客户端SSL证书如何生成？？

fedorame

建议你看一下securityfocus里的有关SSL的文章。

black_fire

## create CA

./CA.sh -newca


## for server
openssl genrsa -des3 -out server.key 1024
openssl req -new -key server.key -out server.csr
mv server.csr newreq.pem
./CA.sh -sign
mv newcert.pem server.crt

## for clients
openssl genrsa -des3 -out user1.key 1024
openssl req -new -key user1.key -out user1.csr
openssl ca -in user1.csr -out user1.crt
openssl pkcs12 -export -clcerts -in user1.crt -inkey user1.key -out user1.pfx

then import ca.crt and user1.pfx into clients' browser