生成证书 openssl req -new -key server.key -out server.csr openssl req -new -key server.key -out server.csr -subj \ "/C=CN/ST=myprovince/L=mycity/O=myorganization/OU=mygroup/CN=myname" //Common Name (e.g. server FQDN or YOUR name) []:localhost openssl x509 -req -CA ca.crt ...
首先用前面的方法创建一个RSA或者ECC的私钥,保存到server.key文件 ```text openssl genrsa -out server.key 8192 或者 openssl ecparam -genkey -name prime256v1 -out server.key ECDH椭圆曲线(对比RSA有性能优势,现在应该是主流选择了): openssl ecparam -list_curves openssl ecparam -out ecparam.pem -name...