69 lines
1.5 KiB
Markdown
69 lines
1.5 KiB
Markdown
# 【E21】E现场默认的受信任和不受信任的根证书即将过期，需要签发新的。
|
||
|
||
| ID | Creation Date | Assignee | Status |
|
||
|----|----------------|----------|--------|
|
||
| OMPUB-370 | 2022-02-16T20:31:15.000+0800 | 刘洋 | 完成 |
|
||
|
||
|
||
---
|
||
|
||
Expiry Date:
|
||
|
||
Trusted Default 2022-02-18 00:00:00
|
||
|
||
Untrusted 2022-02-18 00:00:00**liuyang** commented on *2022-02-17T09:23:08.923+0800*:
|
||
|
||
新签发的根证书的公私钥获取路径:
|
||
|
||
[https://files.geedge.net/library/b2e14451-b030-4e27-851b-5d94bbc1cf61/TSG%20CA/]
|
||
|
||
|
||
|
||
更新步骤如下:
|
||
# 登录TSG管理页面
|
||
# 进入kering管理: Profiles->Decryption->SSL Decryption Keyrings
|
||
# 修改 ID=1默认可信证书，上传tsg-ca-v3-trust-ca的公私钥
|
||
# 修改 ID=0默认不可信证书，上传tsg-ca-v3-untrust-ca的公私钥
|
||
# 请在客户端重新安装tsg-ca-v3-trust-ca公钥
|
||
|
||
|
||
|
||
---
|
||
|
||
**liuju** commented on *2022-02-17T15:32:41.452+0800*:
|
||
|
||
[~zhengchao] [~zhuwei] 信息港已完成新签发证书测试工作，E现场系统是否可以直接导入新签发的证书。
|
||
|
||
|
||
|
||
---
|
||
|
||
**zhuwei** commented on *2022-02-17T16:10:43.095+0800*:
|
||
|
||
如果弄好了就导入吧。另外要不要加戏从HSM生成证书导入走走流程
|
||
|
||
[~zhengchao]
|
||
|
||
|
||
|
||
---
|
||
|
||
**liuju** commented on *2022-02-17T21:00:44.995+0800*:
|
||
|
||
嗯，已导入家里新签发的根证书。
|
||
|
||
|
||
|
||
---
|
||
|
||
|
||
|
||
# Attachments
|
||
|
||
Attachment: 微信图片_20220216152831.png
|
||
|
||
|
||
|
||
|
||
|