Self-built CA and certificate authentication

1. Self-built CA

OS: centos 6.4

# Cd/etc/pki/CA # (umask 077; openssl genrsa-out/etc/pki/CA/private/cakey. pem 1024) (generate the CA private key) # openssl req-new-x509-key/etc/pki/CA/private/cakey. pem-out/etc/pki/CA/cacert. pem-days 3650 (generated self-signed certificate) # touch/etc/pki/CA/index.txt # echo 01> serial

Ii. How to Create a csr

Mkdir/usr/local/mysql/ssl (umask 077; openssl genrsa-out/usr/local/mysql/ssl/mysql. key 1024) openssl req-new-key/usr/local/mysql/ssl/mysql. key-out/usr/local/mysql/ssl/mysql. csr-days 365

3. How to authenticate others

Openssl ca-in mysql. csr-out mysql. crt-days 365.