alphassl_logo.png
關(guān)于 AlphaSSL
We are not any old reseller. AlphaSSL is powered by GlobalSign, the International Certificate Authority with its own highly trusted root CA certificates. Here at AlphaSSL.com we undergo an annual WebTrust audit and we operate under our own stringent set of policy statements and documents.
1.使用 openssl 工具生成私鑰key
openssl genrsa -des3 -out clipchat.im.key 2048
此部分生成私鑰時(shí)陌选，不指定-des3參數(shù) 不需要輸入密碼短語(即passphrase)羹呵。為最大限度保證私鑰安全，最好設(shè)置 passphrase 。
2.基于私鑰key輸出
openssl req -new -key clipchat.im.key -out clipchat.im.csr
以上兩步可以用以下命令代替（注：沒指定-des3）
openssl req -out clipchat.im.csr -new -newkey rsa:2048 -nodes -keyout clipchat.im.key
執(zhí)行：
Generating a 2048 bit RSA private key
.................................................................................................................+++
...................................
............+++
writing new private key to 'clipchat.im.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:Shanghai
Locality Name (eg, city) []:Shanghai
Organization Name (eg, company) [Internet Widgits Pty Ltd]:YJ
Organizational Unit Name (eg, section) []:IT
Common Name (e.g. server FQDN or YOUR name) []:*.clipchat.im
Email Address []:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
3.查看生成的CSR
openssl req -noout -text -in clipchat.im.csr
確認(rèn)無誤后，將CSR文件上傳至CA機(jī)構(gòu)用于簽發(fā)證書
4.接收CA證書,校驗(yàn)證書
openssl x509 -noout -text -in clipchat.im.pem
至此 clipchat.key 和 clipchat.pem 將用于后續(xù)部署。
參考：https://www.alphassl.com/support/create-csr/apache.html
https://support.globalsign.com/customer/portal/articles/1229769
