使用gmssl生成国密证书

1 下载和编译gmssl

# pwd
/root
# mkdir gmssl
# cd gmssl
# git clone git@gitee.com:khaosi/GmSSL.git
# cd GmSSL
# ./config --prefix=/root/gmssl
# make -j4
# make install

2 配置gmssl运行环境

# pwd
/root/gmssl
# ls
bin  GmSSL  include  lib  share  ssl
# export LD_LIBRARY_PATH=/root/gmssl/lib
# export PATH=/root/gmssl/bin:$PATH
# mkdir cert
# cd cert

3 生成自签名国密证书

1. 生成SM2私钥

# gmssl sm2 -genkey -out pkey.pem

2. 生成x509自签名证书

# gmssl req -new -x509 -key ./pkey.pem -out root.cert

3. 生成pkcs12证书

# gmssl pkcs12 -export -clcerts -in root.cert -inkey pkey.pem -out root.p12

4. 相关文件

# ls
pkey.pem  root.cert  root.p12