[ req ]
prompt = no
default_bits = 2048
distinguished_name  = req_distinguished_name
encrypt_key = no
req_extensions = v3_req

[ req_distinguished_name ]
commonName = *.intel-pod17.opnfv.org

# Allow client and server auth. You may want to only allow server auth.
# Link to SAN names.
[v3_req]
basicConstraints     = CA:FALSE
subjectKeyIdentifier = hash
keyUsage             = digitalSignature, keyEncipherment
extendedKeyUsage     = clientAuth, serverAuth
subjectAltName       = @alt_names

# Alternative names are specified as IP.# and DNS.# for IP addresses and
# DNS accordingly.
[alt_names]
DNS.1 = *.intel-pod17.opnfv.org