利用CA根证书创建自签名证书

createCert.sh

read -p "Enter your domain [www.example.com]: " DOMAIN

echo "Create A Certificate ..."
openssl genrsa -out $DOMAIN.key 2048

echo "generate the certificate signing request ..."
#SUBJECT="/C=CN/ST=BeiJing/L=/O=hiipack/OU=DEV/CN=hiipack/[email protected]"
openssl req -new -key $DOMAIN.key -out $DOMAIN.csr

echo "sign the CSR, which requires the CA root key ..."
openssl x509 -req -in $DOMAIN.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out $DOMAIN.crt -days 500 -sha256