Shulou(Shulou.com)06/02 Report--

First, download the three software of the certificate server on the operation and maintenance host. ~] # wget https://pkg.cfssl.org/R1.2/cfssl_linux-amd64-O / usr/bin/cfssl~] # wget https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64-O / usr/bin/cfssl-json~] # wget https://pkg.cfssl.org/R1.2/cfssl-certinfo_linux-amd64-O / usr/bin/cfssl-certinfo~] # chmod + x / usr/bin/cfssl*~] # cd / opt/opt] # mkdir certsopt ] # cd certs/certs] # vi ca-csr.json # ca certificate application file {"CN": "OldboyEdu" Hosts: [], key: {"algo": "rsa", "size": 2048}, "names": [{"C": "CN", "ST": "beijing", "L": "beijing", "O": "od" "OU": "ops"}] "ca": {"expiry": "175200h"} certs] # cfssl gencert-initca ca-csr.json | cfssl-json-bare ca # generate CA root certificate and private key [root@test-operator certs] # ll | grep ca-rw-r--r-- 1 root root 836 Feb 1 00:19 ca-config.json-rw-r--r-- 1 root root 993 Jan 31 08:09 ca.csr-rw-r--r- -1 root root 328 Jan 31 08:09 ca-csr.json-rw- 1 root root 1675 Jan 31 08:09 ca-key.pem # ca Root Certificate-rw-r--r-- 1 root root 1346 Jan 31 08:09 ca.pem # ca Root Certificate

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.