自签证书生成记录 cfssl cfssljson 1mkdir -p ssl/ca 2cfssl print-defaults config > ssl/ca/ca-config.json 3cfssl print-defaults csr > ssl/ca/ca-csr.json 4 5cat << 'EOF' > ssl/ca/ca-config.json 6{ 7 "signing": { 8 "default": { 9 "expiry": "2540400h" 10 }, 11 "profiles": { 12 "server": { 13 "expiry": "2540400h", 14 "usages": [ 15 "signing", 16 "key encipherment", 17 "server auth" 18 ] 19 }, 20 "client": { 21 "expiry":