|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/ssltls-essentials-theory-and-implementation/
课程评论:没有评论
课程名称:SSL/TLS基础知识:理论与实践 课程概述: 在IT环境中,SSL/TLS通常在未完全理解的情况下被实施。无论你在IT领域工作多长时间,你都至少使用过一次SSL/TLS。无论是为了公司内部门户创建自签名证书,还是为了遵循信息安全部门要求的HTTPS转变;在大多数情况下,你可能只是按照步骤进行操作,而没有真正理解其中的原因和方法。本课程旨在帮助那些希望快速掌握SSL/TLS知识的初学者,尤其是针对初级开发人员、运营商和质量保证工程师设计的。 在学习过程中,你将明白SSL/TLS的原理,以及如何应用于实际场景。课程涵盖如下内容: - SSL/TLS及公钥基础结构(PKI)的概念 - X.509证书及其作用 - 通配符证书的使用时机 - CA、临时CA和叶子节点证书的解析 - 如何通过一个命令创建自签名证书 - 在Nginx、Apache和Tomcat服务器上部署证书的步骤 - 如何创建个人证书颁发机构(CA) - 使用Let's Encrypt等免费服务为网站安装证书 - 如何利用互TLS(mTLS)进行客户端身份验证 - 在Kubernetes Ingress Nginx控制器中使用SSL/TLS的方式 - 使用AWS证书管理器获取亚马逊的免费证书 课程还包括多个测验,以测试你的知识掌握情况。除了核心内容外,课程还提供了一些额外的讲座,这些讲座旨在为学生提供更多价值,但理解这些额外内容可能需要一定的背景知识。 通过学习SSL/TLS,你将丰富自己的职业技能,提高自己的竞争力,推动IT职业生涯的发展。课程提供30天无理由退款保证。现在就来注册吧!
SSL/TLS is often implemented without being fully understood!If you've worked in an IT environment of any size and for any period, you've used SSL/TLS at least once. Think of that self-signed certificate you've created for the company's internal portal or when the information security department required you to switch to HTTPS for all web communications.90% of the time, you follow the steps to implement SSL/TLS, but you don't really get the why and the how. Remember when the information security professional required you to use TLS 1.2 and not 1.1? what's the difference? Are we using SSL or TLS or both? Why does the browser sometimes show a warning message when you switch to HTTPS although you followed every step in the guide? What is mTLS?Do you have time to read books and articles about all that jargon? Probably not.This class is here to help you!SSL/TLS theory and implementation was designed for those of us who need to get up to speed with SSL/TLS as soon as possible. But they don't have time to go through all the books, articles, guides, and manuals.The class was created with junior developers, operators, and QA engineers in mind. It is a beginner's course. So, if you are a seasoned security professional with many years of IT security experience and you're looking to take your knowledge to the next level, this course is not for you.SSL/TLS is the kind of knowledge that will make you stand out of the crowd!IT professionals with more than one skill set are more likely to get hired/promoted. That's a fact. Your time is precious, and you need to widen your skillset as fast as possible. That's another fact.How to maximize your benefit from this class?Some people like to read the theory first, grasp the concept, and build a mental model. Further on, they start implementing what they've learned.Some other people prefer to get their hands dirty as soon as they can. If they are stuck with something, they refer to the theory and explanation.If you're of the first kind, you can go through the course from start to finish. Sections one and two draw the big picture and lay the ground for what's next. The rest of the class includes many hands-on exercises for the most common use cases of SSL/TLS.Those of you who are less patient can start directly at section three, which is the first section in the "implementation" part of the class.What is covered?· What is SSL/TLS and the Public Key Infrastructure (PKI)?· What is an X.509 certificate and how does it fit in the equation?· How and when to use wildcard certificates?· What is a CA, an intermediary CA, and a leaf/node certificate?· How to create a self-signed certificate in just one command?· How to deploy certificates on Nginx, Apache web server, and Apache Tomcat application server?· How to create your very own certificate authority (CA)?· How to create an intermediary CA for enhanced security?· How to use free services like Let's Encrypt to install certificates to your websites?· What and how to use mutual TLS (mTLS) for client authentication?· How to use SSL/TLS with Kubernetes Ingress Nginx controller?· How to use free certificates from Amazon using AWS certificate manager?In addition to several quizzes to test your knowledge.A note about Extra LecturesThis class includes more than one lecture which is labeled "extra lectures". The purpose of them is to provide even more value for the student. However, they may require some additional background that not everyone has. So, they are not strictly required to understand the core concept of the class, but they provide some extra value. For example, using SSL/TLS certificates with Kubernetes Ingress controller requires an understanding of Kubernetes clusters and how they work.Again, SSL/TLS is more implemented than understood.Enrich your knowledge, become an expert in multiple domains, and jumpstart your professional IT career.The course offers a 30-days money-back guarantee, no questions asked.Go ahead and enroll now!