什么情况 怎么还要cert.pem ?

[Mr-xin-Z]

2017/09/21 17:38:04 cfg.go:64: read config file: cfg.json successfully
2017/09/21 17:38:04 http.go:77: http listening 0.0.0.0:2001
2017/09/21 17:38:04 http.go:79: open cert.pem: no such file or directory

[Mr-xin-Z]

[root@linux-node1 ops-updater-https]# ls -lt
total 9204
-rwxr-xr-x 1 root root 9404364 Sep 21 17:37 ops-updater-https
drwxr-xr-x 2 root root 34 Sep 21 17:32 var
-rw-r--r-- 1 root root 174 Jan 11 2016 cfg.json
-rwxr-xr-x 1 root root 2033 Jan 11 2016 control
drwxr-xr-x 2 root root 122 Jan 11 2016 cron
drwxr-xr-x 2 root root 43 Jan 11 2016 g
drwxr-xr-x 2 root root 50 Jan 11 2016 http
-rw-r--r-- 1 root root 892 Jan 11 2016 main.go
-rwxr-xr-x 1 root root 2156 Jan 11 2016 owl
-rw-r--r-- 1 root root 2870 Jan 11 2016 README.md

[lionel126]

good luck

[kurolz]

解决方案：

1. 首先建立CA密钥：

openssl genrsa -des3 -out ca.key 1024 (创建密钥)
chmod 400 ca.key (修改权限为仅root能访问)
openssl rsa -noout -text -in ca.key (查看创建的证书)

2. 利用CA密钥自签署CA证书：

openssl req -new -x509 -days 3650 -key ca.key -out ca.crt
chmod 400 ca.crt (修改权限为仅root能访问)
openssl x509 -noout -text -in ca.crt (查看创建的证书)

cat ca.key ca.crt > cert.pem

openssl rsa -in cert.pem -out key.pem

将cert.pem和key.pem放在目录下