自签名生成证书

做个备份

[root@vm-centos ssl]# openssl req -x509 -nodes -newkey rsa:2048 -keyout server-key.pem -out server-crt.pem -days 365
Generating a 2048 bit RSA private key
...+++
........................................................+++
writing new private key to 'server-key.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:cn
State or Province Name (full name) []:nm
Locality Name (eg, city) [Default City]:lh
Organization Name (eg, company) [Default Company Ltd]:aa
Organizational Unit Name (eg, section) []:bb
Common Name (eg, your name or your server's hostname) []:host
Email Address []:xx@aa.com
[root@vm-centos ssl]# ls -l
total 8
lrwxrwxrwx. 1 root root   16 Aug  8 11:09 certs -> ../pki/tls/certs
-rw-r--r--  1 root root 1326 Oct 29 14:46 server-crt.pem
-rw-r--r--  1 root root 1704 Oct 29 14:46 server-key.pem
[root@vm-centos ssl]#