本文介绍如何使用OpenSSL工具包为IIS/ADAM生成并签署SSL证书请求。整个过程分为五个步骤：创建目录放置证书请求文件；生成CA的RSA私钥；为CA生成证书；使用CA签署IIS证书请求；最后重启IIS证书向导完成安装。
The OpenSSL toolkit can be used to sign IIS / ADAM certificate requests. This is done in 5 steps:
1. Create a directory and put the certificate request file certreq.txt in it. This file is typically generated by the IIS Certificate Wizard.
2. Generate an RSA private key for your certificate authority (CA). You will be prompted to enter a password to protect the key.
openssl genrsa -des3 -out cakey.pem 2048
3. Using the above private key generate a certificate for your certificate authority (CA). You will be prompted to enter a few details about your CA, such as organisation name.
openssl req -new -key cakey.pem -x509 -days 1825 -extensions v3_ca -out ca.crt
4. Finally, use your certificate authority (CA) to sign the IIS certificate request. It will be marked valid for 365 days.
openssl x509 -req -days 365 -in certreq.txt -CA ca.crt -CAkey cakey.pem -CAcreateserial -out iis.cer
5. Restart the IIS Certificate Wizard and pass the signed certificate iis.cer to it.
Done!
扫一扫
6524
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
