1、通过openssl生成私钥
openssl genrsa -out server.key 2048
2、根据私钥生成证书申请文件csr
openssl req -new -key server.key -out server.csr
3、使用私钥对证书申请进行签名从而生成证书
openssl x509 -req -in server.csr -out server.crt -signkey server.key -days 3650
openssl genrsa -out server.key 2048
openssl req -new -key server.key -out server.csr
openssl x509 -req -in server.csr -out server.crt -signkey server.key -days 3650