SSL证书相关有用的信息

https://www.sslshopper.com/article-most-common-openssl-commands.html

https://www.ssl.com/how-to/create-a-pfx-p12-certificate-file-using-openssl/

## SSL安装相关

### CentOS6+

https://techjourney.net/update-add-ca-certificates-bundle-in-redhat-centos/

```bash
update-ca-trust enable

# Then placing the certificates to trust as 
# CA's in /etc/pki/ca-trust/source/anchors/ for high priority (non-overridable), 
# or /usr/share/pki/ca-trust-source/ (lower priority, overridable),
# and finally updating the system store with:

update-ca-trust extract
```

### Ubuntu下安装CA证书

https://askubuntu.com/questions/73287/how-do-i-install-a-root-certificate

Given a CA certificate file foo.crt, follow these steps to install it on Ubuntu:

> Create a directory for extra CA certificates in /usr/share/ca-certificates:

```bash
sudo mkdir /usr/share/ca-certificates/extra
```

> Copy the CA .crt file to this directory:

```bash
# sudo cp foo.crt /usr/share/ca-certificates/extra/foo.crt
# Let Ubuntu add the .crt file's path relative to /usr/share/ca-certificates to /etc/ca-certificates.conf:

sudo dpkg-reconfigure ca-certificates
```

> In case of a .pem file on Ubuntu, it must first be converted to a .crt file:
```
openssl x509 -in foo.pem -inform PEM -out foo.crt
```

## SSL转换相关

### `CER` -> `CRT`

https://stackoverflow.com/questions/642284/apache-with-ssl-how-to-convert-cer-to-crt-certificates

```
openssl x509 -inform DER -in certificate.cer -out certificate.crt
```

### `P7B` -> `PFX`

```
openssl pkcs12 -export <目标pfx> -inkey <申请的key> -in <Goddy返回的crt> -certfile gd.crt
```

### `P7B` -> `CRT`

```
openssl pkcs7 -print_certs -in gd-g2_iis_intermediates.p7b -out gd.crt
```