keytool -keystore CobaltStrike.store -storepass 123cvg -keypass 123cvg -genkey -keyalg RSA -alias baidu.com -dname "CN=China, OU=Tencent, O=Tencent, L=Tencent, ST=Tencent, C=Tencent"

命令:------生成证书时可以用如下几个------  -alias        指定别名  -storepass          指定更改密钥库的存储口令  ‐keypass pass       指定更改条目的密钥口令  -keyalg             指定算法  -dname              指定所有者信息  ---------------------------------  ‐certreq            生成证书请求  ‐changealias        更改条目的别名  ‐delete             删除条目  ‐exportcert         导出证书  ‐genkeypair         生成密钥对  ‐genseckey          生成密钥  ‐gencert            根据证书请求生成证书  ‐importcert         导入证书或证书链  ‐importpass         导入口令  ‐importkeystore     从其他密钥库导入一个或所有条目  ‐keypasswd          更改条目的密钥口令  ‐list               列出密钥库中的条目  ‐printcert          打印证书内容  ‐printcertreq       打印证书请求的内容  ‐printcrl           打印 CRL 文件的内容  ‐storepasswd        更改密钥库的存储口令

apt install nginx

server{server_name cs.xxxx.tk;listen 2096 ssl;root         /usr/share/nginx/html;location ~*/jquery {if ($http_user_agent != "Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko") {return 302;}proxy_pass          https://127.0.0.1:8443;}

ssl_certificate "/home/cs4.4/pem/sss.pem";    ssl_certificate_key "/home/cs4.4/pem/ssk.pem";    ssl_session_cache shared:SSL:1m;    ssl_session_timeout  1440m;

openssl pkcs12 -export -in sss.pem -inkey ssk.pem -out sb.ljw.p12 -name sb.ljw -passout pass:123cvb
keytool -importkeystore -deststorepass 123cvb -destkeypass 123cvb -destkeystore sb.ljw.s

    set keystore “sb.ljw.store”;    set password “123cvb”;

iptables -A INPUT -s 127.0.0.1 -p tcp --dport 8443 -j ACCEPTiptables -A INPUT -p tcp --dport 8443 -j DROP

let upstream = 'https://xxx.xxx.tk'
addEventListener('fetch', event => {    event.respondWith(fetchAndApply(event.request));})
async function fetchAndApply(request) {    const ipAddress = request.headers.get('cf-connecting-ip') || '';    let requestURL = new URL(request.url);    let upstreamURL = new URL(upstream);    requestURL.protocol = upstreamURL.protocol;    requestURL.host = upstreamURL.host;    requestURL.pathname = upstreamURL.pathname + requestURL.pathname;
    let new_request_headers = new Headers(request.headers);    new_request_headers.set("X-Forwarded-For", ipAddress);    let fetchedResponse = await fetch(        new Request(requestURL, {            method: request.method,            headers: new_request_headers,            body: request.body        })    );    let modifiedResponseHeaders = new Headers(fetchedResponse.headers);    modifiedResponseHeaders.delete('set-cookie');    return new Response(        fetchedResponse.body,        {            headers: modifiedResponseHeaders,            status: fetchedResponse.status,            statusText: fetchedResponse.statusText        }    );}

new_request_headers.set("X-Forwarded-For", ipAddress);