openssl生成自签证书ssl

0x1 方案一

私钥

openssl genrsa -out server.key 1024

证书

openssl req -new -x509 -days 3650 -key server.key -out server.crt -subj "/C=CN/ST=mykey/L=mykey/O=mykey/OU=mykey/CN=domain1/CN=domain2/CN=domain3"

根据实际修改里面的内容，适合比较熟练的人

0x2 方案二

openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout cert.key -out cert.pem

# 支持配置区域和fqdn域名
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
  -keyout nginx.key \
  -out nginx.crt \
  -subj "/C=CN/ST=Hubei/L=Wuhan/O=Technology Co., Ltd./OU=Development/CN=59.xx.xx.xx/emailAddress=admin@example.com"

0x3 方案三

openssl genrsa -out <foo>.key 2048

openssl req -new -key <foo>.key -out <foo>.csr

openssl x509 -req -days 365 -in <foo>.csr -signkey <foo>.key -out <foo>.cert