构建https证书

ref.sh

  1030  cat /etc/pki/tls/openssl.cnf 

  
  # For the CA policy
  [ policy_match ]
  countryName   = match
  stateOrProvinceName = optional
  organizationName  = optional
  organizationalUnitName  = optional
  commonName    = supplied
  emailAddress    = optional


  1024 sudo openssl genrsa -out private/cakey.pem 2048
  1025 sudo su
  981  openssl req -new -x509 -key private/cakey.pem -out cacert.pem
  985  openssl genrsa -out nginx.key 2048
  986  openssl req -new -key nginx.key -out nginx.csr
  988  openssl ca -in nginx.csr -out nginx.crt
  991  vi /etc/pki/tls/openssl.cnf 
  992  touch index.txt
  996  echo 00 > /etc/pki/CA/serial 
  997  openssl ca -in nginx.csr -out nginx.crt

http://seanlook.com/2015/01/18/openssl-self-sign-ca/

http://www.codesec.net/view/156971.html