tidb 漏洞扫描处理- Prometheus 和 ETCD 未授权访问

https://docs.pingcap.com/zh/tidb/stable/generate-self-signed-certificates
按照文档执行到


报错
$ openssl req -new -key tikv.key -out tikv.csr -config openssl.cnf
Error Loading request extension section v3_req
140275897460544:error:22075075:X509 V3 routines:v2i_GENERAL_NAME_ex:unsupported option:crypto/x509v3/v3_alt.c:547:name=basicConstraints
140275897460544:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in extension:crypto/x509v3/v3_conf.c:47:name=subjectAltName, value=@alt_names