[实例] x509 命令（对一个 CSR 进行自签名）

[root@monitor ssl.csr]# ll
总用量 4
-rw-r--r--    1 root     root          773  2月 19 10:13 myrequest.csr
[root@monitor ssl.csr]#
[root@monitor ssl.csr]# openssl x509 -req -in myrequest.csr
We need a private key to sign with、、

 

# 注释 ：可以看到需要指定一个签名用的 private key

 

[root@monitor ssl.csr]# openssl x509 -req -in myrequest.csr -signkey ../ssl.key/server.key -out my.crt
Signature ok

Getting Private key

 

[root@monitor ssl.csr]# cat my.crt
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
[root@monitor ssl.csr]#