本地自签证书测试https
参考文章:https://www.2cto.com/article/201510/444706.html
生成密钥、证书
第一步,为服务器端和客户端准备公钥、私钥
生成服务器端私钥 openssl genrsa -out server.key 1024
生成服务器端公钥 openssl rsa -in server.key -pubout -out server.pem
生成客户端私钥 openssl genrsa -out client.key 1024
生成客户端公钥 openssl rsa -in client.key -pubout -out client.pem 第二步,生成 CA 证书
生成 CA 私钥 openssl genrsa -out ca.key 1024
X.509 Certificate Signing Request (CSR) Management. openssl req -new -key ca.key -out ca.csr
X.509 Certificate Data Management. openssl x509 -req -in ca.csr -signkey ca.key -out ca.crt 在执行第二步时会出现:
➜ keys openssl req -new -key ca.key -out ca.csr You are about to be
asked to enter information that will be incorporated into your
certificate request. What you are about to enter is what is called a
Distinguished Name or a DN. There are quite a few fields but you can
leave some blank For some fields there will be a default value, If you
enter '.', the field will be left blank.
----- Country Name (2 letter code) [AU]:CN State or Province Name (full name) [Some-State]:Zhejiang Locality Name (eg, city) []:Hangzhou
Organization Name (eg, company) [Internet Widgits Pty Ltd]:My CA
Organizational Unit Name (eg, section) []: Common Name (e.g. server
FQDN or YOUR name) []:localhost Email Address []:
注意,这里的 Organization Name (eg, company) [Internet Widgits Pty Ltd]: 后面生成客户端和服务器端证书的时候也需要填写,不要写成一样的!!!可以随意写如:My CA, My Server, My Client。
然后 Common Name (e.g. server FQDN or YOUR name) []: 这一项,是最后可以访问的域名,我这里为了方便测试,写成 localhost ,如果是为了给我的网站生成证书,需要写成 barretlee.com 。
第三步,生成服务器端证书和客户端证书
服务器端需要向 CA 机构申请签名证书,在申请签名证书之前依然是创建自己的 CSR 文件 openssl req -new -key server.key -out server.csr
向自己的 CA 机构申请证书,签名过程需要 CA 的证书和私钥参与,最终颁发一个带有 CA 签名的证书 openssl x509 -req -CA ca.crt -CAkey ca.key -CAcreateserial -in server.csr -out server.crt
client 端 openssl req -new -key client.key -out client.csr
client 端到 CA 签名 openssl x509 -req -CA ca.crt -CAkey ca.key -CAcreateserial -in client.csr -out client.crt
cialis us prices [url=https://cialistf.com/]buy cheap cialis overnight[/url] cialis hart
price viagra vs cialis vs levitra cialis in europe macam cialis
cost of generic clomid sildenafil citrate vs viagra can i buy propecia over the counter uk viagra pills cheap retin a without prescription female viagra cheap zithromax pills online can you buy generic cialis in canada
tadalafil 5 mg http://erectileprop.com/ ed pills for sale Ysoojm grthzs
tretinoin gel otc viagra from india where can you buy prednisone pharmacy viagra online pharmacy drop shipping propecia malaysia
prednisone order online uk buy tretinoin no prescription cialis online with paypal
prednisone brand name australia
buy cialis in kuala lumpur [url=https://cialistf.com/]safe buy cialis[/url] does cialis help with enlarged prostate
buy real viagra online india prednisolone australia viagra 500mg tablet price in india generic chloroquine phosphate how to buy zithromax
tadalafil daily cost
lyrica discount albuterol nebulizer viagra online usa generic cialis us pharmacy zithromax capsules buy
get doxycycline online
viagra distributors
can i buy viagra with paypal roani Cloup
cialis improves exercise order original cialis online cialis equivalente erboristeria
fertility clomid stromectol for sale where can i purchase levitra online no prescription cialis tadalafil brand name india
generic cialis online mastercard cialis 20 mg cost cialis vision borrosa
cialis 100mg price quineprox 750 tretinoin tablet doxycycline 200 mg purchase viagra over the counter
viagra with paypal best
much does viagra cost walmart
viagra cut 50 mg in half roani Cloup
finpecia chloroquine generic hydroxychloroquine aralen prednisone 20mg capsule cost of generic sildenafil tadalafil 100mg online
levitra viagra prix pharmacie en ligne
nhs guidelines for prescribing viagra
best place to purchase viagra
cialis ultrafarma roani Cloup