Use OpenSSL to generate a self-signed certificate

Method 1:

Generate Private Key

OpenSSL genrsa-out server. Key 1024

Generate a self-Signed CER Certificate Format file with the private key
OpenSSL req-New-X509-days 3650-key server. key-out server. CRT-subj "/C = Cn/ST = mykey/L = mykey/o = mykey/ou = mykey/CN = domain1/CN = domain2/CN = domain3"

Method 2:

Generate Private Key

OpenSSL genrsa-out server. Key 1024

Generate Certificate Application Based on Private Key

OpenSSL req-New-key server. Key-out server. CSR

Sign the certificate application with the private key to generate a certificate

OpenSSL X509-req-in server. CSR-out server. CRT-signkey server. Key-days 3650.

Method 3:

OpenSSL req-New-X509-keyout server. Key-out server. CRT-config OpenSSL. CNF

The server. CRT certificate generated above is in the PEM format.