mirror of
https://github.com/alibaba/anyproxy.git
synced 2025-05-10 14:58:27 +00:00
指定 sha256 而不是 sha1 的证书, 避免 Chrome 下证书警告
This commit is contained in:
parent
207ff83bb6
commit
f0c42dce72
@ -38,11 +38,11 @@ openssl rsa -in $outputPath$domain.key -passin pass:$password -out $outputPath$d
|
|||||||
|
|
||||||
#Create the request
|
#Create the request
|
||||||
echo "Creating CSR"
|
echo "Creating CSR"
|
||||||
openssl req -new -key $outputPath$domain.key -out $outputPath$domain.csr -passin pass:$password \
|
openssl req -sha256 -new -key $outputPath$domain.key -out $outputPath$domain.csr -passin pass:$password \
|
||||||
-subj "/C=$country/ST=$state/L=$locality/O=$organization/OU=$organizationalunit/CN=$commonname/emailAddress=$email"
|
-subj "/C=$country/ST=$state/L=$locality/O=$organization/OU=$organizationalunit/CN=$commonname/emailAddress=$email"
|
||||||
|
|
||||||
#Generating a Self-Signed Certificate
|
#Generating a Self-Signed Certificate
|
||||||
openssl x509 -req -days 365 -in $outputPath$domain.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out $outputPath$domain.crt
|
openssl x509 -req -sha256 -days 365 -in $outputPath$domain.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out $outputPath$domain.crt
|
||||||
# -signkey $outputPath$domain.key
|
# -signkey $outputPath$domain.key
|
||||||
#openssl x509 -req -in host.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out host.crt -days 365
|
#openssl x509 -req -in host.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out host.crt -days 365
|
||||||
echo "Finished"
|
echo "Finished"
|
||||||
|
@ -21,7 +21,7 @@ echo Removing passphrase from key
|
|||||||
openssl rsa -in %domain%.key -passin pass:%password% -out %domain%.key
|
openssl rsa -in %domain%.key -passin pass:%password% -out %domain%.key
|
||||||
|
|
||||||
echo Creating CSR
|
echo Creating CSR
|
||||||
openssl req -new -key %domain%.key -out %domain%.csr -passin pass:%password% -subj /C=%country%/ST=%state%/L=%locality%/O=%organization%/OU=%organizationalunit%/CN=%commonname%/emailAddress=%email%
|
openssl req -sha256 -new -key %domain%.key -out %domain%.csr -passin pass:%password% -subj /C=%country%/ST=%state%/L=%locality%/O=%organization%/OU=%organizationalunit%/CN=%commonname%/emailAddress=%email%
|
||||||
|
|
||||||
openssl x509 -req -days 3650 -in %domain%.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out %domain%.crt
|
openssl x509 -req -sha256 -days 3650 -in %domain%.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out %domain%.crt
|
||||||
echo Finished
|
echo Finished
|
||||||
|
Loading…
x
Reference in New Issue
Block a user