Making CSR file for face core

This document can be used as [E Guide for Zhengtong to obtain real name information ](https://cloud.tencent.com/document/product/1007/63370) in `2. Make CSR file ` A supplement to

One 、 Installation state secret SSL

#  download  gmssl 
wget https://github.com/guanzhi/GmSSL/archive/master.zip 
#  decompression 
unzip master.zip
# cd  To GmSSL-master  Under the table of contents 
cd GmSSL-master
#  Compile static libraries only 
# --prefix  Appoint  gmssl  Installation path for 
# --openssldir  Express  OpenSSL  Data area , for example openssl.cnf, Certificates and keys .
  If it's a relative catalog , It will be added to --prefix In a given directory .【 You don't specify , Default in  --prefix  At the same level  ssl  Catalog 】
# no-shared  Indicates that only static libraries are compiled , Do not compile dynamic library 
./config --prefix=/usr/local/gmssl no-shared
#  install （ If there is an old version , have access to  make uninstall  uninstall , Then delete the corresponding file ）
make
make install
#  Add environment variables 
#  Under the specified path  bin  Catalog 
echo 'export PATH="$PATH:/usr/local/gmssl/bin"' >> ~/.bash_profile
#  Refresh 
source ~/.bash_profile
#  Check whether the installation is successful 
gmssl version -a
#  Generate public and private key pairs 
gmssl ecparam -genkey -name sm2p256v1 -out CAkey.pem
#  View and keep the private key 
gmssl pkey -in CAkey.pem -noout -text

Be careful ：

Please keep the obtained private key properly , Used for subsequent decryption steps . The private key is shown in the red box below （ Please remove the colon in the middle when using ）：

Create certificate request

gmssl req -utf8 -new -sm3 -key CAkey.pem -out CAcsr.pem

The information filling specifications and instructions are shown in the figure below ：

View certificate request

gmssl req -in CAcsr.pem -noout -text -subject

thus , The certificate request is completed , Please put CAcsr.pem Upload files [ Console ](https://console.cloud.tencent.com/faceid/access?tab=eid),CAkey.pem（ Private key ） Please keep it properly .

Decrypt

Because I have to upload CSR and CA Certification and other processes , My personal server , Unable to simulate , Therefore, the follow-up process can refer to the document ：https://cloud.tencent.com/document/product/1007/63370 in

Two 、ERROR wrc

Report errors ：You need Perl 5

// download 
wget https://www.cpan.org/src/5.0/perl-5.28.0.tar.gz
 perhaps  yum list perl View installable perl package 
 adopt yum install perl-xxx  install 
// decompression 
tar -xzf perl-5.28.0.tar.gz
cd perl-5.28.0
// Run profile 
./Configure -des -Dprefix=$HOME/localperl
// compile 
make
// Compile testing 
make test
// Compile according to 
make install