https

[anancds]

openssl genrsa -aes256 -out server.key 2048 openssl req -new -x509 -days 3650 -key server.key -out server.crt openssl rsa -in server.key -out server.key.unsecure

[anancds]

openssl genrsa -aes256 -out server.key 2048 openssl req -new -x509 -days 3650 -key server.key -out server.csr -config openssl.cnf openssl rsa -in server.key -out server.key

openssl genrsa -aes256 -out client.key 2048 openssl rsa -in client.key -out client.key openssl req -new -x509 -days 3650 -key client.key -out client.csr -config openssl.cnf

[anancds]

这个可以成功 openssl genrsa -des3 -out server.key 2048 openssl rsa -in server.key -out server.key openssl req -new -key server.key -out server.csr -config openssl.cnf openssl req -new -x509 -keyout ca.key -out ca.crt -config openssl.cnf openssl ca -in server.csr -out server.crt -cert ca.crt -keyfile ca.key -config openssl.cnf

[anancds]

mkdir demoCA mkdir demoCA/newcerts touch demoCA/index.txt cat demoCA/serial 0011

[anancds]

https://blog.csdn.net/fly2010love/article/details/46415307

[anancds]

openssl genrsa -des3 -out client.key 2048 openssl rsa -in client.key -out client.key openssl req -new -key client.key -out client.csr -config openssl.cnf openssl ca -in client.csr -out client.crt -cert ca.crt -keyfile ca.key -config openssl.cnf