openssl单双向认证
ssl生成
CA证书
创建私钥(ca.key)
1 | openssl genrsa -out ca/ca.key |
创建请求(ca.csr)
1 | openssl req -new -out ca/ca.csr -key ca/ca.key -subj '/C=CN/ST=ZhengJiang/L=WenZhou/O=SimilarSu CA Corp' |
自签署证书(ca.crt)
1 | openssl x509 -req -in ca/ca.csr -out ca/ca.crt -signkey ca/ca.key -days 3650 -extensions v3_ca |
将.crt 文件导入到JKS文件(ca.jks)
1 | keytool -keystore ca/ca.jks -keypass cacajks -storepass cacajks -alias ca -import -trustcacerts -file ca/ca.crt |