openssl生成证书

常用证书生成操作:

1.生成私钥 genrsa -out myCA.key 2048

2.生成证书,req -x509 -new -key myCA.key -out myCA.cer -days 730 -subj "/emailAddress=menc@polysaas.com,CN=menchao,C=CN"

3. genrsa -out server.key 2048

4. req -new -out server.req -key server.key -subj /CN=10.1.2.150/CN=10.1.2.150/CN=localhost

5. x509 -req -in server.req -out server.cer -CAkey myCA.key -CA myCA.cer -days 36500 -CAcreateserial -CAserial server.serial

6. pkcs12 -export -in server.cer -inkey server.key -out server.p12 -name "server"

7. keytool -importkeystore -v -srckeystore server.p12 -srcstoretype pkcs12 -srcstorepass 123456 -destkeystore server.keystore -deststoretype jks -deststorepass 123456