openssl genrsa -out ssl.key 1024
openssl req -new -key ssl.key -out ssl.csr
一路Next以後, 到這一步時須要填寫服務器的IP地址或域名 Common Name (e.g. server FQDN or YOUR name) []:shell
openssl x509 -req -in server.csr -signkey server.key -out server.crt
https://www.jianshu.com/p/7e566a39bdb2服務器