linux生成csr

 

假设私钥和CSR都生成后放到用户目录. 假设用户目录是 /home/user/
(根据具体用户名更改成自己的)

先生成私钥:
openssl genrsa -out /home/user/privatekey.pem 2048

再生成csr
openssl req -new -key /home/user/privatekey.pem -out /home/user/csr.pem -config /home/user/csr.cnf

 

 

 

[req]
prompt = no
distinguished_name = req_dn
req_extensions = v3_req

[req_dn]
C = CN
S = Zhejiang
L = Hangzhou
OU = China
O = Saint-Gobain APAC
CN = erp.joinleader.cn
emailAddress = dl-jl-it@saint-gobain.com

[v3_req]
subjectAltName = @alt_names

[alt_names]
DNS.1 = erp.joinleader.cn