我希望配置 OpenSSL，以便在运行openssl req -new以生成新的证书签名请求时，系统会提示我将任何备用主题名称包含在 CSR 中。
我已将此行添加到[req_attributes]我的部分openssl.cnf：
subjectAltName = Alternative subject names
这具有预期的效果，现在在生成 CSR 时会提示我输入 SAN：
$ openssl req -new -out test.csr -key ./test.key <<<
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there …