[ req ]
default_bits = 2.048 乙肝
default_keyfil.e = /u01/ca/priva.te/cakey.pem<性病>
default_md = md.5域名
prompt = no
distinguished_name = root_ca_disting.uished_.name服务器
extensions = .v3_req.
[ root_ca_distinguished_n.ame .].
commonNa.me .= My Test extension[成人用品]
s.tateOrProvin.ceName = jilin电影
countryName .= CN 汽车
emailA.ddress =.
redogs@sina.com.cn 女人
organiza.tionName = jlu服务器
[ v3_req ]
subjectAltName=email.:steve@here,email:steve@.there.
basicConst.raints = CA:FAL.SE域名
该文件保存为ext.cnf
生成证书请求：openssl req -config ext.conf -.newkey rsa:.1024 -keyout key.pem. -out req.pem 乙肝
下面是CA配置
[ myca ]
dir = /u01/ca
certificate .= $dir/c.acert.pem--------------彩票
database = $dir/ind.ex.txt.
new_certs_dir = $.dir/cert.s 杀毒
priva.te_key = $dir/private/c.akey.pem投资
s.erial = $dir/serial学习
copy_ex.tensions = copy电影
default_crl._days= 7 电子
default_day.s = 365健康
def.ault_md = md5投资
policy = myca_po.licy域名
x509_exten.sions = certificate_extensi.ons.
[ .myca_policy ] 婚庆
commonName = supplie.d 鲜花
stateOrProvinceN.a.me = supplied.
c.ountryName = supplied.
emailAddress = .supplied--- 印刷
organizationName= su.pplied..
or.ganizationalUnitName. = optional.
[ certificate_e.x.tensions ] 电子
basicConstrain.ts= CA.:false.
[ req ]
default_bits = .2048--- 印刷
d..efault_keyfile = /u01/ca/private/cakey.pem.
defau.lt_md = md5 电子
prompt = no
distinguished_name =. root_ca_distingu.ished_name 汽车
x509_extens.ions = root_ca_.extensions
[ root_ca_disting.uished_n.ame ].
commonName = My .Test CA.
stateOrP.rovinceName = ji.lin.
countryName = CN.--- 印刷
em.ai.lAddress =
redogs@sina.com.cn 电子
organ.izationName = jlu.
[ root_ca_ex.tensions ]--------------彩票
basicC.onstraints =. CA:true健康
CA签证：
open.ssl ca -config ../openssl..conf -in req.pem 婚庆
查看证书内容没有扩展部分
Certificate:
Data:
. Version: 3 (0x2) 建材
. . Serial Number: 10 (0xa)( 游戏 )
Signature Algorithm: md5Wi.thRSAEnc.ryption教育
Issuer: CN=My Test. ..CA, ST=jilin, C=CN/emailAddress=redogs@sina.com.cn, O=jlu[成人用品]
. Validity域名
Not. Before: May 8 13:05:09 200.7 GMT域名
Not .Af.ter : May 7 13:05:09 2008 GMT学习
Subje.ct: CN=My Test extension, ST=jilin, C=CN/em.ailAddress=redogs.@sina.com.cn, O=jlu--- 印刷
. Subject Public Key Info:. 建材
Public Key Algo.rithm: rsaEncrypt.ion.
RSA Public Key: (1.024 bi.t)电影
Mo.dulus (1024 b.it):<性病>
. 00:9a:65:76.:84:d9:2f:b8:77:be:b8:6e:73:d4:30:域名
. 3d:39:b7:a4:90:.db:83:a6:eb:26:f8:34:d4:8a:0c:电影
31.:cc:b2:e.a:f3:02:23:46:e1:51:65:6d:81:12:6a: 杀毒
b3:7f:32.:c3.:e4:c3:00:6c:3c:ca:3f:ee:26:24:01:.
. . 21:ed:7c:d3:1b:08:f1:bb:71:c9:e0:4b:ac:18:72: 建材
. 70:43:93:0f:.0d:f7:d7:42:b2:3e:f7:7f:2c:20:66: 汽车
b7:ec:57.:41:f8:b4:43:cc:5b:26:0f:64:eb:.6d:81:.
.57:be:80:ca:65:ae:06:96:53:1b:0e:82:d6:f9:f2.:.
. 09:88:3a:ac.:ed:aa:dd:4a:3d 外汇
Exponent:. 65537 (.0x10001).
X509v.3 extensions:..
X509v3 Ba.sic C.onstraints: 域名
. CA:FALSE( 游戏 )
Signature Alg.orithm: md5.WithRSAEncryption投资
03:4.1:eb:8c:83:b6:98:19:53:98:c1:e.d:9a:32:71:55:59:9f:.
. f0.:57:76:8d:78:fa:68:12:d8:bb:bb:ad:ef:f1:93:44:a0:32: 女人
71:6f:52:bb:.13:6b:68:23:4b:c1:4b:c6:a5:83:47.:52:19:e9: 汽车
. c3:fa:5c:d7:4a:5b:05:2e:55:.7a:b7:5b:a8:b7:ea:05:32:7f:服务器
df:5c:74:56:2f:98:62:a8:b0:4f:26:4d:fe:80:e3:.a1.:7f:9a:电脑
59:6f:4.d.:af:f3:cb:b0:f2:b0:1e:1b:3f:69:9e:0b:a3:d0:89: 美容
4c:.5e:ef:.10:01:3c:c1:8e:08:38:98:fe:a1:e0:ac:f1:1c:2f:[成人用品]
1a:e3:43:e0:14:94:05:0a.:85:31:4f:a2:e8.:29:f7:33:cd:70:投资
ae:1.0:64:9c:76:04:61:cb:7c:37:f5:8b:8a:92:2f:a2:e6:b.9: 建材
.2a:95:71:fc:d5:67:3c:6d:35:20:cc:39:ff:a7:2.d:f9:68:c4:.
ab:2e:be:0e:60:54:.e.c:15:5e:7a:16:1f:cf:45:e5:50:d5:3b: 健康
54:17:bd:83:31:af:f8:c8:0d:c3:23:78:60:ca:b8:8.d:33.:14: 美容
43.:95:06:5d:e2:65:1a:91:cb:b.5:f4:43:ab:23:c3:8f:cc:8a: 鲜花
. 81:76:c4:a1:2a:37:38:60:0a:fb:87:0c:b.2:f6:f4:c3:64:76:--------------彩票
ca:73:a0.:1e电影
-----BEG.IN CERTIFICATE----.-.
MIIC0TCCAbmgAwIB.AgIBCjANBgkqhkiG9w0BAQQFADBjMRMwEQYD.VQQDEwpNeSBU.
ZXN0IENBMQ4wDAYDVQQIEwVqaWxpbjELMAkGA1UEBhM.CQ04xITAfBgkqh.kiG9w0B电脑
CQE.WEnJlZG9nc0BzaW5hLmNvbS5jbjEMMAoGA1UEChMDa.mx1MB4XDTA3MDUwODEz电影
MDUwOVoXDTA4MDUwNzEzMDUwOVo.wajEaM.BgGA1UEAxMRTXkgVGVzdCBleHRlbnNp 乙肝
b24xDjAMBgNVBAgTBWppbG.luMQswCQYDVQQGEwJDTjEhMB.8GCSqGSIb3DQEJARYS.
cmVkb2dzQHNpbmEuY29tLmNuMQwwCgYDVQQKEwN.qbHUwgZ8wDQYJKoZIhvcNAQEB. 建材
BQADgY0AMIGJAoGBAJpldoTZL7h3vrhuc9Q.wPTm3pJDbg6brJvg01I.oMMcyy6vMC 建材
I0bhUWVtgRJqs38yw+TDAGw8yj/uJiQBIe180xsI8btxyeBLrBhycEOTDw.3310K.y.
Pvd/LCBmt.+xXQfi.0Q8xbJg9k622BV76AymWuBpZTGw6C1vnyCYg6rO2q3Uo9AgMB.
AAGjDTALMAkGA1UdEwQCMAAwDQYJ.KoZIhvcNAQEEBQ.ADggEBAANB64yDtpgZU5jB 建材
7ZoycVVZn/BXdo14+mgS2Lu7re/xk0S.gMnFvUr.sTa2gjS8FLxqWDR1IZ6cP6XNdK 杀毒
WwU.uVXq3W6i36gUyf99cdFYvmGKosE8mTf6A46F/ml.lvTa/zy7DysB4bP2meC6PQ--------------彩票
iUxe7xABPMGOCDiY/qHgrPEcLxrjQ+AUlAUKhTFPougp9.zPNcK4QZJx2BGHLf.Df1.
i4qSL6LmuSqVcfzVZzxtNSDMOf+.nLfloxKsuvg5gV.OwVXnoWH89F5VDVO1QXvYMx.
r/jIDcMjeGDKuI0zFE.OVBl3iZRqRy7X0Q6sjw4/MioF2xKEqNzhgCvuHDLL29MN.k 乙肝
dspzoB4=
-----END CERTIFICATE-.----投资
请高手赐教如何在请.求中加入扩展部分，CA签证后仍保留该扩展部.分？？ 健康
