/opt/openssl/huybaoCA/ServerCA
2. /etc/ssl/openssl.conf
nsCertType = server
3. openssl ca -in apache2.req.pem -cert ../RootCA/RootCA.pem -keyfile ../RootCA/RootCA.key.pem -out apache3.cert.pem
4. openssl rsa -in apache2.key.pem -out apache2.key.pem.withoupwd
5. cp apache3.cert.pem /etc/apache2/ssl.crt/huybaoWEB.crt
6. cp apache2.key.pem.withoupwd /etc/apache2/ssl.key/huybaoWEB.KEY
7. apache restart
8. /etc/ssl/openssl.conf
nsCertType = client, email
9. openssl ca -in huybao2.CSR -cert ../RootCA/RootCA.pem -keyfile ../RootCA/RootCA.key.pem -out huybao2.crt
10. openssl pkcs12 -export -clcerts -in huybao2.crt -inkey huybao.KEY -out huybao2.p12