点击查看中文版。

This is a tutorial for building a PKI (Public Key Infrastructure) based on OpenSSL, including

• Key management
• Create root CA certificates
• Create secondary CA certificates
• Issue server certificates
• etc

For DEMO, please visit Fenying CA.

This tutorial is published on the author's personal blog, click to view.

1. RSA Keys/Certificates

   1. Manage RSA Keys
   2. Initialize RSA Root CA
   3. Initialize RSA Intermediate CA

2. EC Keys/Certificates

   1. Manage EC Keys
   2. Initialize EC Root CA
   3. Initialize EC Intermediate CA

3. Terminal Certificates

   1. Issue Server-side Certificates
   2. Issue Client-side Certificates
   3. Revoke Certificates

4. Cross-signing

   Unfinished.

5. Appendices

   1. Generate random seed file

• Configuration file

• CA Manuals

This document is published under the CC-BY-4.0 license on Github, please follow this license for redistribution.