https CA自签证书

openssl genrsa -out rootca.key 4096
openssl req -new -out rootca.csr -key rootca.key

Country Name (2 letter code) [AU]:cn
State or Province Name (full name) [Some-State]:sz
Locality Name (eg, city) []:sz
Organization Name (eg, company) [Internet Widgits Pty Ltd]:zte
Organizational Unit Name (eg, section) []:zte
Common Name (e.g. server FQDN or YOUR name) []:zxmte.zte.com.cn
Email Address []:
A challenge password []:123456
An optional company name []:zte

openssl x509 -req -in rootca.csr -out rootca.crt -signkey rootca.key -days 36500

openssl genrsa -out server.key 4096

openssl req -new -key server.key -out server.csr

Country Name (2 letter code) [AU]:cn
State or Province Name (full name) [Some-State]:js
Locality Name (eg, city) []:sz
Organization Name (eg, company) [Internet Widgits Pty Ltd]:zte
Organizational Unit Name (eg, section) []:zte
Common Name (e.g. server FQDN or YOUR name) []:zxmte.zte.com.cn
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:123456
An optional company name []:zte

openssl x509 -req -in server.csr -CA rootca.crt -CAkey rootca.key -CAcreateserial -out server.crt -days 36500

openssl x509 -req -in server.csr -CA rootca.crt -CAkey rootca.key -CAcreateserial -out server.crt -days 36500 -extensions req_ext -extfile ssl.cnf

[ req_ext ]
subjectAltName = @alt_names

[alt_names]
IP.1    = 10.9.181.189
IP.2    = 10.7.235.231
#DNS.1   = your-website.dev
#DNS.2   = another-website.dev