4.客户端证书生成

4.1 生成私钥

        命令：

        openssl genrsa -des3 -out client.key 1024

 4.2 创建 CSR（证书签名请求）

         配置文件:client_openssl.cnf

[req]
distinguished_name = req_distinguished_name
req_extensions = v3_req[req_distinguished_name]
countryName                 = CN
stateOrProvinceName         = ZJ
localityName                = HZ
organizationName    = MyRootClient
organizationalUnitName   = MyClient
commonName                  = localhost
commonName_max              = 64
commonName_default          = localhost[v3_req]
subjectAltName = @alt_names[alt_names]
DNS.1 = localhost
IP.1 = 127.0.0.1
IP.2 = 192.168.137.165

         命令：