openssl生成数字证书和密钥

最新推荐文章于 2025-05-25 12:55:00 发布

原创最新推荐文章于 2025-05-25 12:55:00 发布 · 2.1k 阅读

0 ·

CC 4.0 BY-SA版权

boost-aiso 专栏收录该内容

15 篇文章

订阅专栏

本文提供了一套详细的步骤来指导读者如何在Linux环境下生成SSL证书。包括生成私钥、创建证书签名请求、签署证书以及移除密码需求等过程，并介绍了如何在代码中配置使用这些证书。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

OK, for anyone finding this in the future, you need to create your certificates and sign them appropriately. Here are the commands for linux:

//Generate a private key

openssl genrsa -des3 -out server.key 1024
//Generate Certificate signing request

openssl req -new -key server.key -out server.csr
//Sign certificate with private key

openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt
//Remove password requirement (needed for example)

cp server.key server.key.secure
openssl rsa -in server.key.secure -out server.key
//Generate dhparam file

openssl dhparam -out dh512.pem 512
Once you've done that, you need to change the filenames in server.cpp and client.cpp.

server.cpp

context_.use_certificate_chain_file("server.crt");
context_.use_private_key_file("server.key", boost::asio::ssl::context::pem);
context_.use_tmp_dh_file("dh512.pem");
client.cpp

ctx.load_verify_file("server.crt");
Then it should all work!