GMSSL簽發證書

#### gen sm key

gmssl ecparam -genkey -name sm2p256v1 -out cakey.pem

#### gen cert req file

gmssl req -new -sm3 -key cakey.pem -out ca.csr -subj /C=CN/ST=Beijing/L=Haidian/O=Datang/OU=SDT/CN=Shixun/[email protected]

####自簽名得到CA憑證

gmssl x509 -req -days 3650 -signkey cakey.pem -in ca.csr -sm3 -out ca.crt

#### gen client crt

gmssl ecparam -genkey -name sm2p256v1 -out clientkey.pem

gmssl req -new -sm3 -key clientkey.pem -out client.csr -subj /C=CN/ST=Beijing/L=Haidian/O=Datang/OU=SDT/CN=Shixun/[email protected]

####CA簽名

gmssl x509 -req  -sm3 -CA ca.crt -CAkey cakey.pem -CAcreateserial -days 3650 -in client.csr -out client.crt

### 顯示證書資訊

gmssl x509 -text -noout -in client.crt