Nginx证书格式转换，证书配置 生成pem(公钥)、key（私钥）、csr（签名文件）、crt（自签名SSL证书）

将cer格式证书转pem格式：

openssl x509 -inform der -in server.cer -out server-pem.pem

提取私钥：p12格式文件中提取私钥

openssl pkcs12 -nocerts -nodes -in server.p12 -out server.key

---

需要依赖openssl
yum install -y openssl openssl-devel

[root@tlgakp1 rntibp]# openssl version
OpenSSL 1.0.2k-fips 26 Jan 2017

检查是否支持https_ssl_module:

[root@tlgakp1 nginx]# sbin/nginx -V
nginx version: nginx/1.18.0
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC)
built with OpenSSL 1.0.2k-fips 26 Jan 2017
TLS SNI support enabled
configure arguments: --prefix=/usr/local/nginx –with-http_ssl_module --with-stream

观察编译时是否带有“–with-http_ssl_module”
没有需要重新编译安装</