查看“︁Linux:自签证书生成”︁的源代码

<syntaxhighlight lang="bash">
keytool\
 -keystore server.jks  -storepass thisisapassword  -deststoretype pkcs12 \
 -genkeypair -keyalg RSA -validity 395 -keysize 2048  -sigalg SHA256withRSA \
 -dname "CN=registry.example.com,O=KingSoft,OU=BigData,L=Wuhan,ST=Hubei,C=CN" \
 -ext "SAN=IP:192.168.56.1,DNS:registry.example.com,EMAIL:admin@example.com"

openssl pkcs12 -in server.jks -nodes -nocerts -out cert.key
openssl pkcs12 -in server.jks -nokeys -out cert.crt

</syntaxhighlight>

* https://ultimatesecurity.pro/post/san-certificate/

[[Category:Linux/Unix]]