openssl 自签发https证书

生成CA私钥与CA证书

1. openssl genrsa -out cakey.pem 2048
2. openssl req -new -x509 -sha256  -key cakey.pem -out cacert.pem

生成服务端私钥与证书

3. openssl genrsa -out server.key 2048
4. openssl req -new -sha256 -key server.key -out server.csr

CA为服务端证书签名

openssl x509 -req -sha256 -in server.csr -CA cacert.pem -CAkey cakey.pem -CAcreateserial -out server.crt

查看证书命令

openssl x509 -noout -text -in server.crt