OpenSSL学习

openssl x509 -in 192.168.1.137.crt -noout -text 查看证书文件信息
openssl req -text -noout -in csr/192.168.1.137.csr 查看证书请求文件信息

openssl req -new -key 192.168.1.137.key -out csr/192.168.1.137.csr 生成证书请求文件
openssl ca -in csr/192.168.1.137.csr -out 192.168.1.137.crt -days 365 签发证书
openssl ca -in csr/192.168.1.137.csr -out 192.168.1.137.crt -extensions v3_req -config /etc/pki/tls/openssl.cnf

openssl ca -revoke newcerts/06.pem 撤销证书