openssl签发证书肘后备急方（cheatsheet）
生成一对新的RSA非对称密钥,2048bits长。 generate an RSA private key openssl genrsa -out private.key 2048 从私钥中提出公钥。 extract the public key openssl rsa -in mykey.pem -pubout > my_pubkey.pub 创建自签名证书。create a self-singned certificate openssl req -config openssl.conf -x509 -sha256 -days 3650 -newkey rsa:4096 -keyout ca.key -out ca.crt 签署CSR。sign the CSR openssl ca -config openssl.conf -days 375 -notext -in test.csr -out test.crt 检验签书。verify the certificate openssl verify -CAfile ca.crt test.crt 生成一个CSR。Generate a new private key and CSR(Certificate Signing Request) openssl req -config openssl.conf -out CSR.csr -nodes -new -newkey rsa:2048 -nodes -keyout private.key ...