CentOS HTTPS client certificate making

* Eev:centos 6.5

#建议先删除相关信息

find/etc/pki/-name "*.pem"-exec rm-f {} \;

find/etc/pki/-name "Index.txt"-exec rm-f {} \;

Touch/etc/pki/ca/index.txt

#生成新的ca

/etc/pki/tls/misc/ca-newca

OpenSSL genrsa-des3-out Clinet.key 2048

OpenSSL Req-new-key clinet.key-out CLINET.CSR

OpenSSL ca-in clinet.csr-out clinet.crt

OpenSSL pkcs12-export-clcerts-in Clinet.crt-inkey clinet.key-out clinet.pfx

#服务端的CA文件的设定

Cp/etc/pki/ca/cacert.pem/root/cacert.pem

#CA文件的设定启用 (Apache)

SSL_CLIENT_CERTIFICATE/ROOT/CACERT.PEM;

Of course, SSL certificates are used by third parties.

CentOS HTTPS client certificate making