Подписываем сертификат на несколько доменов

Создаем корневой ключ:

openssl genrsa -out rootCA.key 2048

Самоподписаный корневой сертификат:

openssl req -x509 -new -key rootCA.key -days 10000 -out rootCA.crt

Ключ для сервера:

openssl genrsa -out example.com.key 2048

Создаем конфиг openssl.cnf:

[req]
distinguished_name = req_distinguished_name
req_extensions = v3_req
[req_distinguished_name]
countryName = Country Name (2 letter code)
countryName_default = US
stateOrProvinceName = State or Province Name (full name)
stateOrProvinceName_default = MN

User tags

youtube PXE corosync bash build glusterfs rtsp language iops ssh performance usb iostat alsa su pam tzdata rtl8723be keyboard mdadm sysresccd bacula equalizer core dump rsync routing HDFS scsi iowait LVM exim DRBD xen regex groups slab X forwarding KVM radeon openvpn initrd zRam idmapd virtualbox etch ipmi dhclient OpenSSL netfilter centos 7 swap bridge gre parallel SuperMicro bind Salt exim4 StorMan dns lts sysctl.conf cpu drupal gtk cluster conntrack /etc/network/interfaces debootstrap php vtysh nfs4 arch CentOS perlbrew fido7 cpu usage flash Swift hotplug sftp chromium ha dhcp proxy fail2ban perl ip quagga in-addr.arpa source tftp iptables rkhunter security erase tool munin dovecot newgrp xfs cfq ansible fio HTTPS oprofile gdb dstat asoundrc opcontrol vrrpd bscan SpamAssassin docker PTR .htaccess vlan graylog2 MegaRAID ulimit tar CPAN Adaptec arping sysctl dpkg ps apache Areca OpenStack LSI soa nvidia top arp vim MODx tun mount firefox mkfs deb SSD qemu elliptics gpg docker-compose sublime boot 3Ware alien tin SYN virsh xhost vrrp qcow2 freedos numa glxinfo find lubuntu ddos profiling iSCSI mysql cgroups limit_conn backtrace backup bug leap second rpm nginx tiger hdparm ipmitool video git lxc sysfs raid sg apt puppet xargs ardour cpanm storage shorewall htop wget sysrq kernel ubuntu APU grub chroot pulseaudio noop replication virt-install shellshock route lstat java RT AMD taskset opreport encrypt cache pvmove search raid5 bonding pacemaker debian mariadb jackd NFS wordpress squeeze lenny