terraform chef provisioning - cannot validate certificate for 10.90.239.223 because it doesn't contain any IP SANs
Answered on Slack, the likely first issue here is that the output from openssl req is not a cert, it's a CSR. But there are some other lingering issues here too. It is recommended to use something like Certstrap to do internal cert generation rather than raw openssl commands as the modern standards are quite fiddly.