http://www.openssl.org/docs/apps/openssl.html ----- openssl命令参考
http://bbs.csdn.net/topics/350066891
方式1:(后两步待验证!!!)
生成请求
openssl req -newkey rsa:1024 -out req1.pem -keyout sslclientkey.pem
生成根证书
openssl req -new -x509 -keyout ca.key -out ca.crt
生成证书
openssl ca -in req1.pem -out sslclientcert.pem -cert ca.crt -keyfile ca.key
运行服务端
openssl s_server -cert sslservercert.pem -key sslserverkey.pem -CAfile ca.crt -ssl3 -Verify 1