编辑“︁自建CA签发证书”︁

[[Category:OpenSSL]]

== 生成 CA 私钥和证书 ==
===生成一个 CA 私钥===
<pre>
openssl genrsa -out ca.key 4096
</pre>
===生成一个 CA 的数字证书===
<pre>
openssl req -new -x509 -days 3650 -key ca.key -out ca.crt
</pre>

==CA签发证书==
===生成私钥===
<pre>
openssl genrsa -out client.key 4096
</pre>
===生成证书请求===
<pre>
openssl req -new -key client.key -out client.csr
</pre>
===用CA私钥签发证书===
<pre>
openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt -days 3650
</pre>