Bash script to create valid root cert/web server cert for development purposes

gistfile1.txt

#!/bin/bash

# Set the DNS name for the web certificate
DNS=app-192-168-10-74.nip.io

# Set the filename for the generated CA
CA=ca

# Generate the CA
openssl genrsa -out $CA.key 2048
openssl req -subj "/C=SE/ST=NA/O=Acme, Inc./CN=$DNS" -days 365 \
    -key $CA.key -out $CA.pem -x509 -new -nodes  -sha256  -out $CA.pem

# Generate the web certificate
openssl genrsa -out $DNS.key 2048
openssl req -subj "/C=SE/ST=NA/O=Acme, Inc./CN=$DNS" -new -key $DNS.key -out $DNS.csr
openssl x509 -req -in $DNS.csr -CA $CA.pem -CAkey $CA.key -CAcreateserial \
-out $DNS.crt -days 365 -sha256 -extfile <(printf "extendedKeyUsage = serverAuth \n subjectAltName=DNS:$DNS")

# Output success message and instructions on how to use the generated files
echo "Finished generating CA and web certificate"
echo "Install $CA.pem in iOs simulator and use $DNS.key & $DNS.crt as web server SSL certificates"