nginx配置ssl单向验证

1、生成一个RSA密钥

# openssl genrsa -des3 -out bym.phpmyadmin.com.key 1024 (这里需要输入密码)

2、拷贝一个不需要输入密码的密钥文件

# openssl rsa -in bym.phpmyadmin.com.key -out bym.phpmyadmin.com_nopass.key

3、生成一个证书请求

# openssl req -new -key bym.phpmyadmin.com.key -out bym.phpmyadmin.com.csr
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:ZHEJIAN
Locality Name (eg, city) []:HANGZHOU
Organization Name (eg, company) [Internet Widgits Pty Ltd]:BYM
Organizational Unit Name (eg, section) []:BYM
Common Name (e.g. server FQDN or YOUR name) []:www.xxxxx.com //服务器名称，这里注意了，一定要填写你网站的完整域名，因为浏览器会验证证书中的这个服务器名称和访问的服务器URL是否匹配！
Email Address []:[e-mail]

Please enter the following ‘extra’ attributes
to be sent with your certificate request
A challenge password []: 直接回车
An optional company name []: 直接回车

4、自己签发证书

# openssl x509 -req -days 365 -in ca.csr -signkey ca.key -out ca.crt