下载证书生成器
wget https://pkg.cfssl.org/R1.2/cfssl_linux-amd64
wget https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64
设置权限
chmod +x cfssl_linux-amd64 cfssljson_linux-amd64
制作证书文件 /opt/certs/ca-csr.json
{
"CN": "taozz",
"hosts":[],
"key":{
"algo": "rsa",
"size": 2048
},
"names":[
{
"C": "CN",
"ST": "shenzhen",
"L": "shenzhen",
"O": "od",
"OU": "ops"
}
],
"ca":{
"expiry": "175200h"
}
}
生成证书
./cfssl_linux-amd64 gencert -initca ca-csr.json | ./cfssljson_linux-amd64 -bare ca
原文:https://www.cnblogs.com/taozhengquan/p/15017358.html