# openssl ecparam -out EccCA.key -name secp256k1 -genkey //生成CA私钥
# openssl req -key EccCA.key -new -out EccCA.req //生成CA证书请求
# openssl x509 -req -in EccCA.req -signkey EccCA.key -out EccCA.pem //自签名得到CA根证书
# openssl ecparam -out EccSite.key -name secp256k1 -genkey //生成用户私钥
# openssl req -key EccSite.key -new -out EccSite.req //生成用户证书请求
# openssl x509 -req -in EccSite.req -CA EccCA.pem -CAkey EccCA.key -out EccSite.pem -CAcreateserial //CA签名颁发用户证书
原文:http://www.cnblogs.com/husterlong/p/4404647.html