##生成private key

openssl genrsa -out private.key 2048

##创建配置文件，设置允许能访问的ip

vim openssl.conf

[req]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = no

[req_distinguished_name]
C = US
ST = VA
L = Somewhere
O = MyOrg
OU = MyOU
CN = MyServerName

[v3_req]
subjectAltName = @alt_names

[alt_names]
IP.1 = 172.18.0.172
IP.2 = 192.168.30.63
IP.3 = 192.168.1.66
IP.4 = 192.168.1.253
IP.5 = 192.168.1.100
IP.6 = 192.168.30.63
IP.7 = 192.168.1.86

## 通过指定配置文件运行openssl并在出现提示时输入密码：生成了 public.crt

openssl req -new -x509 -nodes -days 730 -keyout private.key -out public.crt -config openssl.conf

##生成浏览器能访问呢的p12证书

openssl pkcs12 -export -clcerts -in ./public.crt -inkey ./private.key -out ./public.p12

image.png
以上文件需要放到minio的certs文件下，public.cert提供给java程序加载证书，public.p12给浏览器安装证书

minio 官方说明：
https://docs.min.io/docs/how-to-secure-access-to-minio-server-with-tls.html#use-an-existing-key-and-certificate-with-minio