purchase freessl cert
https://freessl.cn/
produce keypem
genrsa -out C:/20210806/ivynetcirclekey.pem 2048
produce certpem
req -new -x509 -key C:\20210806\ivynetcirclekey.pem -out C:\20210806\ivynetcirclecert.pem -days 3650
produce key
genrsa -out C:\20210806\ivynetcircle_privatekey.key 2048
produce csr 要记住密码 生成最后一步要输入的,SERVER NAME要写小写的域名
req -new -key C:\20210806\ivynetcircle_privatekey.key -out C:\20210806\ivynetcircle.csr
this step cause error skip this step
ca -in C:\20210806\ivynetcircle.csr -out C:\20210806\ivynetcircle.crt -days 3650
go to freessl purchase webaddress: https://freessl.cn/ 手动上传csr文件,手动验证dns(txt记录),下载所有证书
export pfx
pkcs12 -export -out C:\20210806\20210806ivynetcircle.pfx -inkey C:\20210806\ivynetcircle_privatekey.key -in C:\20210806\ivynetcircle.com-cert.pem -certfile C:\20210806\ivynetcircle.com-ca.pem -certfile C:\20210806\ivynetcircle.com-root.pem
password:输入刚生成csr是写的密码
openssl 生成https网站ssl签名证书
于 2021-08-06 17:37:14 首次发布