官网文档https://docs.min.io/docs/how-to-secure-access-to-minio-server-with-tls.html在${HOME}.minio/certs文件夹下cd /home/minio-user/.minio/certs/1、生成私钥openssl genrsa -out private.key 20482、生成自签名证书创建一个以openssl.conf以下内容命名的文件。设置IP.1和/或DNS.1指向正确的 IP/DNS 地址[req]distinguished_name req_distinguished_namex509_extensions v3_reqprompt no[req_distinguished_name]C USST VAL SomewhereO MyOrgOU MyOUCN MyServerName[v3_req]subjectAltName alt_names[alt_names]IP.1 127.0.0.1DNS.1 localhost然后指定文件运行openssl req -new -x509 -nodes -days 999999 -key private.key -out public.crt -config openssl.conf3、导入证书keytool -import -alias public -keystore cacerts -file public.crtchangeitkeytool -list -keystore cacerts -alias public重启minio服务即可支持https如果想换回http删掉或重命名private.key密钥文件即可703 cd /home704 ls705 cd minio-user/706 ls -arlt707 cd .minio/708 ls709 cd certs/710 ls -arlt711 openssl genrsa -out private.key 2048712 vim openssl.conf713 openssl req -new -x509 -nodes -days 730 -key private.key -out public.crt -config openssl.conf714 ls -arlt715 keytool -import -alias public -keystore cacerts -file public.crt716 systemctl restart minio.service717 history718 journalctl -u minio719 history