cd /usr/local/nginx/
openssl genrsa -des3 -out server.key 1024
# 123456
 
sudo openssl req -new -key server.key -out server.csr
 
#Country Name (2 letter code) [AU]:CN
#State or Province Name (full name) [Some-State]:Beijing
#Locality Name (eg, city) []:Beijing
#Organization Name (eg, company) [Internet Widgits Pty Ltd]:jd
#Organizational Unit Name (eg, section) []:insurance
#Common Name (e.g. server FQDN or YOUR name) []:luqi
#Email Address []:sesehai@qq.com
 
#Please enter the following 'extra' attributes
#to be sent with your certificate request
#A challenge password []:123456
#An optional company name []:jd
 
cp server.key server.key.org
openssl rsa -in server.key.org -out server.key
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt