替换esxi主机SSL证书

 

ESXi主机SSL证书更换

 

1、生成证书请求文件rui.csr及私钥rui.key

 

a、创建esxi.cfg文件内容如下：

 

[ req ]

 

default_bits = 2048

 

default_keyfile = rui.key

 

distinguished_name = req_distinguished_name

 

encrypt_key = no

 

prompt = no

 

string_mask = nombstr

 

req_extensions = v3_req

 

 

 

[ v3_req ]

 

basicConstraints = CA:FALSE

 

keyUsage = digitalSignature, keyEncipherment, dataEncipherment

 

extendedKeyUsage = serverAuth, clientAuth

 

subjectAltName = DNS:esxi-dell, DNS:192.168.191.23, DNS:esxi-dell.demo-cq.cn

 

 

 

[ req_distinguished_name ]