Generate certificates with OpenSSL

First, the overall steps

OpenSSL genrsa-des3-outserver.key 1024//generate Keyopenssl req-new-keyserver.key-out server.csr-config openssl.cnf//generate CSR File OpenSSL req-new-x509-keyoutca.key-out ca.crt-config openssl.cnf//self-generated caopenssl ca-in server.csr-outserver.crt-cer T ca.crt-keyfile ca.key-config openssl.cnf//signature Penssl pkcs12-export-inkeyserver.key-in server.crt-out server.pfx//Synthetic p FX format

Second, prepare

1, first prepare the configuration file openss.cnf(if the first installed OpenSSL);

The openssl.cnf file is installed by default in the/etc/pki/tls directory, and the openssl.cnf file is copied to the current directory.

[Email protected] openssl]# CP/ETC/PKI/TLS/OPENSSL.CNFOPENSSL.CNF

2, create the required directories and files in the current working directory.

[[email protected] openssl]# mkdir/democa[[email protected] openssl]# CD./democa[[email protected] democa]# mkdir Newce RTS Private[[email protected] democa]# chmod g-rwx,o-rwx private[[email protected] democa]# echo "" > Serial[[email P Rotected] democa]# Touch index.txt

This article is from the "Ding classmate 1990" blog, please be sure to keep this source http://dingtongxue1990.blog.51cto.com/4959501/1669582

Generate certificates with OpenSSL