OpenSSL 生成CA证书及终端用户证书，java架构师常见面试题

---

• OpenSSL 1.0.2k

• FireFox 60.0 64位

• Chrome 66.0.3359.181 （正式版本）（32位）

• Internet Explorer 11.2248.14393.0

• Websocketd 0.3.0

• Nginx 1.12.2

二、生成CA根证书

---

1、准备ca配置文件，得到ca.conf

$ vim ca.conf

内容如下：

[ req ]

default_bits = 4096

distinguished_name = req_distinguished_name

[ req_distinguished_name ]

countryName = Country Name (2 letter code)

countryName_default = CN

stateOrProvinceName = State or Province Name (full name)

stateOrProvinceName_default = JiangSu

localityName = Locality Name (eg, city)

localityName_default = NanJing

organizationName = Organization Name (eg, company)

organizationName_default = Sheld

commonName = Common Nam