[ req ] default_bits = 2048 default_keyfile = server-private-key.pem distinguished_name = req_distinguished_name x509_extensions = v3_ca prompt = no [ req_distinguished_name ] CN = localhost [ v3_ca ] # Add ::1 to the list of allowed IPs so we can use ::1 to explicitly connect # to localhost via IPv6. subjectAltName = IP:::1