SSL – 从Apache的private-key.pem创buildprivate.key

我遵循本教程为我的AWS SSL csr.pem生成了private-key.pem和csr.pem 。 一切顺利，但现在我需要设置Apache，并需要3个文件。

 SSLCertificateFile /etc/pki/tls/certs/public.crt SSLCertificateKeyFile /etc/pki/tls/certs/private.key SSLCertificateChainFile /etc/pki/tls/certs/intermediate.crt 

从我的文件private-key.pem ， csr.pem ， cert.pem和ca.pem
我怎样才能生成public.crt ， private.key和intermediate.crt ？

这里是我的.conf条目

 <VirtualHost *:80> DirectoryIndex index.html index.php ServerName www.mydomain.com ServerAlias mydomain.com DocumentRoot /var/www/mydomain.com ErrorLog /var/log/conf.log <Directory /var/www/mydomain.com> AllowOverride All Allow from all </Directory> </VirtualHost> <VirtualHost *:443> DirectoryIndex index.html index.php ServerAdmin [email protected] DocumentRoot /var/www/mydomain.com ServerName www.mydomain.com ErrorLog /var/log/conf.log SSLEngine on SSLProtocol all SSLCertificateFile /etc/pki/tls/certs/cert.pem SSLCertificateKeyFile /etc/pki/tls/certs/private-key.pem SSLCertificateChainFile /etc/pki/tls/certs/ca.pem #ServerPath /home <Directory "/var/www/mydomain.com"> </Directory> </VirtualHost> SSLPassPhraseDialog builtin SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000) SSLSessionCacheTimeout 300 Mutex default SSLRandomSeed startup file:/dev/urandom 256 SSLRandomSeed connect builtin SSLCryptoDevice builtin 

• PEM档案“证书”与“公钥”
• 使用HAProxy升级OpenSSL版本
• openssl smime消息签名：为什么我需要一个-certfile密钥？
• 我如何保护Sophos OpenSSL设置不被覆盖？
• 即使在非SSL的网站上，Nginx也总是重写为ssl