openssl genrsa -out tunnel-ca.key 2048
openssl x509 -req -days 365 -in tunnel_persistent_connectiong_server.csr -CA tunnel-ca.crt -CAkey tunnel_ca.key -CAcreateserial -extfile tunnel_persistent_connectiong_server_cert_extensions -out tunnel_persistent_connectiong_server.crt
此处使用的是tunnel_ca.key，上面生成的是tunnel-ca.key，建议修改
openssl genrsa -out tunnel-ca.key 2048
openssl x509 -req -days 365 -in tunnel_persistent_connectiong_server.csr -CA tunnel-ca.crt -CAkey tunnel_ca.key -CAcreateserial -extfile tunnel_persistent_connectiong_server_cert_extensions -out tunnel_persistent_connectiong_server.crt
此处使用的是tunnel_ca.key，上面生成的是tunnel-ca.key，建议修改