Windows10上Nginx如何通过自签名证书方式发布Https服务(下)
4.客户端证书生成
4.1 生成私钥
命令:
openssl genrsa -des3 -out client.key 1024
4.2 创建 CSR(证书签名请求)
配置文件:client_openssl.cnf
[req]
distinguished_name = req_distinguished_name
req_extensions = v3_req[req_distinguished_name]
countryName = CN
stateOrProvinceName = ZJ
localityName = HZ
organizationName = MyRootClient
organizationalUnitName = MyClient
commonName = localhost
commonName_max = 64
commonName_default = localhost[v3_req]
subjectAltName = @alt_names[alt_names]
DNS.1 = localhost
IP.1 = 127.0.0.1
IP.2 = 192.168.137.165
命令: