用Openssl生成10年有效期的自签名证书

本文介绍在Centos 6和7上如何使用 Openssl 生成10年有效期的自签名证书

欢迎转载，转载请注明出处：https://aoeii.com/posts/how_to_use_openssl_to_creat_10-year-selfsigned-certs_on_centos_6_and_7

----------

# 创建保存证书的目录

[root@www ~]# mkdir certs
    [root@www ~]# cd certs

# 创建私钥

[root@www certs]# openssl genrsa -out server.key 2048

>     Generating RSA private key, 2048 bit long modulus
>     ...................+++
>     .......................................................................+++
>     e is 65537 (0x10001)

# 通过命令行交互方式创建证书申请文件

[root@www certs]# openssl req -new -key server.key -out server.csr

>     You are about to be asked to enter information that will be incorporated
>     into your certificate request.
>     What you are about to enter is what is called a Distinguished Name or a DN.
>     There are quite a few fields but you can leave some blank
>     For some fields there will be a default value,
>     If you enter '.', the field will be left blank.
>     -----
>     Country Name (2 letter code) [XX]:CN
>     State or Province Name (full name) []:HONG KONG
>     Locality Name (eg, city) [Default City]:HONG KONG
>     Organization Name (eg, company) [Default Company Ltd]:aoeii.com
>     Organizational Unit Name (eg, section) []:aoeii.com
>     Common Name (eg, your name or your server's hostname) []:aoeii.com 
>     Email Address []:master@aoeii.com
>     
>     Please enter the following 'extra' attributes
>     to be sent with your certificate request
>     A challenge password []:
>     An optional company name []:

# 用私钥签名证书申请文件，创建有效时间为10年的自签名证书

[root@www certs]# openssl x509 -req -in server.csr -out server.crt -signkey server.key -days 3650

>     Signature ok
>     subject=/C=CN/ST=HONG KONG/L=HONG KONG/O=aoeii.com/OU=aoeii.com/CN=aoeii.com/emailAddress=master@aoeii.com
>     Getting Private key

# 或者使用命令行跳过证书申请文件，一步创建证书
    [root@www certs]# openssl req -new -x509 -days 3650 -key server.key -out server.crt -subj "/C=CN/ST=HONG KONG/L=HONG KONG/O=aoeii.com/OU=aoeii.com/CN=aoeii.com/emailAddress=master@aoeii.com"

用Openssl生成10年有效期的自签名证书

最近更新

热门标签

文章目录