Blog-boxcorea

openssl   자체인증서 만들기

openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 3650 -key ca.key -out ca.crt
openssl genrsa -des3 -out server.key 4096
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 3650 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt
 여기서, set_serial   옵션이 잘못되었다고 에러. 그래서 그 옵션을 빼면,

openssl x509 -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key  -out server.crt

진행중 아래 에러발생

ca.srl: No such file or directory

 openssl x509 -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key  -CAcreateserial -out server.crt

결국 화일 생성됨

말그대로 ca.srl화일이 없어서 발생.

openssl x509 -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key  -CAcreateserial -out server.crt