一、生成pem格式公私钥
step1:生成私钥
openssl genrsa -out private_key.pem 2048
step2:转成pkcs8
openssl pkcs8 -topk8 -inform PEM -in private_key.pem -outform PEM -nocrypt -out rsa_private_key.pem
step3:生成公钥
openssl rsa -in private_key.pem -pubout -out rsa_public_key.cer
二、生成cer格式公钥和证书
step1:生成私钥
openssl genrsa -des3 -out private_key.key 2048 //des3 需要填写密码
step2:生成 csr
openssl req -new -key private_key.key -out private_key.csr
step3:生成公钥
openssl x509 -req -in private_key.csr -out public_key.cer -signkey private_key.key -days 7500
step4:生成证书
openssl pkcs12 -export -clcerts -in public_key.cer -inkey private_key.key -out user_name.pfx