godday生成crt和key文件

1、命令行生成csr文件，一切默认回车操作

openssl req -new -newkey rsa:2048 -nodes -keyout abc.com.key -out abc.com.csr

具体如下：

[root@ip-192-168-1-2 ssl]# mkdir abc.com
[root@ip-192-168-1-2 ssl]# cd abc.com
[root@ip-192-168-1-2 abc.com]# openssl req -new -newkey rsa:2048 -nodes -keyout abc.com.key -out abc.com.csr
Generating a 2048 bit RSA private key
.........+++
.....+++
writing new private key to 'abc.com.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:
State or Province Name (full name) []:
Locality Name (eg, city) [Default City]:
Organization Name (eg, company) [Default Company Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (eg, your name or your server's hostname) []:
Email Address []:Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

2、复制csr文件到godday上申请证书

[root@ip-192-168-1-2 abc.com]# cat abc.com.csr
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

复制到申请页面点击提交更改

3、下载证书：

4、将两个crt文件下载导入到一个crt文件中

[root@ip-192-168-1-2 abc.com]# cat 84e435766881a2b.crt gd_bundle-g2-g1.crt >> abc.com.crt

5、将abc.com.crt证书和abc.com.key放在nginx证书目录下

server {listen       80;listen       443 ssl;server_name  xxl-job.abc.com;access_log  logs/xxl-job.abc.com_80_access.log;error_log  logs/xxl-job.abc.com_80_error.log;#ssl on;ssl_certificate   ssl/abc.com.crt;ssl_certificate_key  ssl/abc.com.key;ssl_session_timeout 5m;ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;ssl_protocols TLSv1 TLSv1.1 TLSv1.2;ssl_prefer_server_ciphers on;#用于tomcat反向代理,解决nginx 504错误proxy_connect_timeout   600;proxy_send_timeout      600;proxy_read_timeout      600;proxy_buffer_size       16k;proxy_buffers           8 128k;proxy_busy_buffers_size 128k;proxy_temp_file_write_size 128k;# ps:以timeout结尾配置项时间要配置大点location / {proxy_redirect     off;proxy_set_header   Host             $host;proxy_set_header   X-Real-IP        $remote_addr;proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;#proxy_pass http://xxl-job;proxy_pass http://192.168.1.63:10850;}}

web端访问

查看证书如下

godday生成crt和key文件相关推荐

java生成 *.crt和*.key文件与*.keystore *.jks文件的转换
证书格式名称含义 .pem Privacy Enhanced Mail的缩写,一般是文本格式,可保存证书,可保存私钥,证书或密钥的Base64文本存储格式,打开看文本格式,以"-–BEG ...
JAVA利用keytool工具生成.crt和.key文件
1.生成一个名称为zhanghaiwen的证书 keytool -genkeypair -alias "zhanghaiwen" -keyalg "RSA" - ...
Nginx证书配置:cer文件和jks文件转nginx证书.crt和key文件
Nginx证书配置:cer文件和jks文件转nginx证书.crt和key文件环境步骤 1.利用JDK的keytool工具生成密钥库和证书(以下代码片段是一个bat脚本) 1.1 查看jks文件中 ...
pem crt key文件区别
配置HTTPS证书时,会要求配置证书和私钥. 比如Nginx server {listen 443 ssl http2 default_server;listen [::]:443 ssl http2 ...
openssl的使用方法（使用openssl生成csr文件和私钥key文件）
1. 概念解释: CSR文件:CSR,Certificate Signing Request的缩写,即证书签名请求,CSR文件是申请单位申请SSL证书时所需要的一个数据文件.CA使用CA自己的私钥对C ...
Nginx 配置Godaddy下载的没有.key 文件的SSL证书
Nginx 配置Godaddy下载的没有.key 文件的SSL证书一.为Godaddy的ssl配置.csr文件 1. 如果是新购买ssl证书:1. 控制台点击"SSL CERTIFICAT ...
apache2.4配置https协议（key文件、crt文件、csr文件生成方法）
生成私钥文件: 执行命令 [plain] view plain copy openssl genrsa -out server.key 1024 说明:这是用128位rsa算法生成密钥,得到serve ...
apache2.2配置https协议（key文件、crt文件、csr文件生成方法）
配置https协议: 1.安装好apache2.2环境,注意要装ssl版本的.这里装在c:/apache目录下. 2.生成服务器证书 1)在DOS命令下进入apache/bin目录 2)在window ...
crt证书linux使用,linux下使用openssl生成https的crt和key证书
x509证书一般会用到三类文,key,csr,crt Key 是私用密钥openssl格,通常是rsa算法. Csr 是证书请求文件,用于申请证书.在制作csr文件的时,必须使用自己的私钥来签署申,还 ...

godday生成crt和key文件

godday生成crt和key文件相关推荐

最新文章

热门文章