1.创建根证书
# 生成 RSA 私有秘钥
openssl genrsa -out ca-key.pem 4096
# 生成CSR(Certificate Signing Request),CSR和KEY是匹配的,CSR是最终的证书和私钥配对使用
openssl req -x509 -new -nodes -sha512 -days 3650 -subj "/C=CN/ST=Guangdong/L=Shenzhen/O=example/OU=DCP/CN=registry.test.com" -key ca-key.pem -out ca.pem
标签:key,自建,证书,harbor,ca,生成,pem,https,CSR
From: https://www.cnblogs.com/yuhaohao/p/17759742.html