github.com/codingeasygo/util@v0.0.0-20231206062002-1ce2f004b7d9/xcrypto/openssl.sh (about)

     1  set -xe
     2  openssl genrsa -out ca.key 2048
     3  openssl req -new -x509 -days 3650 -key ca.key -out ca.pem -subj "/C=cn/OU=custer/O=custer/CN=test.com" 
     4  
     5  openssl genpkey -algorithm RSA -out server.key
     6  openssl req -new -nodes -key server.key -out server.csr -days 3650 -subj "/C=cn/OU=custer/O=custer/CN=a.test.com" -config ./openssl.cnf -extensions v3_req
     7  openssl x509 -req -days 3650 -in server.csr -out server.pem -CA ca.pem -CAkey ca.key -CAcreateserial -extfile ./openssl.cnf -extensions v3_req
     8  
     9  # openssl genpkey -algorithm RSA -out client.key
    10  # openssl req -new -nodes -key client.key -out client.csr -days 3650 -subj "/C=cn/OU=custer/O=custer/CN=a.test.com" -config ./openssl.cnf -extensions v3_req
    11  # openssl x509 -req -days 3650 -in client.csr -out client.pem -CA ca.pem -CAkey ca.key -CAcreateserial -extfile ./openssl.cnf -extensions v3_req