1、openssl 的下载请登录openssl 官网https://www.openssl.org/source/
2、创建根证书私钥以及请求文件：openssl genrsa -out rootkey.key 1024openssl req -new -out rootreq.csr -key rootkey.key
3、自签名根证书：openssl x509 -req -in rootreq.csr -out rootcert.cer -signkey rootkey.key -CAcreateserial -days 3650
4、生成服务端keyopenssl genrsa -out serverkey.key 1024生成服务端请求文件openssl req -new -out serverreq.csr -key serverkey.key
5、生成服务器端证书：openssl x509 -req -in serverreq.csr -out serv髫潋啜缅ercert.cer -signkey serverkey.key -CA rootcert.cer -CAkey rootkey.key -CAcreateserial -days 3650
6、生成客户端key:openssl genrsa -out clientkey.key 1024生成客户端请求文件：openssl req -new -out clientreq.csr -key clientkey.key
7、生成客户端证书：openssl x509 -req -in cl坡纠课柩ientreq.csr -out clientcert.cer -signkey clientkey.key -CA rootcert.cer -CAkey rootkey.key -CAcreateserial -days 3650生成客户端p12证书：openssl pkcs12 -export -clcerts -in clientcert.cer -inkey clientkey.key -out clientp12.p12至此 https自签名证书生成完成。
