[轉]如何使用 OpenSSL 建立開發測試用途的自簽憑證 (Self-Signed Certificate)

https://blog.miniasp.com/post/2019/02/25/Creating-Self-signed-Certificate-using-OpenSSL

目前這個方式比較靠普

建立 ssl.conf 設定檔

  
[req]  
prompt = no  
default_md = sha256  
default_bits = 2048  
distinguished_name = dn  
x509_extensions = v3_req  
  
[dn]  
C = TW  
ST = Taiwan  
L = Taipei  
O = Duotify Inc.  
OU = IT Department  
emailAddress = admin@example.com  
CN = localhost  
  
[v3_req]  
subjectAltName = @alt_names  
  
[alt_names]  
DNS.1 = *.localhost  
DNS.2 = localhost  
DNS.3 = 192.168.2.100  

  
openssl req -x509 -new -nodes -sha256 -utf8 -days 3650 -newkey rsa:2048 -keyout server.key -out server.crt -config ssl.conf