https://ykyi.net/tags/openssl/ Recent content in Openssl on kamuszhou's blog Hugo zh-cn Wed, 20 Jun 2018 07:03:11 +0000 https://ykyi.net/?p=1446/ Wed, 20 Jun 2018 07:03:11 +0000 https://ykyi.net/?p=1446/ <h3 id="生成一对新的rsa非对称密钥2048bits长-generate-an-rsa-private-key">生成一对新的RSA非对称密钥,2048bits长。 generate an RSA private key</h3> <p>openssl genrsa -out private.key 2048</p> <h3 id="从私钥中提出公钥-extract-the-public-key">从私钥中提出公钥。 extract the public key</h3> <p>openssl rsa -in mykey.pem -pubout &gt; my_pubkey.pub</p> <h3 id="创建自签名证书create-a-self-singned-certificate">创建自签名证书。create a self-singned certificate</h3> <p>openssl req -config openssl.conf -x509 -sha256 -days 3650 -newkey rsa:4096 -keyout ca.key -out ca.crt</p> <h3 id="签署csrsign-the-csr">签署CSR。sign the CSR</h3> <p>openssl ca -config openssl.conf -days 375 -notext -in test.csr -out test.crt</p> <h3 id="检验签书verify-the-certificate">检验签书。verify the certificate</h3> <p>openssl verify -CAfile ca.crt test.crt</p> <h3 id="生成一个csrgenerate-a-new-private-key-and-csrcertificate-signing-request">生成一个CSR。Generate a new private key and CSR(Certificate Signing Request)</h3> <p>openssl req -config openssl.conf -out CSR.csr -nodes -new -newkey rsa:2048 -nodes -keyout private.key</p>