运行环境是Linux,且需要已安装openssl组件
自签发的证书会不被浏览器信任所产生拦截推荐限用于测试,勿用于生成环境。
mkdir -p ~/myssl && cd ~/myssl
cat <<EOF >self.cnf
[ req ]
distinguished_name = req_distinguished_name
[ req_distinguished_name ]
[ v3_req ]
subjectAltName = @alt_names
[ alt_names ]
DNS.1 = example.org
DNS.2 = *.example.org
EOF
SUBJECT="/C=CN"
SUBJECT="$SUBJECT/ST=Beijing"
SUBJECT="$SUBJECT/L=Beijing"
SUBJECT="$SUBJECT/O=ExampleOrg"
SUBJECT="$SUBJECT/OU=Devops"
SUBJECT="$SUBJECT/CN=example.org"
SUBJECT="$SUBJECT/emailAddress=ops@example.org"
openssl req -newkey rsa:4096 -x509 -nodes -days 3650 -extensions v3_req \
-config self.cnf -keyout server.key -out server.crt -subj "$SUBJECT"
评论 (0)