rem 設(shè)置openssl的路徑
set OPENSSL_HOME=I:\workspace\openssl\openssl-0.9.7
path=%path%;%OPENSSL_HOME%\out32dll

md ca
cd ca
del/s/q *

rem 建立隨機(jī)文件
echo 1234567890 > .rand

rem 建立數(shù)據(jù)庫(kù)
echo #database > index.txt

rem 建立索引
echo 01 > serial

rem 生成CA私鑰
openssl genrsa -out cakey.pem -rand .rand 512

rem 建立CA待簽名證書(shū)
:openssl req -new -out careq.csr -key cakey.pem

rem 建立CA中心根證書(shū),自簽名
openssl req -new -x509 -days 3650 -key cakey.pem -out cacert.cer -config ..\openssl.cnf

cd ..
pause