u6309\u7167\u4ee5\u4e0b\u534f\u8bae\u914d\u7f6e\n &nbsp;&nbsp;&nbsp;&nbsp; ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\n &nbsp;&nbsp;&nbsp;&nbsp; #\u8bf7\u6309\u7167\u4ee5\u4e0b\u5957\u4ef6\u914d\u7f6e\uff0c\u914d\u7f6e\u52a0\u5bc6\u5957\u4ef6\uff0c\u5199\u6cd5\u9075\u5faa openssl \u6807\u51c6\u3002\n &nbsp;&nbsp;&nbsp;&nbsp; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;\n &nbsp;&nbsp;&nbsp;&nbsp; ssl_prefer_server_ciphers on;\n &nbsp;&nbsp;&nbsp;&nbsp; location \/ {\n &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; #\u7f51\u7ad9\u4e3b\u9875\u8def\u5f84\u3002\u6b64\u8def\u5f84\u4ec5\u4f9b\u53c2\u8003\uff0c\u5177\u4f53\u8bf7\u60a8\u6309\u7167\u5b9e\u9645\u76ee\u5f55\u64cd\u4f5c\u3002\n &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; root \/var\/www\/www.weijing.co\n &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; index&nbsp; index.html index.htm;\n &nbsp;&nbsp;&nbsp;&nbsp; }\n &nbsp;} <\/pre>\n\n\n<ul><li>\u81ea\u52a8\u8df3\u8f6cHTTPS<\/li><\/ul>\n\n\n<p>\u914d\u7f6enginx.conf\uff0c\u5c06HTTP\u8bf7\u6c42\u81ea\u52a8\u91cd\u5b9a\u5411\u5230HTTPS\uff0c\u589e\u52a0\u4ee5\u4e0b\u5185\u5bb9\uff1a<\/p>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> server {\n listen 443 ssl;\n #\u586b\u5199\u7ed1\u5b9a\u8bc1\u4e66\u7684\u57df\u540d\n server_name www.weijing.co;\n #\u7f51\u7ad9\u4e3b\u9875\u8def\u5f84\u3002\u6b64\u8def\u5f84\u4ec5\u4f9b\u53c2\u8003\uff0c\u5177\u4f53\u8bf7\u60a8\u6309\u7167\u5b9e\u9645\u76ee\u5f55\u64cd\u4f5c\u3002\n root \/var\/www\/www.weijing.co;\n index index.html index.htm;&nbsp;&nbsp;\n #\u8bc1\u4e66\u6587\u4ef6\u540d\u79f0\n ssl_certificate&nbsp; cert\/www.weijing.co_bundle.crt;\n #\u79c1\u94a5\u6587\u4ef6\u540d\u79f0\n ssl_certificate_key cert\/www.weijing.co.key;\n ssl_session_timeout 5m;\n ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;\n ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\n ssl_prefer_server_ciphers on;\n location \/ {\n &nbsp;&nbsp; index index.html index.htm;\n }\n }\n server {\n listen 80;\n #\u586b\u5199\u7ed1\u5b9a\u8bc1\u4e66\u7684\u57df\u540d\n server_name www.domain.com;\n #\u628ahttp\u7684\u57df\u540d\u8bf7\u6c42\u8f6c\u6210https\n return 301 https:\/\/$host$request_uri;\n } <\/pre>\n\n\n<ul><li>\u91cd\u542fNginx\u670d\u52a1<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\">nginx -s stop\nnginx -s start<\/pre>\n\n\n<ul><li>\u901a\u8fc7\u6d4f\u89c8\u5668\u8bbf\u95eehttps:\/\/www.weijing.co\u3002<\/li><\/ul>\n\n\n<h2><a>2.5 Tomcat<\/a>\u90e8\u7f72SSL\u8bc1\u4e66<\/h2>\n\n\n<h3><a>2.5.1 \u73af\u5883\u51c6\u5907<\/a><\/h3>\n\n\n<ul><li>\u4e0b\u8f7dSSL\u8bc1\u4e66\u5e76\u4e0a\u4f20\u5230Tomcat\u670d\u52a1\u5668\u4e2d<\/li><li>Tomcat SSL\u7684\u6587\u4ef6<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> <code>www.weijing.co.jks<\/code>&nbsp;\u5bc6\u94a5\u5e93\n <code>cart_password.txt<\/code>&nbsp;\u5bc6\u7801\u6587\u4ef6 <\/pre>\n\n\n<p><strong>\u8bf4\u660e<\/strong><strong> <\/strong>\u5982\u679c\u662fPFX\u683c\u5f0f\u8bc1\u4e66\uff0c\u53ef\u901a\u8fc7\u4ee5\u4e0b\u547d\u4ee4\u5c06PFX\u683c\u5f0f\u8bc1\u4e66\u8f6c\u5316\u6210JKS\u683c\u5f0f\u3002<\/p>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> keytool -importkeystore -srckeystore weijing.co.pfx -destkeystore weijing.co.jks -srcstoretype PKCS12 -deststoretype JKS <\/pre>\n\n\n<h3><a>2.5.2 \u5b89\u88c5\u90e8\u7f72<\/a><\/h3>\n\n\n<ul><li>\u914d\u7f6eSSL\u8bc1\u4e66<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> vi tomcat\/conf\/server.xml\n &lt;Connector port=\\\"443\\\" protocol=\\\"HTTP\/1.1\\\" SSLEnabled=\\\"true\\\"\n maxThreads=\\\"150\\\" scheme=\\\"https\\\" secure=\\\"true\\\"\n #\u8bc1\u4e66\u4fdd\u5b58\u7684\u8def\u5f84\n keystoreFile=\\\"\/usr\/*\/conf\/www.weijing.co.jks\\\"\n #\u5bc6\u94a5\u5e93\u5bc6\u7801\n keystorePass=\\\"******\\\"\n clientAuth=\\\"false\\\"\/&gt; <\/pre>\n\n\n<p>\u914d\u7f6e\u6587\u4ef6\u7684\u4e3b\u8981\u53c2\u6570\u8bf4\u660e\u5982\u4e0b\uff1a<\/p>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> keystoreFile\uff1a\u5bc6\u94a5\u5e93\u6587\u4ef6\u7684\u5b58\u653e\u4f4d\u7f6e.\u3002\n keystorePass\uff1a\u5bc6\u94a5\u5e93\u5bc6\u7801\u3002\n clientAuth\uff1a true\u8868\u793aTomcat\u5bf9 SSL \u5ba2\u6237\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u3002 <\/pre>\n\n\n<ul><li>\u81ea\u52a8\u8df3\u8f6cHTTPS<\/li><\/ul>\n\n\n<p>\u901a\u8fc7\u4ee5\u4e0b\u914d\u7f6e\uff0c\u5c06HTTP\u8bf7\u6c42\u81ea\u52a8\u91cd\u5b9a\u5411\u5230HTTPS\uff0c\u589e\u52a0\u4ee5\u4e0b\u5185\u5bb9\uff1a<\/p>\n\n\n<p>\u7f16\u8f91 tomcat\/conf\/web.xml \u6587\u4ef6\uff0c\u5728&lt;\/welcome-file-list&gt; \u4e0b\u9762\u6362\u884c\uff0c\u5e76\u6dfb\u52a0\u4ee5\u4e0b\u5185\u5bb9\uff1a<\/p>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> &lt;login-config&gt;\n &nbsp;&lt;!-- Authorization setting for SSL --&gt;\n &nbsp;&lt;auth-method&gt;CLIENT-CERT&lt;\/auth-method&gt;\n &nbsp;&lt;realm-name&gt;Client Cert Users-only Area&lt;\/realm-name&gt;\n &nbsp;&lt;\/login-config&gt;\n &nbsp;&lt;security-constraint&gt;\n &nbsp;&lt;!-- Authorization setting for SSL --&gt;\n &nbsp;&lt;web-resource-collection&gt;\n &nbsp;&lt;web-resource-name&gt;SSL&lt;\/web-resource-name&gt;\n &nbsp;&lt;url-pattern&gt;\/*&lt;\/url-pattern&gt;\n &nbsp;&lt;\/web-resource-collection&gt;\n &nbsp;&lt;user-data-constraint&gt;\n &nbsp;&lt;transport-guarantee&gt;CONFIDENTIAL&lt;\/transport-guarantee&gt;\n &nbsp;&lt;\/user-data-constraint&gt;\n &nbsp;&lt;\/security-constraint&gt; <\/pre>\n\n\n<ul><li>\u4fee\u6539server.xml\u914d\u7f6e\u6587\u4ef6\uff0c\u5c06redirectPort\u7aef\u53e38443\u4fee\u6539\u4e3a443\u7aef\u53e3<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> &lt;Connector port=\\\"80\\\" protocol=\\\"HTTP\/1.1\\\"\n connectionTimeout=\\\"20000\\\"\n redirectPort=\\\"443\\\" \/&gt; <\/pre>\n\n\n<ul><li>\u91cd\u542f\u670d\u52a1<\/li><\/ul>\n\n\n<pre class=\\\"wp-block-preformatted\\\"> .\/shutdown.sh&nbsp;\n .\/startup.sh&nbsp;&nbsp; <\/pre>\n\n\n<ul><li>\u901a\u8fc7\u6d4f\u89c8\u5668\u8bbf\u95eehttps:\/\/www.weijing.co\u3002<\/li><\/ul>\n\n\n<h2><a>2.6 IIS<\/a>\u90e8\u7f72SSL\u8bc1\u4e66<\/h2>\n\n\n<h3><a>2.6.1 \u73af\u5883\u51c6\u5907<\/a><\/h3>\n\n\n<ul><li>\u4e0b\u8f7dSSL\u8bc1\u4e66\u5e76\u4e0a\u4f20\u5230Nginx\u670d\u52a1\u5668\u4e2d<\/li><li>Nginx SSL\u7684\u6587\u4ef6<\/li><\/ul>\n\n\n<p>          \u8bc1\u4e66\u6587\u4ef6\uff1a.pfx<\/p>\n\n\n<p>          \u79d8\u94a5\u6587\u4ef6\uff1a.txt<\/p>\n\n\n<h3><a>2.6.2 \u5b89\u88c5\u90e8\u7f72<\/a><\/h3>\n\n\n<ol><li>\u6253\u5f00 IIS \u670d\u52a1\u7ba1\u7406\u5668\uff0c\u9009\u62e9\u8ba1\u7b97\u673a\u540d\u79f0\uff0c\u53cc\u51fb\u5de6\u4fa7\u680f\u4e2d\u7684\u201c\u670d\u52a1\u5668\u8bc1\u4e66\u201d\u3002<\/li><li>\u5728\u201c\u670d\u52a1\u5668\u8bc1\u4e66\u201d\u7a97\u53e3\u7684\u53f3\u4fa7\n\u201c\u64cd\u4f5c\u201d \u680f\u4e2d\uff0c\u9009\u62e9\u201c\u5bfc\u5165\u201d\u3002<\/li><li>&nbsp;\u5728\u201c\u5bfc\u5165\u8bc1\u4e66\u201d \u7a97\u53e3\u9009\u62e9\u8bc1\u4e66\u6587\u4ef6\u5b58\u653e\u8def\u5f84\uff0c\u8f93\u5165\u5bc6\u7801\u540e\u201c\u786e\u5b9a\u201d\u3002<\/li><li>\u9009\u4e2d\u7f51\u7ad9\u4e0b\u7684\u7ad9\u70b9\u540d\u79f0\uff0c\u9009\u62e9\u53f3\u4fa7\n\u201c\u7f16\u8f91\u7f51\u7ad9\u201d-\u201c\u7ed1\u5b9a\u201d\u3002<\/li><li>\u5728\u201c\u7f51\u7ad9\u7ed1\u5b9a\u201d\u9009\u62e9\u201c\u6dfb\u52a0\u201d\u3002<\/li><li>\u201c\u6dfb\u52a0\u7f51\u7ad9\u7ed1\u5b9a\u201d\u4e2d\uff0c\u7c7b\u578b\u9009\u62e9\uff1ahttps\uff0c\u7aef\u53e3\uff1a443\uff0c\u4e3b\u673a\u540d\u4e3a\u5f53\u524d\u7533\u8bf7\u8bc1\u4e66\u7684\u57df\u540d\uff0c\u5e76\u9009\u62e9\u6307\u5b9a\u5bf9\u5e94\u7684 SSL \u8bc1\u4e66\uff0c\u201c\u786e\u5b9a\u201d\u4fdd\u5b58\u3002<\/li><\/ol>\n\n\n<ul><li>\u81ea\u52a8\u8df3\u8f6cHTTPS<\/li><li>\u9009\u62e9\u7ad9\u70b9\u540d\u79f0\uff0c\u9009\u62e9\u201cURL\u91cd\u5199\u201d\u00e0\u201c\u64cd\u4f5c\u201d\u00e0\u201c\u6dfb\u52a0\u89c4\u5219\u201d<\/li><li>\u201c\u6dfb\u52a0\u89c4\u5219\u201d\u00e0 \u201c\u7a7a\u767d\u89c4\u5219\u201d\u00e0 \u201c\u786e\u5b9a\u201d<\/li><li>\u201c\u7f16\u8f91\u5165\u7ad9\u89c4\u5219\u201d\u4fee\u6539\u5982\u4e0b\u5185\u5bb9\uff1a<\/li><\/ul>\n\n\n<p>\u540d\u79f0\uff1a\u5f3a\u5236 HTTPS\u3002<\/p>\n\n\n<p>\u5339\u914dURL\uff1a\u5728 \u201c\u6a21\u5f0f\u201d \u4e2d\u8f93\u5165\uff1a(.*)\u3002<\/p>\n\n\n<p>\u6761\u4ef6\uff1a\u201c\u6dfb\u52a0\u201d \u00e0 \u6761\u4ef6\u8f93\u5165\uff1a{HTTPS} \u00e0 \u201c\u7c7b\u578b\u201d\uff1a\u201c\u4e0e\u6a21\u5f0f\u5339\u914d\u201d \u00e0 \u6a21\u5f0f\uff1a\u624b\u52a8\u8f93\u5165^OFF$\u3002<\/p>\n\n\n<p>\u64cd\u4f5c\uff1a\u64cd\u4f5c\u7c7b\u578b\uff1a\u91cd\u5b9a\u5411 \u00e0 \u91cd\u5b9a\u5411 URL\uff1ahttps:\/\/{HTTP_HOST}\/{R:1} \u00e0\u91cd\u5b9a\u5411\u7c7b\u578b\uff1a\u9009\u62e9\u53c2\u9605\u5176\u4ed6\uff08303\uff09\u3002<\/p>\n\n\n<ul><li>\u201c\u7ba1\u7406\u7f51\u7ad9\u201d&#8211;&gt; \u91cd\u65b0\u542f\u52a8<\/li><\/ul>\n\n\n<ul><li>\u901a\u8fc7\u6d4f\u89c8\u5668\u8bbf\u95ee\u9a8c\u8bc1<a href=\\\"https:\/\/www.weijing.co\\\">https:\/\/www.weijing.co<\/a>\u3002<\/li><\/ul>\n\n\n<h2><a>2.7 \u603b\u7ed3<\/a><\/h2>\n\n\n<p> \u4f01\u4e1a\u7f51\u7ad9\u542f\u7528\u901a\u8fc7CA\u9881\u53d1\u7684SSL\u8bc1\u4e66\uff0c\u5e2e\u52a9\u4f01\u4e1a\u5ba2\u6237\u901a\u8fc7HTTPS\u6d4f\u89c8\u7f51\u7ad9 \uff0c\u4fdd\u62a4\u4f01\u4e1a\u7f51\u7ad9\u9632\u6b62\u6d41\u91cf\u52ab\u6301\u3001\u63d0\u5347\u4f01\u4e1a\u7f51\u7ad9\u7684\u641c\u7d22\u6392\u540d\uff0c\u589e\u52a0\u4f01\u4e1a\u66dd\u5149\u7387\u3002\u675c\u7edd\u9493\u9c7c\u7f51\u7ad9\uff0c\u589e\u52a0\u4f01\u4e1a\u53ef\u4fe1\u5ea6\uff0c\u4e3a\u5ba2\u6237\u8d62\u5f97\u5ba2\u6237\u4fe1\u4efb\u3002 <\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4f01\u4e1a\u7f51\u7ad9\u542f\u7528\u901a\u8fc7CA\u9881\u53d1\u7684SSL\u8bc1\u4e66\uff0c\u5e2e\u52a9\u4f01\u4e1a\u5ba2\u6237\u901a\u8fc7HTTPS\u6d4f\u89c8\u7f51\u7ad9 \uff0c\u4fdd\u62a4\u4f01\u4e1a\u7f51\u7ad9\u9632\u6b62\u6d41\u91cf\u52ab\u6301\u3001\u63d0\u5347\u4f01\u4e1a\u7f51\u7ad9\u7684\u641c\u7d22\u6392\u540d\uff0c\u589e\u52a0\u4f01\u4e1a\u66dd\u5149\u7387\u3002\u675c\u7edd\u9493\u9c7c\u7f51\u7ad9\uff0c\u589e\u52a0\u4f01\u4e1a\u53ef\u4fe1\u5ea6\uff0c\u4e3a\u5ba2\u6237\u8d62\u5f97\u5ba2\u6237\u4fe1\u4efb\u3002 <\/p>\n","protected":false},"author":4,"featured_media":959,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"right-sidebar","site-content-layout":"content-boxed-container","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":""},"categories":[94],"tags":[],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"mailpoet_newsletter_max":false,"woocommerce_thumbnail":false,"woocommerce_single":false,"woocommerce_gallery_thumbnail":false,"shop_catalog":false,"shop_single":false,"shop_thumbnail":false},"uagb_author_info":{"display_name":"weijing","author_link":"http:\/\/www.weijing.co\/?author=4"},"uagb_comment_info":0,"uagb_excerpt":"\u4f01\u4e1a\u7f51\u7ad9\u542f\u7528\u901a\u8fc7CA\u9881\u53d1\u7684SSL\u8bc1\u4e66\uff0c\u5e2e\u52a9\u4f01\u4e1a\u5ba2\u6237\u901a\u8fc7HTTPS\u6d4f\u89c8\u7f51\u7ad9 \uff0c\u4fdd\u62a4\u4f01\u4e1a\u7f51\u7ad9\u9632\u6b62\u6d41\u91cf\u52ab\u6301\u3001\u63d0\u5347\u4f01\u4e1a&hellip;","_links":{"self":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts\/958"}],"collection":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=958"}],"version-history":[{"count":0,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts\/958\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/"}],"wp:attachment":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=958"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=958"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=958"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}