OpenSSL 自签证书
内网搭建https时需要用到自签证书,顺手用前端弄了个网站方便生成证书
OpenSSL 签发证书命令
# 生成根证书
openssl genrsa -out example.com.key 2048
openssl req -x509 -new -nodes -key example.com.key -subj "/CN=example.com" -days 5000 -out example.com.crt
# 生成服务证书请求
openssl genrsa -out mail.example.com.key 2048
openssl req -new -key mail.example.com.key -subj "/CN=mail.example.com" -out mail.example.com.csr
# 用根证书签发服务器证书
openssl x509 -req -in mail.example.com.csr -CA example.com.crt -CAkey example.com.key -CAcreateserial -out mail.example.com.crt -days 5000 -extfile <