-spkac filename 这一段实在没有看懂,也没兴趣,估计和SPKAC打交道可能性不大,奉送上英文原文。 a file containing a single Netscape signed public key and challenge and additional field values to be signed by the CA. SPKAC FORMAT The input to the -spkac command line option is a Netscape signed public key and challenge. This will usually come from the KEYGEN tag in an HTML form to create a new private key.
\It is however possible to create SPKACs using the spkac utility. The file should contain the variable SPKAC set to the value of the SPKAC and also the required DN components as name value pairs.
If you need to include the same component twice then it can be preceded by a number and a . -infiles 如果你一次要给几个CSR签名,就用这个来输入,但记得这个选项一定要放在最后。这个项后面的所有东东都被认为是CSR文件名参数。 -out filename 签名后的证书文件名。证书的细节也会给写进去。 -outdir directory