openssl req -new -x509 -set_serial 20180704 -keyout ca1.key -out ca1.pem -days 365 -nodes 用上述命令产生两个 Subject Name一样的CA（提示中输入的信息完全一致），例如CA1, CA2 openssl genrsa -out client1.key 2048 openssl req -new -key client1.key -out client1.csr openssl x509 -req -in client1…

OpenSSL Command-Line HOWTO Paul Heinlein <heinlein@madboa.com> Initial publication: June 13, 2004 Most recent revision: February 11, 2009 The openssl application that ships with the OpenSSL libraries can perform a wide range of crypto operations. This HO…

DIAGNOSTICS When a verify operation fails the output messages can be somewhat cryptic. The general form of the error message is: server.pem: /C=AU/ST=Queensland/O=CryptSoft Pty Ltd/CN=Test CA (1024 bit) error 24 at 1 depth lookup:invalid CA certificate The fir…