生成SSL自签名证书并测试
夏楚 edited this page 2021-02-01 17:29:59 +08:00
This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

1、创建私钥

 openssl genrsa  -out server.key 2048

2、 创建签名请求文件

 openssl req -new -key server.key -out server.csr

注意,需要输入域名(Common Name (e.g. server FQDN or YOUR name))

Country Name (2 letter code) [AU]:cn
State or Province Name (full name) [Some-State]:gd
Locality Name (eg, city) []:sz
Organization Name (eg, company) [Internet Widgits Pty Ltd]:company
Organizational Unit Name (eg, section) []:section
Common Name (e.g. server FQDN or YOUR name) []:zlm.com
Email Address []:xiachu@qq.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:zlm

3、自签名生成公钥10年有效期

openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt

执行该命令会打印以下信息:

Signature ok
subject=/C=cn/ST=gd/L=sz/O=company/OU=section/CN=zlm.com/emailAddress=xiachu@qq.com
Getting Private key

4、合并公钥私钥

cat server.crt server.key > ./ssl.pem

5、加载证书

./MediaServer -s ./ssl.pem

图片.png