快速生成自签名证书的shell脚本

gen_ssl_key.sh

#!/bin/sh
# Date: 2022-12-01
# Author: ChenYang


country="CN"

province="Guangdong"

city="Shenzhen"

organization="Self-signed certificate"

ip="127.0.0.1"

domain="example.com"


main(){

  which openssl || printf "\n Not found openssl command, please install frist\n" || exit 0

  ssl_cnf="_san.cnf"
  cat > ${ssl_cnf} <<EOF
[req]
default_bits  = 2048
distinguished_name = req_distinguished_name
req_extensions = req_ext
x509_extensions = v3_req
prompt = no
[req_distinguished_name]
countryName = ${country}
stateOrProvinceName = ${province}
localityName = ${city}
organizationName = ${organization}
commonName = ${domain}
[req_ext]
subjectAltName = @alt_names
[v3_req]
subjectAltName = @alt_names
[alt_names]
DNS.1 = ${domain}
IP.1 = ${ip}
EOF

  openssl req -new -nodes -x509 -days 3650 -keyout domain.pem.key -out domain.crt -config ${ssl_cnf}

  rm ${ssl_cnf}
}

main

脚本中country,province,city,organization,ip,domain这些变量的值根据具体需求自行修改该即可.