https 证书生成

因等保问题需要使用https 协议进行web程序的访问 

关于证书制作的工具下载地址为 ：http://slproweb.com/products/Win32OpenSSL.html 此为windows 下的工具

########################### 第一步 

### 执行生成私钥 长度为1024字节 julong.key 其中 julong 为自定义名称 可以根据自己的来进行修改
OpenSSL> genrsa -des3 -out julong.key 1024
Generating RSA private key, 1024 bit long modulus (2 primes)
....................+++++
...........................+++++
e is 65537 (0x010001)
### 此处为输入密码 此密码需要记住
Enter pass phrase for julong.key:
### 再次输入密码
Verifying - Enter pass phrase for julong.key:
OpenSSL>
OpenSSL>

########################## 第二步

### 根据私钥 生成 csr 证书 同样名字可以根据自己的需求进行修改
OpenSSL> req -new -key julong.key -out julong.csr
###  输入刚才创建私钥的密码
Enter pass phrase for julong.key:
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
### 输入所在的国家 Country
Country Name (2 letter code) [AU]:CN
### 全名
State or Province Name (full name) [Some-State]:ZHONGGUO
### 输入所在的地区 Organization
Locality Name (eg, city) []:SX
### 全名
Organization Name (eg, company) [Internet Widgits Pty Ltd]:SHANXI
Organizational Unit Name (eg, section) []:XIAN
#### 邮箱和域名地址
Common Name (e.g. server FQDN or YOUR name) []:www.julong.com
Email Address []:[e-mail]

Please enter the following 'extra' attributes
to be sent with your certificate request
### 此处输入私钥的密码
A challenge password []:julong
An optional company name []:julong
#### 生成无密码的私钥
OpenSSL> rsa -in julong.key -out julong_no_password.key
Enter pass phrase for julong.key:
writing RSA key
### 生成有密码的私钥的证书文件 days 3650 为 3650天 可以根据自己的来进行修改
OpenSSL> x509 -req -days 3650 -in julong.csr -signkey julong.key -out julong.crt

Signature ok
subject=C = CN, ST = ZHONGGUO, L = SX, O = SHANXI, OU = XIAN, CN = www.julong.co
m, emailAddress = [e-mail]
Getting Private key
#### 此处输入私钥密码
Enter pass phrase for julong.key:

### 生成无密码的证书
OpenSSL> x509 -req -days 3650 -in julong.csr -signkey julong_no_password.key -ou
t julong_no_password.crt
Signature ok
subject=C = CN, ST = ZHONGGUO, L = SX, O = SHANXI, OU = XIAN, CN = www.julong.co
m, emailAddress = [e-mail]
Getting Private key
OpenSSL>
### 至此密钥生成和证书制作完成