我的CSR列出了SAN名称,但是当我在openssl中生成证书时,它们不会被复制到证书中。
openssl.cnf设置为:
[ req ]
default_bits = 2048
default_keyfile = privkey.pem
distinguished_name = req_distinguished_name
attributes = req_attributes
x509_extensions = v3_ca # The extentions to add to the self signed cert
req_extensions = v3_req
[ CA_default ]
# Extension copying option: use with caution.
copy_extensions = copy
[ v3_req ]
# Extensions to add to a certificate request
basicConstraints = CA:FALSE
keyUsage = digitalSignature, keyEncipherment,dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alternate_names
[alternate_names]
DNS.1 = ocmcUmtsPn-qa.stholdco.com
DNS.2 = ocmcUmtsSsu-qa.stholdco.com
DNS.3 = ocmcCdmaPn-qa.stholdco.com
DNS.4 = ocmcCdmaPn-qa.stholdco.com
DNS.5 = ocmcMessaging-qa.stholdco.com
DNS.6 = ocmcData-qa.stholdco.com
我做错了什么?