useful links for openssl self signed certificates

1-RootCA.pem

openssl genrsa  -out key.pem 2048
# OR
openssl genrsa -des3 -out rootCA.key 2048 

2-Generate public key

1:  
openssl req -new -key key.pem -out csr.csr \
-reqexts v3_req \
-extensions v3_req \ 
-config <(cat /usr/lib/ssl/openssl.cnf \
        <(cat ./openssl.cnf)) \
-sha256 \
-days 3650


2:  
openssl req \
    -newkey rsa:2048 \
    -x509 \
    -nodes \
    -keyout server.pem \
    -new \
    -out server.pem \
    -subj /CN=localhost \
    -reqexts SAN \
    -extensions SAN \
    -config  openssl.cnf
    -sha256 \
    -days 3650

csr to pem

openssl x509 -in cert.pem -inform PEM -out cert.crt

links.md

https://msol.io/blog/tech/create-a-self-signed-ssl-certificate-with-openssl/
webpack/webpack-dev-server#854
https://gist.github.com/mehrdaad/631772320204eaae9ccf457ec3b004a3
basecamp/pow#541
https://gist.github.com/jed/6147872
https://leehblue.com/add-self-signed-ssl-google-chrome-ubuntu-16-04/