1*4882a593SmuzhiyunThis is a Test Ceritificate Authority, only to be used for testing. 2*4882a593Smuzhiyun 3*4882a593Smuzhiyun#Root private key 4*4882a593Smuzhiyunopenssl genrsa -out ca.key 2048 5*4882a593Smuzhiyun 6*4882a593Smuzhiyun#Root certificate 7*4882a593Smuzhiyunopenssl req -new -x509 -key ca.key -out ca.crt -days 10000 -batch 8*4882a593Smuzhiyun 9*4882a593Smuzhiyun#Mid CSR and key 10*4882a593Smuzhiyunopenssl req -new -out mid.csr -config mid.conf 11*4882a593Smuzhiyun 12*4882a593Smuzhiyun#Sign mid.crt 13*4882a593Smuzhiyunopenssl x509 -req -in mid.csr -extfile mid.ext -CA ca.crt -CAkey ca.key -CAcreateserial -out mid.crt -days 10000 14*4882a593Smuzhiyun 15*4882a593Smuzhiyun#My CSR and key 16*4882a593Smuzhiyunopenssl req -new -out my.csr -config my.conf 17*4882a593Smuzhiyun# View it with: openssl req -in my.csr -noout -text 18*4882a593Smuzhiyun 19*4882a593Smuzhiyun#Sign my.crt 20*4882a593Smuzhiyunopenssl x509 -req -in my.csr -CA mid.crt -CAkey mid.key -CAcreateserial -out my.crt -days 10000 21