mirror of
https://github.com/guanzhi/GmSSL.git
synced 2026-06-20 03:44:15 +08:00
33 lines
1.6 KiB
C
33 lines
1.6 KiB
C
/*
|
|
* Copyright 2014-2026 The GmSSL Project. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the License); you may
|
|
* not use this file except in compliance with the License.
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*/
|
|
|
|
"Examples\n"
|
|
"\n"
|
|
" gmssl sm2keygen -pass 1234 -out rootcakey.pem\n"
|
|
" gmssl certgen -C CN -ST Beijing -L Haidian -O PKU -OU CS -CN ROOTCA -days 3650 \\\n"
|
|
" -key rootcakey.pem -pass 1234 -out rootcacert.pem \\\n"
|
|
" -key_usage keyCertSign -key_usage cRLSign -ca\n"
|
|
"\n"
|
|
" gmssl sm2keygen -pass 1234 -out cakey.pem\n"
|
|
" gmssl reqgen -C CN -ST Beijing -L Haidian -O PKU -OU CS -CN \"Sub CA\" \\\n"
|
|
" -key cakey.pem -pass 1234 -out careq.pem\n"
|
|
" gmssl reqsign -in careq.pem -days 365 -key_usage keyCertSign -cacert rootcacert.pem -key rootcakey.pem -pass 1234 \\\n"
|
|
" -out cacert.pem -ca -path_len_constraint 0\n"
|
|
"\n"
|
|
" gmssl sm2keygen -pass 1234 -out signkey.pem\n"
|
|
" gmssl reqgen -C CN -ST Beijing -L Haidian -O PKU -OU CS -CN localhost -key signkey.pem -pass 1234 -out signreq.pem\n"
|
|
" gmssl reqsign -in signreq.pem -days 365 -key_usage digitalSignature -cacert cacert.pem -key cakey.pem -pass 1234 -out signcert.pem\n"
|
|
"\n"
|
|
" cat signcert.pem > certs.pem\n"
|
|
" cat cacert.pem >> certs.pem\n"
|
|
"\n"
|
|
" gmssl tls12_server -port 4430 -cert certs.pem -key signkey.pem -pass 1234\n"
|
|
" gmssl tls12_client -host 127.0.0.1 -port 4430 -cipher_suite TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 -supported_group prime256v1 -sig_alg ecdsa_secp256r1_sha256 -cacert rootcacert.pem\n"
|
|
|