mkdir -p /usr/local/ca
cd /usr/local/ca
# 假设docker服务器ip为82.156.216.00
openssl req -subj "/CN=82.156.216.00" -sha256 -new -key server-key.pem -out server.csr
echo subjectAltName = IP:82.156.216.00,IP:0.0.0.0 >> extfile.cnf
sz /usr/local/ca/ca-key.pem /usr/local/ca/ca.pem /usr/local/ca/cert.pem /usr/local/ca/key.pem
