你这样做：
openssl genrsa -des3 -passout pass:yourpassword -out /path/to/your/key_file 1024
openssl req -new -passin pass:yourpassword -passout pass:yourpassword -key /path/to/your/key_file -out /path/to/your/csr_file -days 365
openssl req -x509 -passin pass:yourpassword -passout pass:yourpassword -key /path/to/your/key_file -in /path/to/your/csr_file -out /path/to/your/crt_file -days 365
openssl rsa -passin pass:yourpassword -in /path/to/your/key_file -out /path/to/your/key_file2
chmod 400 /path/to/your/key_file2
