https openssl http2

2018-3-21 10:27:45 星期三

参考: 对https, http2的解释

总结:

生成自有证书(非第三方证书颁发公司)

我使用的是gitbash工具, 命令为:

$ openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout example.key -out example.crt

接下来会提问一堆问题:

 Generating a  bit RSA private key
 ............................................................................................+++
 ..........+++
 writing new private key to 'example.key'
 -----
 You are about to be asked to enter information that will be incorporated
 into your certificate request.
 What you are about to enter is what is called a Distinguished Name or a DN.
 There are quite a few fields but you can leave some blank
 For some fields there will be a default value,
 If you enter '.', the field will be left blank.
 -----
 Country Name ( letter code) [AU]:cn  #国家简称
 State or Province Name (full name) [Some-State]:shanghai  #省份
 Locality Name (eg, city) []:shanghai  #城市
 Organization Name (eg, company) [Internet Widgits Pty Ltd]:zhangzhibin #组织/公司名字
 Organizational Unit Name (eg, section) []:tech  #组织单位名
 Common Name (e.g. server FQDN or YOUR name) []:www.test.com  #域名/ip
 Email Address []:@qq.com  #邮箱

完成后, 会在当前目录下生成两个文件:

example.crt example.key

###########2019年4月21日 11:39:18

免费的公网认证证书

let's Encrypt

证书自动生成 CartBot

sudo certbot --nginx