openssl生成证书

1. 生成CA私钥
   openssl ecparam -genkey -name SM2 -out ca.key.pem -noout

2. 证书请求
   openssl req -new -key ca.key.pem -out ca.cert.req -subj “/CN=rtems-strongswan-CA”

3. 生成证书
   openssl x509 -req -days 3650 -in ca.cert.req -signkey ca.key.pem -out ca.cert.pem

4. 生成目标私钥
   openssl ecparam -genkey -name SM2 -out carolKey.pem -noout

5. 证书请求
   openssl req -new -key carolKey.pem -out carolCert.req -subj “/CN=rtems-strongswan-carol”

6. 生成证书
   openssl x509 -req -days 3650 -in carolCert.req -CA ca.cert.pem -CAkey ca.key.pem -out carolCert.pem

7. 查看私钥密钥格式ASN.1内容
   openssl asn1parse -in openssl_dave.key

8. 查看证书内容
   openssl x509 -in openssl_dave.pem -noout -text