|
openssl genrsa -out rootca.key 4096
openssl req -new -out rootca.csr -key rootca.key
Country Name (2 letter code) [AU]:cn
State or Province Name (full name) [Some-State]:sz
Locality Name (eg, city) []:sz
Organization Name (eg, company) [Internet Widgits Pty Ltd]:zte
Organizational Unit Name (eg, section) []:zte
Common Name (e.g. server FQDN or YOUR name) []:zxmte.zte.com.cn
Email Address []:
A challenge password []:123456
An optional company name []:zte
openssl x509 -req -in rootca.csr -out rootca.crt -signkey rootca.key -days 36500
openssl genrsa -out server.key 4096
openssl req -new -key server.key -out server.csr
Country Name (2 letter code) [AU]:cn
State or Province Name (full name) [Some-State]:js
Locality Name (eg, city) []:sz
Organization Name (eg, company) [Internet Widgits Pty Ltd]:zte
Organizational Unit Name (eg, section) []:zte
Common Name (e.g. server FQDN or YOUR name) []:zxmte.zte.com.cn
Email Address []:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:123456
An optional company name []:zte
openssl x509 -req -in server.csr -CA rootca.crt -CAkey rootca.key -CAcreateserial -out server.crt -days 36500
openssl x509 -req -in server.csr -CA rootca.crt -CAkey rootca.key -CAcreateserial -out server.crt -days 36500 -extensions req_ext -extfile ssl.cnf
[ req_ext ]
subjectAltName = @alt_names
[alt_names]
IP.1 ? ?= 10.9.181.189
IP.2 ? ?= 10.7.235.231
#DNS.1 ? = your-website.dev
#DNS.2 ? = another-website.dev
?
|