在192.168.1.102上操作
touch /etc/pki/CA/index.txt
echo 01 > /etc/pki/CA/serial
(umask 077; openssl genrsa -out/etc/pki/CA/private/cakey.pem 2048)
openssl req -new -x509 -key /etc/pki/CA/private/cakey.pem -days 7300 -out /etc/pki/CA/cacert.pem
转载于:https://blog.51cto.com/362475097/1888298