mysql - OpenSSL - 0 深度查找时出现错误 18 :self signed certificate

Question

我正在尝试创建一个 SSL 证书以用于 MySQL，如下所述:http://dev.mysql.com/doc/refman/5.5/en/creating-ssl-certs.html

验证证书时出现以下错误

  # openssl verify -CAfile ca-cert.pem server-cert.pem client-cert.pem
    server-cert.pem: C = IN, ST = KERALA, L = COCHIN, O = ABCD, OU = OPERATIONAL, CN = SATHISH, emailAddress = sathish@abcd.com
    error 18 at 0 depth lookup:self signed certificate
    OK
    client-cert.pem: C = IN, ST = KERALA, L = COCHIN, O = ABCD, OU = OPERATIONAL, CN = sathish, emailAddress = sathish@abcd.com
    error 18 at 0 depth lookup:self signed certificate
    OK

有人可以根据上面链接中的文档帮助我生成 key 而不会出现任何错误。

Answer 1

我认为您错过了这部分说明:

Whatever method you use to generate the certificate and key files, the Common Name value used for the server and client certificates/keys must each differ from the Common Name value used for the CA certificate. Otherwise, the certificate and key files will not work for servers compiled using OpenSSL.

当 OpenSSL 提示您输入每个证书的通用名称时，请使用不同的名称。