记住:
Data +public key = encryption -----> private key =DE encryption
Data +private key = sign-----> public key =verify
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[root@lab sign4]# ll
total 4
-rw-r--r-- 1 root root 12 Jun 18 16:20 test.txt
[root@lab sign4]# openssl genrsa -out test.key 1024
Generating RSA private key, 1024 bit long modulus
.....................................................++++++
....................................................++++++
e is 65537 (0x10001)
[root@lab sign4]# ll
total 8
-rw-r--r-- 1 root root 887 Jun 18 16:22 test.key
-rw-r--r-- 1 root root 12 Jun 18 16:20 test.txt
[root@lab sign4]# openssl rsa -pubout -in test.key -out file.pubkey
writing RSA key
[root@lab sign4]# ll
total 12
-rw-r--r-- 1 root root 272 Jun 18 16:22 file.pubkey
-rw-r--r-- 1 root root 887 Jun 18 16:22 test.key
-rw-r--r-- 1 root root 12 Jun 18 16:20 test.txt
[root@lab sign4]# openssl rsautl -sign -inkey test.key -out in.txt.rsa -in test.txt ****用私钥去签生成in.txt.rsa
[root@lab sign4]# ll
total 16
-rw-r--r-- 1 root root 272 Jun 18 16:22 file.pubkey
-rw-r--r-- 1 root root 128 Jun 18 16:35 in.txt.rsa
-rw-r--r-- 1 root root 887 Jun 18 16:22 test.key
-rw-r--r-- 1 root root 12 Jun 18 16:20 test.txt
-rw-r--r-- 1 root root 0 Jun 18 16:28 test.verify
[root@lab sign4]# openssl rsautl -verify -inkey file.pubkey -in in.txt.rsa -pubin ****用公钥来verify
hallo avaya