linux如何证书命令,linux系统下command证书相关命令

linux系统下command证书相关命令

证书相关

openssl req -new -newkey rsa:2048 -nodes -out xxx.csr.pem -keyout xxx.private_key.pem //创建一个新的csr和私钥

openssl req -noout -text -in xxxx.csr.pem //查看csr

openssl req -in xxxx.csr.pem -noout -pubkey -out xxxx.public_key.pem //查看公钥

openssl x509 -req -days 360 -in xxxx.csr.pem -CA xxxx.ca.crt.pem -CAkey xxxx.ca.private_key.pem -CAcreateserial -out xxxx.crt.pem -sha256 //签名csr，生成证书

openssl x509 -text -noout -in xxxx.crt.pem //查看证书

openssl x509 -in xxxx.crt.pem -outform DER -out xxxx.crt.der //证书pem转化成der