Self signed cert on Linux for Chrome 58+

self-cert.sh

#!/bin/sh

openssl req \
-newkey rsa:2048 \
-x509 \
-nodes \
-keyout server.pem \
-new \
-out server.pem \
-subj /CN=localhost \
-reqexts SAN \
-extensions SAN \
-config <(cat /etc/ssl/openssl.cnf \
    <(printf '[SAN]\nsubjectAltName=DNS:localhost')) \
-sha256 \
-days 3650

# Once installed, follow the in https://superuser.com/questions/1201552/not-a-certification-authority-while-importing-self-signed-certificate

# echo QUIT | openssl s_client -connect $DOMAIN_TO_FETCH_FROM:443 | sed -ne '/BEGIN CERT/,/END CERT/p' > my-cert
# certutil -d sql:$HOME/.pki/nssdb -A -t "P,," -n my-cert -i my-cert