openssl degs 文件摘要
openssl enc 对称加密
ser > ca证书签发中心
cli > 需要签发证书用户
ser > (umask 066;openssl genrsa -out private.key -des3 4096 ) //生成ca私钥
ser > openssl req -new -x509 -key private.key -days 3650 -out ca.pem //ca自签名证书
cli > (umask 066;openssl genrsa -out private-key.key 4096 ) //生成私钥
cli > openssl req -new -key -in private-key.key -out request.csr //生成请求签名文件
ser > openssl ca -in request.csr -out private-pub.crt -days 3650 //给请求证书签名
(umask 066: openssl genrsa 0out sprivate.key -des3 2096) //生成公钥
openssl rsa -in sprivate.key -pubout -out public.crt //生成公钥文件
openssl rsa -in sprivate.key -out private.key //给私钥解密解密
openssl rsa -in private.key -out sprivate.key -des3 //给私钥加密
openssl x509 -in -noout -text //查看证书文件信息