ssl

自己（オレオレ）証明書

鍵生成

openssl genrsa 2024 > server.key
openssl req -new -key server.key > server.csr
openssl x509 -req -days 3650 -signkey server.key < server.csr > server.crt

SANs 付き

subjectAltName = DNS:hoge.com, DNS:fuga.com

openssl genrsa 2024 > server.key
openssl req -new -key server.key > server.csr
openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt -extfile san.txt

鍵長確認

openssl rsa -text < server.key

証明書内容確認

openssl x509 -text -in server.crt -noout