rem 設置openssl的路徑
set OPENSSL_HOME=I:\workspace\openssl\openssl-0.9.7
path=%path%;%OPENSSL_HOME%\out32dll
rem 產生私鑰
openssl genrsa -out %1.pem -rand ca\.rand 512
rem 生成自簽名公鑰
openssl req -new -x509 -days 3650 -key %1.pem -out %1_self.cer -config openssl.cnf
rem 用CA私鑰進行簽名
openssl ca -ss_cert %1_self.cer -config openssl.cnf -policy policy_anything -out %1.cer
del %1_self.cer
rem 生成pfx文件
openssl pkcs12 -export -in %1.cer -inkey %1.pem -out %1.pfx
pause