命令记不住

自签SSL证书

1.准备文件

#ls
certs.sh  cfssl  cfssl-certinfo  cfssljson  cfssl.tar.gz

纯二进制包准备命令

#ls
cfssl           cfssl-certinfo  cfssljson  
#cp cfssl* /usr/bin/

2.修改域名

编辑脚本

# web.aliangedu.cn
cat > web.aliangedu.cn-csr.json <<EOF
{
  "CN": "web.aliangedu.cn",
}
cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=ca-config.json -profile=kubernetes web.aliangedu.cn-csr.json | cfssljson -bare web.aliangedu.cn

3.生成证书

#./certs.sh 
2021/11/21 22:30:34 [INFO] generating a new CA key and certificate from CSR
2021/11/21 22:30:34 [INFO] generate received request
2021/11/21 22:30:34 [INFO] received CSR
2021/11/21 22:30:34 [INFO] generating key: rsa-2048
2021/11/21 22:30:35 [INFO] encoded CSR
2021/11/21 22:30:35 [INFO] signed certificate with serial number 62804892863499909496748941631137939408190484493
2021/11/21 22:30:35 [INFO] generate received request
2021/11/21 22:30:35 [INFO] received CSR
2021/11/21 22:30:35 [INFO] generating key: rsa-2048
2021/11/21 22:30:35 [INFO] encoded CSR
2021/11/21 22:30:35 [INFO] signed certificate with serial number 692860360902657280348482843520138640409791801547
2021/11/21 22:30:35 [WARNING] This certificate lacks a "hosts" field. This makes it unsuitable for
websites. For more information see the Baseline Requirements for the Issuance and Management
of Publicly-Trusted Certificates, v.1.1.6, from the CA/Browser Forum (https://cabforum.org);
specifically, section 10.2.3 ("Information Requirements").

查看结果

#ls -lrt
total 24564
-rwxr-xr-x 1 root root     1005 Nov 21 22:20 certs.sh
-rw-r--r-- 1 root root      294 Nov 21 22:30 ca-config.json
-rw-r--r-- 1 root root      212 Nov 21 22:30 ca-csr.json
-rw-r--r-- 1 root root     1273 Nov 21 22:30 ca.pem
-rw------- 1 root root     1675 Nov 21 22:30 ca-key.pem
-rw-r--r-- 1 root root      960 Nov 21 22:30 ca.csr
-rw-r--r-- 1 root root      189 Nov 21 22:30 web.aliangedu.cn-csr.json
-rw-r--r-- 1 root root     1318 Nov 21 22:30 web.aliangedu.cn.pem
-rw------- 1 root root     1679 Nov 21 22:30 web.aliangedu.cn-key.pem
-rw-r--r-- 1 root root      968 Nov 21 22:30 web.aliangedu.cn.csr

4.使用证书

key :

web.aliangedu.cn-key.pem

crt

web.aliangedu.cn.pem

5.文件下载

链接：https://pan.baidu.com/s/1GkEzXCGyxw5Q_3sfddPKvQ 
提取码：96A1