我尝试为我的服务器生成多个域的自签名证书.我在v3_req扩展中使用了openssl.我使用此命令行生成具有多个域和扩展密钥用法的证书:
openssl x509 -req -days 3650 -in san_domain_com.csr -signkey san_domain_com.key -out san_domain_com.crt -extensions v3_req -extensions mysection -extfile openssl.cnf
结果是我的证书包含多个域但没有扩展的关键用法用于serverauth和clientauth,我的网站也只能从Firefox访问.有人对此有所了解吗？谢谢
我的openssl.conf文件结构如下:
#
# OpenSSL example configuration file.
# This is mostly being used for generation of certificate requests.
#
# This definition stops the following lines choking if HOME isn't
# defined.
HOME = .
RANDFILE = $ENV::HOME/.rnd
# Extra OBJECT IDENTIFIER info:
#oid_file = $ENV::HOME/.oid
oid_section = new_oids
# To use this configuration file with the "-extfile" option …