Self signed certificate generation

RSA Private key

• Use openssl Generate RSA Private key

openssl genrsa -des3 -out server.key 2048
#-des3  encryption algorithm 
#-out server.key  Generated file name 
#2048  Number of secret keys , The more, the more secure 
# The password needs to be set in the process , When viewing the private key 

• see RSA Private key

openssl rsa -text -in server.key
#-text  Format when viewing 
#-in server.key RSA Private key file 
# Enter the set password in the process 

Certificate signing request （Certificate Signing Request）

• Use openssl Generate

openssl req -new -key server.key -out server.csr
#-key RSA Private key 
#-out server.csr  Generated csr file 

• see CSR file

openssl req -text -in server.csr -noout
#-in server.csr  View the files 
#-noout  No need to generate files 

Generate CA certificate

openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
#x509  Certificate standards 
-days 365		 The certificate is valid for 
-in server.csr			 Certificate signing request 		
-signkey server.key			 The key used for signing 
-out server.crt			 Generated CA certificate