gmssl 生成证书命令

cd gmssl/apps/
export LD_LIBRARY_PATH=$PWD:$LD_LIBRARY_PATH
export OPENSSL_CONF=openssl.cnf
cd ../bin/
expire_days=365
subj=/C="CN"/ST="BeiJing"/L="HaiDian"/O="Itarge"/OU="Yanfa"/CN="LC"/emailAddress="[email protected]"
#### gen sm key
./gmssl ecparam -genkey -name sm2p256v1 -out sm2key.pem
#### gen cert req file
./gmssl req -new -nodes -key sm2key.pem -sm3 -out sm2testcert.csr -subj $subj -days $expire_days
#### gen cert
./gmssl x509 -req -signkey sm2key.pem -in sm2testcert.csr -sm3 -out sm2test.cert
#######print cert
./gmssl x509 -in sm2test.cert -text -noout
###### clean all
rm -f sm2key.pem sm2testcert.csr sm2test.cert