openssl生成自签证书以及如何导入与删除

 生成自签证书

生成 server.crt，server.csr，server.key

#!/bin/bash

#输入证书使用IP地址
IP=$1

rm $IP.csr $IP.key $IP.crt -f

rm http.ext

cat >> http.ext  <<EOF
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
extendedKeyUsage = serverAuth, clientAuth
subjectAltName=@SubjectAlternativeName

[ SubjectAlternativeName ]
IP.1=127.0.0.1
IP.2=$IP
EOF

openssl req -new -newkey rsa:2048 -noenc -out $IP.csr -keyout $IP.key -subj "/C=CN/ST=Beijing/L=Beijing/O=Super Inc./OU=Web Security/CN=$IP"

openssl x509 -req -days 36500 -in $IP.csr -signkey $IP.key -out $IP.crt -extfile http.ext

nginx配置

server {
    listen 443 ssl;
    listen [::]:443 ssl;
    server_name localhost;
    
    charset utf-8;
    client_max_body_s