[ req_distinguished_name ] countryName = Country Name (2 letter code) countryName_default = AU countryName_min = 2 countryName_max = 2 stateOrProvinceName = State or Province Name (full name) stateOrProvinceName_default = Some-State localityName = Locality Name (eg, city) 0.organizationN...
req_extensions = v3_req [req_distinguished_name] countryName = CN countryName_default = CN stateOrProvinceName = Beijing stateOrProvinceName_default = Beijing localityName = Beijing localityName_default = Beijing organizationName = WangAo organizationName_default = WangAo organizationalUnitName = Dev ...
openssl.cnf 文件内容: [req] default_bits = 2048 distinguished_name = req_distinguished_name copy_extensions = copy req_extensions = req_ext x509_extension
问OpenSSL在配置文件中找不到distinguished_nameEN###1、下载openssl源码 https://www.openssl.org/...
commonName = supplied emailAddress = optional [ req ] # Options for the `req` tool (`man req`). default_bits = 2048 distinguished_name = req_distinguished_name string_mask = utf8only # SHA-1 is deprecated, so use SHA-2 instead. ...
What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value,If you enter'.', the field will be left blank.--- Country...
distinguished_name = req_distinguished_name encrypt_key = no default_md = sha256 req_extensions = req_ext [req_distinguished_name]commonName_default = 192.168.1.50 commonName_max = 64 organizationName_default = gongsi Co.,Ltd.organizationalUnitName_default = DM localityName_default = Beijing...
distinguished_name=req_distinguished_name[req_distinguished_name][v3_req]basicConstraints=CA:FALSEkeyUsage=nonRepudiation,digitalSignature,keyEncipherment subjectAltName=@alt_names[alt_names]DNS.1=kubernetesDNS.2=kubernetes.defaultDNS.3=kubernetes.default.svcDNS.4=kubernetes.default.svc.cluster.localIP.1=...
后面集群安装还需要很多证书，例如etcd，kube-apiserver，kubelet，harbor，kube-dashboard，nginx-ingress，...
distinguished_name——这个指定了包含distinguished_name域,当产生一个证书或证书请求时,有提示。 注意:PEM格式的页眉和页脚线通常为: —–BEGIN CERTIFICATE REQUEST—– —–END CERTIFICATE REQUEST—– 某些软件(某些版本的Netscape证书服务器)需要: —–BEGIN NEW CERTIFICATE REQUEST—– ...