自签证书

阅读时间:

1

min

文章字数:

137

字

发布日期:

2025-12-16

最近更新:

2025-10-15

阅读量:

-

前提已经安装OpenSSL

ssl.conf

创建ssl.conf配置文件

[req]
default_bits = 2048
prompt = no
default_md = sha256
distinguished_name = dn
req_extensions = v3_req

[dn]
C=CN
ST=Beijing
L=Beijing
O=leolog
OU=IT Department
CN=localhost

[v3_req]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names

[alt_names]
DNS.1 = localhost
DNS.2 = sso.leolog.com
IP.1 = leolog
IP.2 = leolog

生成SSL证书和私钥

openssl req -new -x509 -newkey rsa:2048 -sha256 -nodes -keyout key.pem -days 365 -out cert.pem -config ssl.conf

您应该能看到以下文件：

• cert.pem (证书文件)
• key.pem (私钥文件)
• ssl.conf (配置文件)