制作SSL證書(簽發免費證書)

1. 下載證書生成器

   wget https://pkg.cfssl.org/R1.2/cfssl_linux-amd64
   wget https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64
   

2. 設置權限

   chmod +x cfssl_linux-amd64 cfssljson_linux-amd64 
   

3. 制作證書文件 /opt/certs/ca-csr.json

   {
       "CN": "taozz",
       "hosts":[],
       "key":{
           "algo": "rsa",
           "size": 2048
       },
       "names":[
           {
               "C": "CN",
               "ST": "shenzhen",
               "L": "shenzhen",
               "O": "od",
               "OU": "ops"
       	}
       ],
       "ca":{
   		"expiry": "175200h"
       }
   }
   

4. 生成證書

   ./cfssl_linux-amd64 gencert -initca ca-csr.json | ./cfssljson_linux-amd64 -bare ca