CentOS8_SSL_HTTPS自签名证书配置

本机环境

CentOS_8.4.2105

MariaDB 10.3.28

nginx/1.14.1

检查环境

nginx -V

需安装with-http_ssl_module

生成CA证书

1.进入nginx服务目录,创建certs目录并生成CA证书

cd /usr/share/nginx/
mkdir certs && cd certs
openssl req -newkey rsa:4096 -nodes -sha256 -keyout ca.key -x509 -days 3650 -out ca.crt
​
参考项：Common Name (eg, your name or your server's hostname) []:test.com
其他随意填写

2.生成证书请求文件

openssl req -newkey rsa:4096 -nodes -sha256 -keyout www.test.com.key -out www.test.com.csr
​
参考项：Common Name (eg, your name or your server's hostname) []:www.yinzhengjie.org.cn
其他随意填写

3.签发证书

openssl x509 -req -days 36500 -in www.test.com.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out www.test.co