{"id":44509,"date":"2026-06-28T14:16:49","date_gmt":"2026-06-28T06:16:49","guid":{"rendered":"https:\/\/www.modbus.cn\/44509.html"},"modified":"2026-06-28T14:46:13","modified_gmt":"2026-06-28T06:46:13","slug":"modbus-security-protocol-tls-x509","status":"publish","type":"post","link":"https:\/\/www.modbus.cn\/en\/44509.html","title":{"rendered":"Modbus \u5b89\u5168\u534f\u8bae\u6df1\u5ea6\u89e3\u6790\uff1aTLS \u52a0\u5bc6\u3001X.509 \u8bc1\u4e66\u8ba4\u8bc1\u4e0e\u5de5\u4e1a\u7f51\u7edc\u5b89\u5168\u5b9e\u6218"},"content":{"rendered":"\n

Modbus \u5b89\u5168\u534f\u8bae\u6df1\u5ea6\u89e3\u6790\uff1aTLS \u52a0\u5bc6\u3001X.509 \u8bc1\u4e66\u8ba4\u8bc1\u4e0e\u5de5\u4e1a\u7f51\u7edc\u5b89\u5168\u5b9e\u6218<\/h1>\n\n\n\n

\u5173\u952e\u8bcd\uff1a<\/strong>Modbus \u5b89\u5168\u534f\u8bae\u3001Modbus Security\u3001TLS \u52a0\u5bc6 Modbus\u3001\u7aef\u53e3 802\u3001X.509 \u8bc1\u4e66\u3001\u5de5\u4e1a\u7f51\u7edc\u5b89\u5168<\/p>\n\n\n\n

Modbus \u534f\u8bae\u8bde\u751f\u4e8e 1979 \u5e74\u3002\u5728\u90a3\u4e2a\u5e74\u4ee3\uff0c\u5de5\u4e1a\u63a7\u5236\u7cfb\u7edf\u8fd0\u884c\u5728\u5c01\u95ed\u7684\u4e13\u6709\u7f51\u7edc\u4e2d\uff0c\u5b89\u5168\u5e76\u4e0d\u662f\u8bbe\u8ba1\u8003\u91cf\u3002\u56db\u5341\u591a\u5e74\u540e\u7684\u4eca\u5929\uff0c\u5f53\u8fd9\u4e9b\u7cfb\u7edf\u901a\u8fc7\u4ee5\u592a\u7f51\u548c\u4e92\u8054\u7f51\u76f8\u4e92\u8fde\u63a5\u65f6\uff0c\u7f3a\u4e4f\u5b89\u5168\u673a\u5236\u6210\u4e86 Modbus \u534f\u8bae\u6700\u81f4\u547d\u7684\u77ed\u677f\u3002<\/p>\n\n\n\n

2018 \u5e74\uff0cModbus \u7ec4\u7ec7\u6b63\u5f0f\u53d1\u5e03\u4e86 Modbus \u5b89\u5168\u534f\u8bae\u89c4\u8303\uff0c\u901a\u8fc7\u5728\u4f20\u8f93\u5c42\u5f15\u5165 TLS\uff08Transport Layer Security\uff09\u52a0\u5bc6\u548c X.509v3 \u8bc1\u4e66\u8ba4\u8bc1\uff0c\u4e3a Modbus \u901a\u4fe1\u63d0\u4f9b\u4e86\u8eab\u4efd\u8ba4\u8bc1\u3001\u6570\u636e\u52a0\u5bc6\u548c\u6d88\u606f\u5b8c\u6574\u6027\u4e09\u91cd\u4fdd\u62a4\u3002\u672c\u6587\u5c06\u4ece\u539f\u7406\u5230\u5b9e\u6218\uff0c\u5168\u9762\u89e3\u8bfb\u8fd9\u4e00\u5173\u952e\u7684\u5b89\u5168\u6269\u5c55\u3002<\/p>\n\n\n\n

\u4e00\u3001\u4e3a\u4ec0\u4e48 Modbus \u9700\u8981\u5b89\u5168\uff1f<\/h2>\n\n\n
\n
\"Modbus
\u25b2 \u56fe1\uff1aTLS 1.2\/1.3 \u5b8c\u6574\u63e1\u624b\u6d41\u7a0b \u2014 \u4eceTCP\u4e09\u6b21\u63e1\u624b\u5230\u52a0\u5bc6\u901a\u4fe1\u5efa\u7acb\u7684\u5168\u8fc7\u7a0b\u3002<\/figcaption><\/figure>\n<\/div>\n\n\n\n\n\n\n\n\n

1.1 \u4f20\u7edf Modbus \u7684\u5b89\u5168\u7f3a\u9677<\/h3>\n\n\n\n

\u6807\u51c6\u7684 Modbus RTU \u548c Modbus TCP \u534f\u8bae\u5728\u5b89\u5168\u65b9\u9762\u51e0\u4e4e\u662f\u300c\u4e0d\u8bbe\u9632\u300d\u7684\uff1a<\/p>\n\n\n\n

\n \n \n
\u5b89\u5168\u5c5e\u6027<\/th>Modbus RTU<\/th>Modbus TCP<\/th>\u98ce\u9669<\/th><\/tr>\n <\/thead>\n
\u8eab\u4efd\u8ba4\u8bc1<\/td>\u274c \u65e0<\/td>\u274c \u65e0<\/td>\u4efb\u4f55\u8bbe\u5907\u53ef\u4f2a\u88c5\u4e3a\u5408\u6cd5\u4e3b\u7ad9<\/td><\/tr>\n
\u6570\u636e\u52a0\u5bc6<\/td>\u274c \u65e0<\/td>\u274c \u65e0<\/td>\u62a5\u6587\u53ef\u88ab\u7a83\u542c\u548c\u7be1\u6539<\/td><\/tr>\n
\u6d88\u606f\u5b8c\u6574\u6027<\/td>\u26a0\ufe0f \u4ec5 CRC-16<\/td>\u26a0\ufe0f \u4ec5 TCP \u6821\u9a8c\u548c<\/td>\u65e0\u6cd5\u9632\u6b62\u6076\u610f\u7be1\u6539<\/td><\/tr>\n
\u91cd\u653e\u653b\u51fb\u9632\u62a4<\/td>\u274c \u65e0<\/td>\u274c \u65e0<\/td>\u5408\u6cd5\u62a5\u6587\u53ef\u88ab\u5f55\u5236\u540e\u91cd\u653e<\/td><\/tr>\n
\u8bbf\u95ee\u63a7\u5236<\/td>\u274c \u65e0<\/td>\u274c \u65e0<\/td>\u63a5\u5165\u603b\u7ebf\u7684\u8bbe\u5907\u53ef\u8bfb\u5199\u4efb\u4f55\u5bc4\u5b58\u5668<\/td><\/tr>\n <\/tbody>\n<\/table><\/figure>\n\n\n\n

1.2 \u771f\u5b9e\u7684\u5de5\u4e1a\u5b89\u5168\u4e8b\u4ef6<\/h3>\n\n\n\n

2015 \u5e74\u4e4c\u514b\u5170\u7535\u7f51\u653b\u51fb\u4e8b\u4ef6\u4e2d\uff0c\u653b\u51fb\u8005\u901a\u8fc7\u52ab\u6301 SCADA \u7cfb\u7edf\u5411\u53d8\u7535\u7ad9\u53d1\u9001\u4e86\u672a\u6388\u6743\u7684\u63a7\u5236\u547d\u4ee4\uff0c\u5bfc\u81f4 22.5 \u4e07\u4eba\u65ad\u7535\u3002\u5982\u679c\u5f53\u65f6\u4f7f\u7528\u4e86 Modbus \u5b89\u5168\u534f\u8bae\uff08\u6216\u7c7b\u4f3c\u7684\u8ba4\u8bc1\u52a0\u5bc6\u673a\u5236\uff09\uff0c\u8fd9\u79cd\u653b\u51fb\u5c06\u96be\u4ee5\u5b9e\u65bd\u3002<\/p>\n\n\n\n

2021 \u5e74\u4f5b\u7f57\u91cc\u8fbe\u5dde\u6c34\u5904\u7406\u5382\u653b\u51fb\u4e8b\u4ef6\u4e2d\uff0c\u653b\u51fb\u8005\u901a\u8fc7\u88ab\u5165\u4fb5\u7684 TeamViewer \u8fdc\u7a0b\u8fde\u63a5\uff0c\u76f4\u63a5\u4fee\u6539\u4e86 Modbus \u5bc4\u5b58\u5668\u4e2d\u7684\u6c22\u6c27\u5316\u94a0\u6295\u52a0\u91cf\u8bbe\u5b9a\u503c\uff0c\u9669\u4e9b\u9020\u6210\u5927\u89c4\u6a21\u516c\u5171\u5b89\u5168\u4e8b\u6545\u3002<\/p>\n\n\n\n

\u4e8c\u3001Modbus \u5b89\u5168\u534f\u8bae\u67b6\u6784<\/h2>\n\n\n\n

2.1 \u534f\u8bae\u6808\u5bf9\u6bd4<\/h3>\n\n\n\n
\u6807\u51c6 Modbus TCP               Modbus \u5b89\u5168\u534f\u8bae\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510               \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n\u2502  Modbus PDU \u2502               \u2502  Modbus PDU \u2502\n\u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524               \u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n\u2502  MBAP \u62a5\u5934   \u2502               \u2502  MBAP \u62a5\u5934   \u2502\n\u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524               \u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n\u2502     TCP     \u2502               \u2502    TLS 1.2+ \u2502\n\u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524               \u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n\u2502     IP      \u2502               \u2502     TCP     \u2502\n\u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524               \u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n\u2502   \u4ee5\u592a\u7f51     \u2502               \u2502     IP      \u2502\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518               \u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n  \u7aef\u53e3: 502                    \u2502   \u4ee5\u592a\u7f51     \u2502\n                               \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\n                                \u7aef\u53e3: 802<\/code><\/pre>\n\n\n\n
\u5173\u952e\u5dee\u5f02\uff1a<\/strong><\/p>\n\n\n\n
    \n    
  • \u4f7f\u7528 TLS 1.2 \u6216\u66f4\u9ad8\u7248\u672c\u8fdb\u884c\u4f20\u8f93\u5c42\u52a0\u5bc6<\/li>\n    
  • \u4f7f\u7528 X.509v3 \u6570\u5b57\u8bc1\u4e66\u8fdb\u884c\u53cc\u5411\u8eab\u4efd\u8ba4\u8bc1<\/li>\n    
  • \u4f7f\u7528\u7aef\u53e3 802\uff08\u800c\u975e\u6807\u51c6\u7684 502\uff09<\/li>\n    
  • PDU \u548c MBAP \u62a5\u5934\u683c\u5f0f\u4fdd\u6301\u4e0d\u53d8\uff0c\u5b8c\u5168\u5411\u540e\u517c\u5bb9<\/li>\n<\/ul>\n\n\n\n
    2.2 \u5b89\u5168\u63e1\u624b\u6d41\u7a0b<\/h3>\n\n\n\n
    Modbus \u5b89\u5168\u534f\u8bae\u7684\u8fde\u63a5\u5efa\u7acb\u5206\u4e3a\u4e24\u4e2a\u9636\u6bb5\uff1a<\/p>\n\n\n\n
      \n    
    1. TLS \u63e1\u624b\uff1a<\/strong>\u5ba2\u6237\u7aef\u4e0e\u670d\u52a1\u5668\u8fdb\u884c\u6807\u51c6\u7684 TLS \u63e1\u624b\uff0c\u534f\u5546\u52a0\u5bc6\u5957\u4ef6\u3001\u4ea4\u6362\u8bc1\u4e66\u3001\u5efa\u7acb\u52a0\u5bc6\u901a\u9053<\/li>\n    
    2. \u8bc1\u4e66\u9a8c\u8bc1\uff1a<\/strong>\u53cc\u65b9\u9a8c\u8bc1\u5bf9\u65b9\u8bc1\u4e66\u7684\u6709\u6548\u6027\uff08\u7b7e\u540d\u94fe\u3001\u6709\u6548\u671f\u3001\u540a\u9500\u72b6\u6001\uff09<\/li>\n    
    3. \u89d2\u8272\u534f\u5546\uff1a<\/strong>\u901a\u8fc7 X.509v3 \u8bc1\u4e66\u4e2d\u7684\u6269\u5c55\u5b57\u6bb5\uff08Extended Key Usage\uff09\u786e\u5b9a\u8bbe\u5907\u89d2\u8272\uff08\u5ba2\u6237\u7aef\/\u670d\u52a1\u5668\uff09<\/li>\n    
    4. Modbus \u901a\u4fe1\uff1a<\/strong>\u5728 TLS \u52a0\u5bc6\u901a\u9053\u5185\u8fdb\u884c\u6807\u51c6\u7684 Modbus PDU \u4ea4\u6362<\/li>\n<\/ol>\n\n\n\n
      Modbus \u5b89\u5168\u534f\u8bae\u63e1\u624b\u6d41\u7a0b\uff08\u7b80\u5316\uff09:\n\nClient                                          Server\n  \u2502                                               \u2502\n  \u2502\u2500\u2500\u2500\u2500 TCP SYN (\u7aef\u53e3 802) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2192\u2502\n  \u2502\u2190\u2500\u2500\u2500 TCP SYN-ACK \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2502\n  \u2502\u2500\u2500\u2500\u2500 TCP ACK \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2192\u2502\n  \u2502                                               \u2502\n  \u2502\u2500\u2500\u2500\u2500 ClientHello (\u652f\u6301\u7684\u52a0\u5bc6\u5957\u4ef6) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2192\u2502\n  \u2502\u2190\u2500\u2500\u2500 ServerHello + \u670d\u52a1\u5668\u8bc1\u4e66 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2502\n  \u2502\u2190\u2500\u2500\u2500 CertificateRequest (\u8bf7\u6c42\u5ba2\u6237\u7aef\u8bc1\u4e66) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2502\n  \u2502\u2500\u2500\u2500\u2500 ClientCertificate + ClientKeyExchange \u2500\u2500\u2500\u2500\u2192\u2502\n  \u2502\u2500\u2500\u2500\u2500 CertificateVerify \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2192\u2502\n  \u2502\u2500\u2500\u2500\u2500 ChangeCipherSpec + Finished \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2192\u2502\n  \u2502\u2190\u2500\u2500\u2500 ChangeCipherSpec + Finished \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2502\n  \u2502                                               \u2502\n  \u2502\u25c4\u2550\u2550\u2550\u2550\u2550 TLS \u52a0\u5bc6\u901a\u9053\u5df2\u5efa\u7acb \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u25ba\u2502\n  \u2502                                               \u2502\n  \u2502\u2500\u2500\u2500\u2500 Modbus PDU (\u52a0\u5bc6) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2192\u2502\n  \u2502\u2190\u2500\u2500\u2500 Modbus PDU (\u52a0\u5bc6) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2502\n  \u2502                                               \u2502<\/code><\/pre>\n\n\n\n
      \u4e09\u3001X.509v3 \u8bc1\u4e66\u5728 Modbus \u5b89\u5168\u534f\u8bae\u4e2d\u7684\u5e94\u7528<\/h2>\n\n\n\n
      3.1 \u8bc1\u4e66\u4e2d\u7684\u89d2\u8272\u5b9a\u4e49<\/h3>\n\n\n\n
      Modbus \u5b89\u5168\u534f\u8bae\u901a\u8fc7 X.509v3 \u8bc1\u4e66\u7684 Extended Key Usage\uff08EKU\uff09\u6269\u5c55\u6765\u5b9a\u4e49\u8bbe\u5907\u89d2\u8272\uff1a<\/p>\n\n\n\n
      \n    \n        \n        
      \u89d2\u8272<\/th>EKU OID<\/th>\u8bf4\u660e<\/th><\/tr>\n    <\/thead>\n    
      Modbus \u5ba2\u6237\u7aef<\/td>1.3.6.1.4.1.50316.802.1<\/td>\u53d1\u8d77\u8bf7\u6c42\u7684\u4e00\u65b9\uff08\u4e3b\u7ad9\uff09<\/td><\/tr>\n        
      Modbus \u670d\u52a1\u5668<\/td>1.3.6.1.4.1.50316.802.2<\/td>\u54cd\u5e94\u8bf7\u6c42\u7684\u4e00\u65b9\uff08\u4ece\u7ad9\uff09<\/td><\/tr>\n    <\/tbody>\n<\/table><\/figure>\n\n\n\n
      \u5728 TLS \u63e1\u624b\u5b8c\u6210\u540e\uff0c\u53cc\u65b9\u68c0\u67e5\u5bf9\u65b9\u8bc1\u4e66\u4e2d\u7684 EKU \u6269\u5c55\uff0c\u786e\u4fdd\u89d2\u8272\u5339\u914d\u3002\u4f8b\u5982\uff0c\u5982\u679c\u670d\u52a1\u5668\u8bc1\u4e66\u4e2d\u5305\u542b\u5ba2\u6237\u7aef EKU\uff0c\u6216\u5ba2\u6237\u7aef\u8bc1\u4e66\u4e2d\u5305\u542b\u670d\u52a1\u5668 EKU\uff0c\u8fde\u63a5\u5c06\u88ab\u62d2\u7edd\u3002<\/p>\n\n\n\n
      3.2 \u8bc1\u4e66\u751f\u547d\u5468\u671f\u7ba1\u7406<\/h3>\n\n\n\n
      \u5728\u5de5\u4e1a\u81ea\u52a8\u5316\u73af\u5883\u4e2d\uff0c\u8bc1\u4e66\u7ba1\u7406\u9762\u4e34\u7740\u72ec\u7279\u7684\u6311\u6218\uff1a<\/p>\n\n\n\n
        \n    
      • \u8bbe\u5907\u5bff\u547d\u957f\uff1a<\/strong>\u5de5\u4e1a\u8bbe\u5907\u53ef\u80fd\u8fd0\u884c 10~20 \u5e74\uff0c\u8bc1\u4e66\u5fc5\u987b\u63d0\u524d\u89c4\u5212\u6709\u6548\u671f<\/li>\n    
      • \u79bb\u7ebf\u73af\u5883\uff1a<\/strong>\u5f88\u591a\u5de5\u4e1a\u7f51\u7edc\u65e0\u6cd5\u8bbf\u95ee\u4e92\u8054\u7f51\uff0c\u4e0d\u80fd\u4f7f\u7528\u516c\u5171 CA \u7b7e\u53d1\u7684\u8bc1\u4e66<\/li>\n    
      • \u6d77\u91cf\u8bbe\u5907\uff1a<\/strong>\u4e00\u4e2a\u5de5\u5382\u53ef\u80fd\u6709\u6570\u5343\u4e2a Modbus \u8282\u70b9\uff0c\u9010\u4e00\u7ba1\u7406\u8bc1\u4e66\u4e0d\u73b0\u5b9e<\/li>\n<\/ul>\n\n\n\n
        \u63a8\u8350\u65b9\u6848\uff1a<\/strong>\u642d\u5efa\u672c\u5730 PKI\uff08\u516c\u94a5\u57fa\u7840\u8bbe\u65bd\uff09\uff0c\u4f7f\u7528\u79c1\u6709 CA \u7b7e\u53d1\u8bc1\u4e66\uff1a<\/p>\n\n\n\n
        # \u4f7f\u7528 OpenSSL \u642d\u5efa\u5de5\u4e1a\u7ea7\u79c1\u6709 CA\n\n# \u6b65\u9aa4 1: \u521b\u5efa\u6839 CA \u5bc6\u94a5\u548c\u8bc1\u4e66\nopenssl genrsa -out rootCA.key 4096\nopenssl req -x509 -new -nodes -key rootCA.key \n  -sha256 -days 7300 -out rootCA.crt \n  -subj \"\/C=CN\/ST=Guangdong\/L=Shenzhen\/O=FactoryName\/CN=Factory Root CA\"\n\n# \u6b65\u9aa4 2: \u521b\u5efa Modbus \u670d\u52a1\u5668\u8bc1\u4e66\nopenssl genrsa -out server.key 2048\nopenssl req -new -key server.key -out server.csr \n  -subj \"\/C=CN\/ST=Guangdong\/L=Shenzhen\/O=FactoryName\/CN=PLC-001\"\n\n# \u6b65\u9aa4 3: \u6dfb\u52a0 EKU \u6269\u5c55\uff08Modbus \u670d\u52a1\u5668\u89d2\u8272\uff09\ncat > server_eku.cnf <<EOF\n[ext]\nextendedKeyUsage = 1.3.6.1.4.1.50316.802.2\nkeyUsage = digitalSignature, keyEncipherment\nEOF\n\n# \u6b65\u9aa4 4: \u4f7f\u7528 CA \u7b7e\u53d1\u8bc1\u4e66\nopenssl x509 -req -in server.csr -CA rootCA.crt -CAkey rootCA.key \n  -CAcreateserial -out server.crt -days 3650 -sha256 \n  -extfile server_eku.cnf -extensions ext<\/code><\/pre>\n\n\n\n
        \u56db\u3001\u52a0\u5bc6\u5957\u4ef6\u9009\u62e9<\/h2>\n\n\n\n
        \u4e0d\u662f\u6240\u6709 TLS \u52a0\u5bc6\u5957\u4ef6\u90fd\u9002\u5408\u5de5\u4e1a\u73af\u5883\u3002\u9700\u8981\u5e73\u8861\u5b89\u5168\u6027\u548c\u6027\u80fd\uff1a<\/p>\n\n\n\n
        4.1 \u63a8\u8350\u52a0\u5bc6\u5957\u4ef6<\/h3>\n\n\n\n
        \n    \n        \n        
        \u52a0\u5bc6\u5957\u4ef6<\/th>\u5b89\u5168\u7ea7\u522b<\/th>\u6027\u80fd\u5f71\u54cd<\/th>\u63a8\u8350\u5ea6<\/th><\/tr>\n    <\/thead>\n    
        TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256<\/td>\u9ad8<\/td>\u4f4e<\/td>\u2605\u2605\u2605\u2605\u2605<\/td><\/tr>\n        
        TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256<\/td>\u9ad8<\/td>\u4e2d<\/td>\u2605\u2605\u2605\u2605\u2606<\/td><\/tr>\n        
        TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384<\/td>\u6781\u9ad8<\/td>\u4e2d<\/td>\u2605\u2605\u2605\u2605\u2606<\/td><\/tr>\n        
        TLS_AES_128_GCM_SHA256 (TLS 1.3)<\/td>\u9ad8<\/td>\u4f4e<\/td>\u2605\u2605\u2605\u2605\u2605<\/td><\/tr>\n    <\/tbody>\n<\/table><\/figure>\n\n\n\n
        \u63a8\u8350\uff1a<\/strong>AES-128-GCM \u5728\u5927\u591a\u6570 ARM Cortex-M \u7ea7\u522b\u7684\u5d4c\u5165\u5f0f\u82af\u7247\u4e0a\u90fd\u6709\u786c\u4ef6\u52a0\u901f\u652f\u6301\uff0c\u6027\u80fd\u635f\u5931\u6781\u5c0f\u3002\u5bf9\u4e8e\u8d44\u6e90\u7d27\u5f20\u7684\u5d4c\u5165\u5f0f\u8bbe\u5907\uff0cAES-128-GCM \u662f\u6700\u4f73\u9009\u62e9\u3002<\/p>\n\n\n\n
        4.2 \u5d4c\u5165\u5f0f\u8bbe\u5907\u4e0a\u7684 TLS \u6027\u80fd<\/h3>\n\n\n\n
        TLS \u63e1\u624b\u7684\u8ba1\u7b97\u5f00\u9500\u4e3b\u8981\u96c6\u4e2d\u5728\u975e\u5bf9\u79f0\u52a0\u5bc6\u64cd\u4f5c\uff08\u8bc1\u4e66\u7b7e\u540d\u9a8c\u8bc1\u3001\u5bc6\u94a5\u4ea4\u6362\uff09\u4e0a\u3002\u4ee5\u4e0b\u662f\u5728\u4e0d\u540c\u5e73\u53f0\u4e0a\u7684 TLS 1.2 \u63e1\u624b\u65f6\u95f4\u6d4b\u8bd5\u6570\u636e\uff1a<\/p>\n\n\n\n
        \n    \n        \n        
        \u5e73\u53f0<\/th>CPU<\/th>\u9891\u7387<\/th>TLS \u63e1\u624b\u65f6\u95f4<\/th><\/tr>\n    <\/thead>\n    
        Raspberry Pi 4<\/td>Cortex-A72<\/td>1.5 GHz<\/td>~15 ms<\/td><\/tr>\n        
        STM32H7<\/td>Cortex-M7<\/td>480 MHz<\/td>~350 ms<\/td><\/tr>\n        
        ESP32<\/td>Xtensa LX6<\/td>240 MHz<\/td>~800 ms<\/td><\/tr>\n        
        STM32F4\uff08\u8f6f\u4ef6 ECC\uff09<\/td>Cortex-M4<\/td>168 MHz<\/td>~3~5 \u79d2<\/td><\/tr>\n    <\/tbody>\n<\/table><\/figure>\n\n\n\n
        \u91cd\u8981\uff1a<\/strong>\u5728\u8d44\u6e90\u6781\u4f4e\u7684\u8bbe\u5907\u4e0a\uff08\u5982 STM32F4 \u7ea7\u522b\uff09\uff0c\u5efa\u8bae\u4f7f\u7528 ECDSA \u8bc1\u4e66\uff08\u800c\u975e RSA\uff09\uff0c\u56e0\u4e3a ECDSA \u7684\u7b7e\u540d\u9a8c\u8bc1\u901f\u5ea6\u8fdc\u5feb\u4e8e RSA\u3002\u6216\u8003\u8651\u4f7f\u7528\u9884\u5171\u4eab\u5bc6\u94a5\uff08PSK\uff09\u6a21\u5f0f\uff0c\u907f\u514d\u975e\u5bf9\u79f0\u52a0\u5bc6\u64cd\u4f5c\u3002<\/p>\n\n\n\n
        \u4e94\u3001\u4e0e\u6807\u51c6 Modbus TCP \u7684\u4e92\u64cd\u4f5c\u6027<\/h2>\n\n\n\n
        Modbus \u5b89\u5168\u534f\u8bae\u8bbe\u8ba1\u4e3a\u5411\u540e\u517c\u5bb9\u3002\u540c\u4e00\u4e2a\u8bbe\u5907\u53ef\u4ee5\u540c\u65f6\u652f\u6301\u6807\u51c6\u7684 Modbus TCP\uff08\u7aef\u53e3 502\uff09\u548c Modbus \u5b89\u5168\u534f\u8bae\uff08\u7aef\u53e3 802\uff09\uff0c\u4f46\u8fd9\u5e26\u6765\u4e86\u4e00\u4e2a\u5173\u952e\u7684\u5b89\u5168\u95ee\u9898\uff1a<\/p>\n\n\n\n
        \u5982\u679c\u4e00\u4e2a\u8bbe\u5907\u540c\u65f6\u5f00\u653e 502 \u548c 802 \u7aef\u53e3\uff0c\u653b\u51fb\u8005\u5b8c\u5168\u53ef\u4ee5\u4f7f\u7528 502 \u7aef\u53e3\u7ed5\u8fc7\u6240\u6709\u5b89\u5168\u673a\u5236\uff01<\/strong><\/p>\n\n\n\n
        \u5b89\u5168\u90e8\u7f72\u5efa\u8bae\uff1a<\/strong><\/p>\n\n\n\n
          \n    
        1. \u5728\u751f\u4ea7\u73af\u5883\u4e2d\uff0c\u5173\u95ed 502 \u7aef\u53e3\uff0c\u53ea\u5f00\u653e 802 \u7aef\u53e3<\/li>\n    
        2. \u5982\u679c\u5fc5\u987b\u4fdd\u7559 502\uff08\u5982\u517c\u5bb9\u8001\u7cfb\u7edf\uff09\uff0c\u4f7f\u7528\u9632\u706b\u5899\u5c06 502 \u7aef\u53e3\u7684\u8bbf\u95ee\u9650\u5236\u5728\u7279\u5b9a IP\/\u5b50\u7f51<\/li>\n    
        3. \u5728 502 \u7aef\u53e3\u4e0a\u5b9e\u65bd\u5e94\u7528\u5c42\u7684\u53ea\u8bfb\u9650\u5236\uff08\u5982\u679c\u8bbe\u5907\u652f\u6301\uff09<\/li>\n<\/ol>\n\n\n\n
          \u516d\u3001Modbus \u5b89\u5168\u534f\u8bae\u7684\u7f16\u7a0b\u5b9e\u73b0<\/h2>\n\n\n\n
          \u4ee5\u4e0b\u662f\u4e00\u4e2a\u4f7f\u7528 Python \u5b9e\u73b0 Modbus \u5b89\u5168\u534f\u8bae\u5ba2\u6237\u7aef\u7684\u5b8c\u6574\u793a\u4f8b\uff1a<\/p>\n\n\n\n
          #!\/usr\/bin\/env python3\n\"\"\"\nModbus \u5b89\u5168\u534f\u8bae\u5ba2\u6237\u7aef\u793a\u4f8b\n\u4f7f\u7528 TLS \u52a0\u5bc6\u8fde\u63a5\u5230 Modbus Security \u670d\u52a1\u5668\uff08\u7aef\u53e3 802\uff09\n\"\"\"\n\nimport ssl\nimport socket\nimport struct\n\nclass ModbusSecurityClient:\n    def __init__(self, host, port=802):\n        self.host = host\n        self.port = port\n        \n        # \u521b\u5efa TLS \u4e0a\u4e0b\u6587\n        self.ssl_context = ssl.create_default_context(\n            purpose=ssl.Purpose.SERVER_AUTH\n        )\n        \n        # \u52a0\u8f7d\u5ba2\u6237\u7aef\u8bc1\u4e66\u548c\u5bc6\u94a5\n        self.ssl_context.load_cert_chain(\n            certfile='client.crt',\n            keyfile='client.key'\n        )\n        \n        # \u52a0\u8f7d CA \u8bc1\u4e66\uff08\u7528\u4e8e\u9a8c\u8bc1\u670d\u52a1\u5668\u8bc1\u4e66\uff09\n        self.ssl_context.load_verify_locations(\n            cafile='rootCA.crt'\n        )\n        \n        # \u5f3a\u5236\u8981\u6c42\u9a8c\u8bc1\u670d\u52a1\u5668\u8bc1\u4e66\n        self.ssl_context.verify_mode = ssl.CERT_REQUIRED\n        \n        # \u8bbe\u7f6e\u6700\u4f4e TLS \u7248\u672c\n        self.ssl_context.minimum_version = ssl.TLSVersion.TLSv1_2\n        \n        self.sock = None\n        self.transaction_id = 0\n    \n    def connect(self):\n        \"\"\"\u5efa\u7acb TLS \u5b89\u5168\u8fde\u63a5\"\"\"\n        raw_sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n        raw_sock.settimeout(5.0)\n        \n        # \u5c06\u666e\u901a socket \u5305\u88c5\u4e3a TLS socket\n        self.sock = self.ssl_context.wrap_socket(\n            raw_sock,\n            server_hostname=self.host\n        )\n        self.sock.connect((self.host, self.port))\n        \n        # \u83b7\u53d6\u5e76\u9a8c\u8bc1\u670d\u52a1\u5668\u8bc1\u4e66\n        server_cert = self.sock.getpeercert()\n        print(f\"\u5df2\u8fde\u63a5\u5230 {server_cert['subject']}\")\n        print(f\"TLS \u7248\u672c: {self.sock.version()}\")\n        print(f\"\u52a0\u5bc6\u5957\u4ef6: {self.sock.cipher()}\")\n    \n    def read_holding_registers(self, unit_id, start_addr, count):\n        \"\"\"\u529f\u80fd\u7801 0x03 - \u8bfb\u4fdd\u6301\u5bc4\u5b58\u5668\"\"\"\n        self.transaction_id += 1\n        \n        # \u6784\u9020 MBAP \u62a5\u5934 + PDU\n        mbap = struct.pack('>HHHB',\n            self.transaction_id,  # \u4e8b\u52a1\u6807\u8bc6\u7b26\n            0x0000,               # \u534f\u8bae\u6807\u8bc6\u7b26\n            0x0006,               # \u957f\u5ea6\uff08unit_id + func + data\uff09\n            unit_id               # \u5355\u5143\u6807\u8bc6\u7b26\n        )\n        \n        pdu = struct.pack('>BHH',\n            0x03,        # \u529f\u80fd\u7801\uff1a\u8bfb\u4fdd\u6301\u5bc4\u5b58\u5668\n            start_addr,  # \u8d77\u59cb\u5730\u5740\n            count        # \u5bc4\u5b58\u5668\u6570\u91cf\n        )\n        \n        request = mbap + pdu\n        \n        # \u901a\u8fc7 TLS \u52a0\u5bc6\u901a\u9053\u53d1\u9001\n        self.sock.sendall(request)\n        \n        # \u63a5\u6536\u54cd\u5e94\n        response = self.sock.recv(1024)\n        \n        # \u89e3\u6790 MBAP \u62a5\u5934\n        tid, pid, length, uid = struct.unpack('>HHHB', response[:7])\n        \n        if tid != self.transaction_id:\n            raise Exception(\"\u4e8b\u52a1 ID \u4e0d\u5339\u914d\uff01\")\n        \n        # \u89e3\u6790 PDU\n        func = response[7]\n        if func & 0x80:\n            raise Exception(f\"\u5f02\u5e38\u7801: 0x{response[8]:02X}\")\n        \n        byte_count = response[8]\n        data = response[9:9+byte_count]\n        \n        return data\n    \n    def close(self):\n        if self.sock:\n            self.sock.close()\n\n\n# \u4f7f\u7528\u793a\u4f8b\nif __name__ == '__main__':\n    client = ModbusSecurityClient('192.168.1.100', 802)\n    try:\n        client.connect()\n        data = client.read_holding_registers(1, 0x0000, 10)\n        print(f\"\u8bfb\u53d6\u5230\u6570\u636e: {data.hex()}\")\n    finally:\n        client.close()<\/code><\/pre>\n\n\n\n
          \u4e03\u3001\u5b89\u5168\u90e8\u7f72\u6700\u4f73\u5b9e\u8df5 Checklist<\/h2>\n\n\n\n
          \n    \n        \n        
          #<\/th>\u68c0\u67e5\u9879<\/th>\u4f18\u5148\u7ea7<\/th><\/tr>\n    <\/thead>\n    
          1<\/td>\u4f7f\u7528 Modbus \u5b89\u5168\u534f\u8bae\uff08\u7aef\u53e3 802\uff09\u66ff\u4ee3\u6807\u51c6 Modbus TCP\uff08\u7aef\u53e3 502\uff09<\/td>\ud83d\udd34 \u9ad8<\/td><\/tr>\n        
          2<\/td>\u90e8\u7f72\u79c1\u6709 PKI\uff0c\u4f7f\u7528 ECDSA \u8bc1\u4e66\uff08\u4f18\u5148\u4e8e RSA\uff09<\/td>\ud83d\udd34 \u9ad8<\/td><\/tr>\n        
          3<\/td>\u4f7f\u7528 TLS 1.2 \u53ca\u4ee5\u4e0a\u7248\u672c\uff0c\u7981\u7528 TLS 1.0\/1.1<\/td>\ud83d\udd34 \u9ad8<\/td><\/tr>\n        
          4<\/td>\u5728\u8bc1\u4e66\u4e2d\u6b63\u786e\u8bbe\u7f6e EKU \u6269\u5c55\uff0c\u533a\u5206\u5ba2\u6237\u7aef\/\u670d\u52a1\u5668\u89d2\u8272<\/td>\ud83d\udfe1 \u4e2d<\/td><\/tr>\n        
          5<\/td>\u5982\u679c\u540c\u65f6\u5f00\u653e 502 \u548c 802\uff0c\u7528\u9632\u706b\u5899\u9650\u5236 502 \u7684\u8bbf\u95ee\u8303\u56f4<\/td>\ud83d\udd34 \u9ad8<\/td><\/tr>\n        
          6<\/td>\u5efa\u7acb\u8bc1\u4e66\u751f\u547d\u5468\u671f\u7ba1\u7406\u5236\u5ea6\uff08\u5b9a\u671f\u8f6e\u6362\u3001\u540a\u9500\u6e05\u5355\uff09<\/td>\ud83d\udfe1 \u4e2d<\/td><\/tr>\n        
          7<\/td>\u4e3a\u5173\u952e\u5bc4\u5b58\u5668\u5b9e\u65bd\u5e94\u7528\u5c42\u8bbf\u95ee\u63a7\u5236\uff08\u53ea\u8bfb\/\u8bfb\u5199\u5206\u79bb\uff09<\/td>\ud83d\udfe1 \u4e2d<\/td><\/tr>\n        
          8<\/td>\u90e8\u7f72\u7f51\u7edc\u5165\u4fb5\u68c0\u6d4b\u7cfb\u7edf\uff08NIDS\uff09\uff0c\u76d1\u63a7\u5f02\u5e38 Modbus \u901a\u4fe1\u884c\u4e3a<\/td>\ud83d\udfe2 \u4f4e<\/td><\/tr>\n        
          9<\/td>\u8bb0\u5f55\u5e76\u5ba1\u8ba1\u6240\u6709 Modbus \u5199\u64cd\u4f5c\uff08\u8c01\u3001\u4f55\u65f6\u3001\u5199\u4e86\u4ec0\u4e48\uff09<\/td>\ud83d\udfe1 \u4e2d<\/td><\/tr>\n    <\/tbody>\n<\/table><\/figure>\n\n\n\n
          \u516b\u3001\u5e38\u89c1\u95ee\u9898 FAQ<\/h2>\n\n\n\n
          Q1: Modbus \u5b89\u5168\u534f\u8bae\u4f1a\u663e\u8457\u589e\u52a0\u901a\u4fe1\u5ef6\u8fdf\u5417\uff1f<\/h3>\n\n\n\n
          TLS \u63e1\u624b\u9636\u6bb5\u4f1a\u6709\u4e00\u6b21\u6027\u7684\u5ef6\u8fdf\uff08\u6570\u767e\u6beb\u79d2\u5230\u6570\u79d2\uff0c\u53d6\u51b3\u4e8e\u8bbe\u5907\u6027\u80fd\uff09\uff0c\u4f46\u63e1\u624b\u5b8c\u6210\u540e\uff0c\u5bf9\u79f0\u52a0\u5bc6\uff08AES-GCM\uff09\u7684\u5ef6\u8fdf\u4ec5\u4e3a\u5fae\u79d2\u7ea7\u3002\u5bf9\u4e8e\u5927\u591a\u6570 Modbus \u901a\u4fe1\u573a\u666f\uff08\u8f6e\u8be2\u9891\u7387 100ms ~ 1s\uff09\uff0cTLS \u52a0\u5bc6\u7684\u5ef6\u8fdf\u5f71\u54cd\u53ef\u4ee5\u5ffd\u7565\u4e0d\u8ba1\u3002\u5efa\u8bae\u4f7f\u7528\u957f\u8fde\u63a5\uff08Keep-Alive\uff09\u907f\u514d\u9891\u7e41\u63e1\u624b\u3002<\/p>\n\n\n\n
          Q2: \u73b0\u6709\u7684 Modbus TCP \u8bbe\u5907\u53ef\u4ee5\u5347\u7ea7\u4e3a Modbus \u5b89\u5168\u534f\u8bae\u5417\uff1f<\/h3>\n\n\n\n
          \u5982\u679c\u8bbe\u5907\u662f\u7eaf\u786c\u4ef6\u5b9e\u73b0\u7684 Modbus TCP\uff08\u65e0\u6cd5\u66f4\u65b0\u56fa\u4ef6\uff09\uff0c\u5219\u4e0d\u80fd\u5347\u7ea7\u3002\u5982\u679c\u8bbe\u5907\u8fd0\u884c\u5d4c\u5165\u5f0f\u64cd\u4f5c\u7cfb\u7edf\u4e14\u8d44\u6e90\u5145\u8db3\uff0c\u53ef\u4ee5\u901a\u8fc7\u56fa\u4ef6\u66f4\u65b0\u6dfb\u52a0 TLS \u652f\u6301\u3002\u53e6\u4e00\u79cd\u65b9\u6848\u662f\u5728\u8bbe\u5907\u524d\u7aef\u90e8\u7f72\u652f\u6301 Modbus \u5b89\u5168\u534f\u8bae\u7684\u4ee3\u7406\u7f51\u5173\u3002<\/p>\n\n\n\n
          Q3: \u79c1\u7528\u81ea\u7b7e\u540d\u8bc1\u4e66\u5728\u5de5\u4e1a\u73af\u5883\u5b89\u5168\u5417\uff1f<\/h3>\n\n\n\n
          \u5728\u4f01\u4e1a\u5185\u7f51\u73af\u5883\u4e2d\uff0c\u4f7f\u7528\u79c1\u6709 CA \u7b7e\u53d1\u7684\u8bc1\u4e66\uff08\u800c\u975e\u81ea\u7b7e\u540d\u8bc1\u4e66\uff09\u662f\u5b8c\u5168\u5b89\u5168\u7684\uff0c\u524d\u63d0\u662f\uff1aCA \u79c1\u94a5\u59a5\u5584\u4fdd\u7ba1\u3001\u8bc1\u4e66\u57df\u540d\/IP \u6b63\u786e\u7ed1\u5b9a\u3001\u540a\u9500\u673a\u5236\u6b63\u5e38\u8fd0\u4f5c\u3002\u81ea\u7b7e\u540d\u8bc1\u4e66\uff08\u672a\u7ecf\u8fc7 CA \u7b7e\u53d1\uff09\u5e94\u907f\u514d\u4f7f\u7528\uff0c\u56e0\u4e3a\u5b83\u65e0\u6cd5\u5b9e\u73b0\u6709\u6548\u7684\u4fe1\u4efb\u94fe\u9a8c\u8bc1\u3002<\/p>\n\n\n\n
          \u4e5d\u3001\u672a\u6765\u5c55\u671b<\/h2>\n\n\n\n
          \u968f\u7740 IEC 62443\uff08\u5de5\u4e1a\u81ea\u52a8\u5316\u548c\u63a7\u5236\u7cfb\u7edf\u5b89\u5168\u6807\u51c6\uff09\u5728\u5168\u7403\u8303\u56f4\u5185\u7684\u5f3a\u5236\u63a8\u884c\uff0cModbus \u5b89\u5168\u534f\u8bae\u5c06\u4ece\u300c\u53ef\u9009\u9879\u300d\u9010\u6b65\u53d8\u4e3a\u300c\u5fc5\u9009\u9879\u300d\u3002\u8d8a\u6765\u8d8a\u591a\u7684\u5de5\u4e1a\u8bbe\u5907\u4f9b\u5e94\u5546\u5f00\u59cb\u5728\u65d7\u8230\u4ea7\u54c1\u4e2d\u5185\u7f6e Modbus \u5b89\u5168\u534f\u8bae\u652f\u6301\u3002\u5bf9\u4e8e\u65b0\u5efa\u9879\u76ee\uff0c\u4ece\u4e00\u5f00\u59cb\u5c31\u91c7\u7528 Modbus \u5b89\u5168\u534f\u8bae\uff0c\u662f\u6700\u5177\u524d\u77bb\u6027\u7684\u67b6\u6784\u51b3\u7b56\u3002<\/p>\n\n\n\n
          \u76f8\u5173\u9605\u8bfb\uff1a<\/strong>Modbus TCP\/IP \u7f51\u7edc\u90e8\u7f72\u6700\u4f73\u5b9e\u8df5 | Modbus RTU \u4e0e TCP \u6df1\u5ea6\u5bf9\u6bd4 | Modbus \u5728\u5de5\u4e1a\u7269\u8054\u7f51\u4e2d\u7684\u8fdb\u9636\u5e94\u7528<\/p>\n\n<\/span>","protected":false},"excerpt":{"rendered":"
          Modbus \u5b89\u5168\u534f\u8bae\u6df1\u5ea6\u89e3\u6790\uff1aTLS \u52a0\u5bc6\u3001X.509 \u8bc1…<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[1],"tags":[3070,3071,3072,2550,3073],"class_list":["post-44509","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-modbus","tag-tls","tag-x-509","tag-2550","tag-3073"],"_links":{"self":[{"href":"https:\/\/www.modbus.cn\/en\/wp-json\/wp\/v2\/posts\/44509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.modbus.cn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.modbus.cn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.modbus.cn\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.modbus.cn\/en\/wp-json\/wp\/v2\/comments?post=44509"}],"version-history":[{"count":0,"href":"https:\/\/www.modbus.cn\/en\/wp-json\/wp\/v2\/posts\/44509\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.modbus.cn\/en\/wp-json\/wp\/v2\/media?parent=44509"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.modbus.cn\/en\/wp-json\/wp\/v2\/categories?post=44509"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.modbus.cn\/en\/wp-json\/wp\/v2\/tags?post=44509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}