vi req.cnf
[ req ] distinguished_name = req_distinguished_name req_extensions = v3_req prompt = no [ req_distinguished_name ] C = CN ST = Shandong L = Yantai O = Jiafang OU = IT CN = *.jiafang.com [ v3_req ] keyUsage = critical, digitalSignature, keyAgreement extendedKeyUsage = serverAuth subjectAltName = @alt_names [ alt_names ] DNS.1 = esigndev.jiafang.com DNS.2 = eimpdev.jiafang.com DNS.3 = *.jiafang.com IP.1 = 10.10.112.153
openssl req -new -key server.key -out server.csr -config req.cnf