Emissão do certificado SSL para o eConsignado
Para a segurança das informações, foi definida a utilização de autenticação com SSL mútuo e certificado digital. As informações para a aquisição dos certificados digitais encontram-se a seguir.
Certificado tipo A1 – ICP-Brasil
Como as Instituições Financeiras terão comportamento de cliente e, em alguns fluxos de negócio, terão comportamento de servidor e, para não ser necessário adquirir mais de um certificado por ambiente, é importante que, no campo “Extended Key Usage”, sejam configuradas as seguintes informações:
serverAuthentication
clientAuthentication
Campos obrigatórios a serem incluídos no Certificado
- CN = O common name é composto pelo host+domínio internet registrado (Exemplos: hapi-bancos.dataprev.gov.br ou api-bancos.dataprev.gov.br)
- OU = (Organization Unit) Nome da Instituição
- OU = NNNNNNNN (onde NNNNNNNN = número do CNPJ Raiz da instituição) (Exemplo: 42422253)
- O = Nome empresarial constante do CNPJ (Exemplo: EMPRESA DE TECNOLOGIA E INFORMACOES DA PREVIDENCIA DATAPREV SA)
- C = BR (campo preenchido automaticamente pela AC emissora do certificado)
- Poderão ser utilizados, opcionalmente, os campos “L” (Localidade) e/ou “ST” (Estado).
Observações
É vedado o reuso das chaves públicas utilizadas. Ao solicitar a emissão de um novo certificado para uso no eConsignado, é imperativo gerar uma nova chave pública. Certificados emitidos para ambientes diferentes (produção e homologação) devem conter chaves públicas diferentes.
Cada certificado deverá estar associado a um par de chaves únicas.
Exemplos para emissão
Decoder: https://redkestrel.co.uk/products/decoder/
Homologação
—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
Produção
—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–