openssl genrsa -out openssl.key 1024 #生产1024位长度的rsa密钥
Loading 'screen' into random state - done
Generating RSA private key, 1024 bit long modulus
.....++++++
......++++++
e is 65537 (0x10001)
生成cer证书
openssl req -config "D:\Program Files (x86)\GnuWin32\share\openssl.cnf" -new -x509 -key openssl.key -out openssl.cer -days 3650 -subj /CN=yayun.website #openssl.key为之前生成的key的名字,openssl.cer为生成的证书名字,3650为证书过期天数,CN的参数是的你主机名或者IP地址。不指定config会报标题中错误。
Loading 'screen' into random state - done
生成pfx证书
openssl pkcs12 -export -out openssl.pfx -inkey openssl.key -in openssl.cer #会提示设置密码
Loading 'screen' into random state - done
Enter Export Password:
Verifying - Enter Export Password: