SSLVPN系统中自主签发证书的设计与实现

针对SSLVPN系统中使用数字证书的昂贵费用及自助型证书授权系统存在的安全性和灵活性问题，给出了将两个系统融为一体的设计方案。方案考虑了用户处于公司内、外网的不同情况，设计了用户处于公司外网时专用的签发工具；最后，给出了系统的安全性、延迟等性能测试及分析。

Design and Implementation of Self-helping Issuing Certificate for SSL VPN

This paper researches on two problems,which are the high cost of digital certificate in SSL VPN system and the security and flexibility in self-helping certification authority system,and proposes a design integrating the two systems.Considering two different circumstances of users being inside or outside of the company's Intranet,the paper designs a special tool for the users outside.And finally,it tests and analyzes the security and the delay performance.