第 62.1 节：基于 Debian 的系统设置（假设 MySQL 已安装，使用sudo。）生成 CA 和 SSL 密钥确保已安装 OpenSSL 和库：apt-get-yinstallopensslapt-get-yinstalllibssl-dev接下来，创建并进入存放 SSL 文件的目录：mkdir/home/ubuntu/mysqlcertscd/home/ubuntu/mysqlcerts生成密钥，创建证书颁发机构（CA）并签名：openssl genrsa2048ca-key.pem openssl req-new-x509-nodes-days3600-keyca-key.pem-outca.pem（每个提示符下输入的值不会影响配置。）接下来创建服务器密钥，并使用之前的 CA 签名：openssl req-newkeyrsa:2048-days3600-nodes-keyoutserver-key.pem-outserver-req.pem openssl rsa-inserver-key.pem-outserver-key.pem openssl x509-req-inserver-req.pem-days3600-CAca.pem-CAkeyca-key.pem-set_serial01-outserver-cert.pem然后创建客户端密钥：openssl req-newkeyrsa:2048-days3600-nodes-keyoutclient-key.pem-outclient-req.pem openssl rsa-inclient-key.pem-outclient-key.pem openssl x509-req-inclient-req.pem-days3600-CAca.pem-CAkeyca-key.pem-set_serial01-outclient-cert.pem验证密钥是否正确：