CentOS https 客户端证书制作

* Eev:Centos 6.5

#建议先删除相关信息

find /etc/pki/ -name "*.pem" -exec rm -f {} \;

find /etc/pki/ -name "index.txt" -exec rm -f {} \;

touch /etc/pki/CA/index.txt

cd /etc/pki/CA/private

touch ./demoCA/index.txt

#生成新的ca

/etc/pki/tls/misc/CA -newca

openssl genrsa -des3 -out clinet.key 2048

openssl req -new -key clinet.key -out clinet.csr

cp cakey.pem demoCA/private/

cp /etc/pki/CA/cacert.pem ./demoCA/

openssl ca -in clinet.csr -out clinet.crt

openssl pkcs12 -export -clcerts -in clinet.crt -inkey clinet.key -out clinet.pfx

#服务端的CA文件的设定

cp /etc/pki/CA/cacert.pem /root/cacert.pem

 

#CA文件的设定启用(apache)

ssl_client_certificate   /root/cacert.pem;

当然SSL证书使用的是第三方.