https openssl http2

2018-3-21 10:27:45 星期三

参考: 对https, http2的解释

总结:

生成自有证书(非第三方证书颁发公司)

我使用的是gitbash工具, 命令为:

$ openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout example.key -out example.crt

接下来会提问一堆问题:

Generating a 2048 bit RSA private key
............................................................................................+++
..........+++
writing new private key to 'example.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:cn  #国家简称
State or Province Name (full name) [Some-State]:shanghai  #省份
Locality Name (eg, city) []:shanghai  #城市
Organization Name (eg, company) [Internet Widgits Pty Ltd]:zhangzhibin #组织/公司名字
Organizational Unit Name (eg, section) []:tech  #组织单位名
Common Name (e.g. server FQDN or YOUR name) []:www.test.com  #域名/ip
Email Address []:954861399@qq.com  #邮箱

完成后, 会在当前目录下生成两个文件: 

example.crt example.key

 

###########2019年4月21日 11:39:18

免费的公网认证证书

let's Encrypt

证书自动生成 CartBot 

sudo certbot --nginx