openssl证书制作

制作rootca
1. openssl genrsa -des3 -out ca.key 1024        // secret
2. openssl rsa -in ca.key -out ca.key
3. openssl req -new -x509 -key ca.key -out ca.crt -days 3650

签名
openssl genrsa 1024 > server.key
openssl req -new -key server.key > server.csr
openssl ca -in server.csr -out server.crt -cert ca.crt -days 3650 -keyfile ca.key