 -s /tmp/ca-cert.crt.txt /tmp/pod-cert-chain-ca.crt.txt
Files /tmp/ca-cert.crt.txt and /tmp/pod-cert-chain-ca.crt.txt are identical</code></pre></li><li><p>验证从根证书到工作负载证书的证书链：</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ openssl verify -CAfile &lt;(cat certs/cluster1/ca-cert.pem certs/cluster1/root-cert.pem) ./proxy-cert-1.pem
./proxy-cert-1.pem: OK</code></pre></li></ol><h2 id=cleanup>清理</h2><ul><li><p>从本地磁盘中删除证书、密�