内衣
生产mkdir Test
cd Test监控八角杆
mkdir -p ./CA/{private,newcerts}
touch
touch CA/serial
touch CA/crlnumber
echo01 > CA/serial
echo01 > CA/crlnumber
电子眼镜cp /etc/pki/tls/opensslf ./
# 修改dir为当前CA⽬录
vim opensslf
[ CA_default ]
dir = ./CA
[ v3_req ]
keyUsage = nonRepudiation,digitalSignature
extendedKeyUsage = clientAuth
⽣成CA证书
# ⽣成CA私钥
(umask 077;openssl genrsa -des3 -out ./CA/private/cakey.pem 2048)
新型碾米机环保型
# ⽣成ca证书
openssl req -new -x509 -days 365 -key ./CA/private/cakey.pem -out ./CA/cacert.pem -subj "/C=CN/ST=GD/L=SZ/O=organization/OU=dev/CN=organization/emailAddress=aa@organization"
⽣成⽤户证书
# user私钥
渣土车管理系统
(umask 077;openssl genrsa -out userkey.pem 2048)
# 签署请求
openssl req -new -days 365 -key userkey.pem -out userreq.pem -subj "/C=CN/ST=GD/L=SZ/O=organization/OU=dev/CN=organization/emailAddress=aa@organization"
# ⽣成user证书
openssl ca -in userreq.pem -out usercert.pem -extensions v3_req -config opensslf
# ⽣成pkcs12证书
openssl pkcs12 -export -inkey userkey.pem -in usercert.pem -out user.pfx
# rm ./ && touch ./ 重新⽣成user证书
无机抗菌剂
# 吊销user证书
openssl ca -revoke usercert.pem -cert ./CA/cacert.pem -keyfile ./CA/private/cakey.pem
# ⽣成user证书吊销列表
openssl ca -gencrl -l -cert ./CA/cacert.pem -keyfile ./CA/private/cakey.pem -config opensslf