saltstack - salt-api安装配置

gaojinguan

[root@centos7 ~]# cd /etc/pki/tls/certs/  # 生成自签名证书，用于ssl　　
[root@centos7 certs]# make testcert
　　
umask 77 ; \
　　
/usr/bin/openssl genrsa -aes128 2048 > /etc/pki/tls/private/localhost.key
　　
Generating RSA private key, 2048 bit long modulus
　　
...................................................................+++
　　
..+++
　　
e is 65537 (0x10001)
　　
Enter pass phrase:       # 输入加密密语，4到8191个字符
　　
Verifying - Enter pass phrase:   # 确认加密密语
　　
umask 77 ; \
　　
/usr/bin/openssl req -utf8 -new -key /etc/pki/tls/private/localhost.key -x509 -days 365 -out /etc/pki/tls/certs/localhost.crt -set_serial 0
　　
Enter pass phrase for /etc/pki/tls/private/localhost.key:     # 再次输入密语
　　
You are about to be asked to enter information that will be incorporated
　　
into your certificate request.
　　
What you are about to enter is what is called a Distinguished Name or a DN.
　　
There are quite a few fields but you can leave some blank
　　
For some fields there will be a default value,
　　
If you enter '.', the field will be left blank.
　　
-----
　　
Country Name (2 letter code) [XX]:CN                             # 选填
　　
State or Province Name (full name) []:Shanghai
　　
Locality Name (eg, city) [Default City]:Shanghai
　　
Organization Name (eg, company) [Default Company Ltd]:
　　
Organizational Unit Name (eg, section) []:
　　
Common Name (eg, your name or your server's hostname) []:
　　
Email Address []:yao.xiabing@99cloud.net