创建服务器证书秘钥文件
[root@Nginx ~]# openssl genrsa -des3 -out server.key 1024
...
Enter pass phrase for server.key: # 输入密码
Verifying - Enter pass phrase for server.key: # 确认密码
创建服务器证书申请文件
[root@Nginx ~]# openssl req -new -key server.key -out server.csr
Enter pass phrase for server.key: # 输入前面创建的密码
...
Country Name (2 letter code) [XX]:CN # 国家代号. 中国输入 CN
State or Province Name (full name) []:HuBei # 省的全名. 拼音
Locality Name (eg, city) [Default City]:WuHang # 市的全名.拼音
Organization Name (eg, company) [Default Company Ltd]:xhz_edu # 公司英文名
Organizational Unit Name (eg, section) []: # 可以不输入
Common Name (eg, your name or your server's hostname) []:www.xhz_edu.com # 域名
Email Address []:xiaohaizhou@163.com # 电子邮箱. 可随意填
...
A challenge password []: # 可以不输入
An optional company name []: # 可以不输入
去除秘钥口令
[root@Nginx ~]# openssl rsa -in server.key -out server.key
Enter pass phrase for server.key.org: # 输入密码
生成证书文件
[root@Nginx ~]# openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
Signature ok
subject=/C=CN/ST=HuBei/L=WuHang/O=xhz_edu/CN=www.xhz_edu.com/emailAddress=xiaohaizhou@163.com
Getting Private key