1.添加自动生成中间证书及实体证书脚本文件signssl.sh

2.添加证书文件检测工具x509
3.修改配置文件注释

conf/cert_store.ini

@@ -5,34 +5,37 @@ DEBUG_SWITCH = 1
 RUN_LOG_LEVEL = 10
 RUN_LOG_PATH = ./logs
 [CONFIG]
-#<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>߳<EFBFBD><EFBFBD><EFBFBD>
+#Number of running threads
 thread-nu = 4
-#<EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ĭ<EFBFBD>ϸ<EFBFBD>֤<EFBFBD><EFBFBD>ǩ<EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ч<EFBFBD>ڣ<EFBFBD>Ĭ<EFBFBD><EFBFBD>Ϊ30<EFBFBD><EFBFBD>
+#Local default root certificate is valid for 30 days by default
 expire_after = 30
-#<EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ĭ<EFBFBD>ϸ<EFBFBD>֤<EFBFBD><EFBFBD>·<EFBFBD><EFBFBD>
+#Local default root certificate path
 def-ca-path = ../ca
 [NTC_MAAT]
-#<EFBFBD><EFBFBD><EFBFBD>ü<EFBFBD><EFBFBD><EFBFBD>ģʽ,0Ϊʹ<CEAA><CAB9><EFBFBD><EFBFBD><EFBFBD>÷ַ<C3B7><D6B7><EFBFBD><EFBFBD><EFBFBD><EFBFBD>·<EFBFBD><C2B7><EFBFBD><EFBFBD>ļ<EFBFBD>,1Ϊʹ<CEAA>ñ<EFBFBD><C3B1><EFBFBD>json,2Ϊʹ<CEAA><CAB9>Redis<69><73>ȡ<EFBFBD><C8A1><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+#Configure the load mode,
+#0: using the configuration distribution network
+#1: using local json
+#2: using Redis reads
 maat_json_switch=2
-#<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ģʽΪ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>·<EFBFBD>ʱ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ɨ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>޸ļ<EFBFBD><EFBFBD><EFBFBD>(s)
+#When the loading mode is sent to the network, set the scanning configuration modification interval (s).
 effective_interval=1
-#ָ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ÿ<EFBFBD><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD>λ<EFBFBD><EFBFBD>
+#Specify the location of the configuration library table file
 table_info=../conf/table_info.conf
-#<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD>·<EFBFBD><EFBFBD>
+#Incremental profile path
 inc_cfg_dir=../rule/inc/index
-#ȫ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD>·<EFBFBD><EFBFBD>
+#Full profile path
 full_cfg_dir=../rule/full/index
-#jsonģʽʱjson<EFBFBD>ļ<EFBFBD>·<EFBFBD><EFBFBD>
+#Json file path when json schema is used
 pxy_obj_keyring=../conf/pxy_obj_keyring.json
 [LIBEVENT]
-#<EFBFBD><EFBFBD><EFBFBD>ؼ<EFBFBD><EFBFBD>ض˿ںţ<EFBFBD>Ĭ<EFBFBD><EFBFBD>Ϊ9991
+#Local monitor port number, default is 9991
 port = 9991
 [CERTSTORE_REDIS]
-#<EFBFBD><EFBFBD><EFBFBD>ش洢֤<EFBFBD><EFBFBD><EFBFBD><EFBFBD>Redis<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>IP<EFBFBD><EFBFBD>ַ<EFBFBD>Ͷ˿ں<EFBFBD>
+#The Redis server IP address and port number where the certificate is stored locally
 ip = 127.0.0.1
 port = 6379
 [MAAT_REDIS]
-#Maat<EFBFBD><EFBFBD><EFBFBD>ص<EFBFBD>Redsi<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>IP<EFBFBD><EFBFBD>ַ<EFBFBD>Ͷ˿ں<EFBFBD>
+#Maat monitors the Redsi server IP address and port number
 ip = 192.168.11.243
 port = 6379
 dbindex = 4