Openssl生成RSA-PSS证书

1.自签名RSA-PSS证书
openssl req -new -x509 -newkey rsa:2048 -sha256 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -nodes -keyout ca.key -out ca.crt
其中：rsa_pss_saltlen:-1 代表填充于hash等长
rsa_pss_saltlen: n(如200)为自定义长度

1.签发RSA-PSS证书
openssl x509 -req -in server.csr -sha512 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -CA ca.crt -CAkey ca.key -out server.crt

标签：Openssl,ca,RSA,rsa,saltlen,pss,sigopt,PSS
来源： https://blog.csdn.net/qq_38493182/article/details/113748864