openssl genrsa -out ssl.key 1024
openssl req -new -key ssl.key -out ssl.csr
一路Next以后, 到这一步时须要填写服务器的IP地址或域名 Common Name (e.g. server FQDN or YOUR name) []:shell
openssl x509 -req -in server.csr -signkey server.key -out server.crt
https://www.jianshu.com/p/7e566a39bdb2服务器