Generate self signed cert for local development, without Chrome SAN warnings

gistfile1.sh

# replace [local.dev] with your domain
# You will still get ERR_CERT_COMMON_NAME_INVALID - but that can be solved by using the standard add to keychain and trust method

openssl req \
    -newkey rsa:2048 \
    -x509 \
    -nodes \
    -keyout server.key \
    -new \
    -out server.crt \
    -subj /CN=[local.dev] \
    -reqexts SAN \
    -extensions SAN \
    -config <(cat /System/Library/OpenSSL/openssl.cnf \
        <(printf '[SAN]\nsubjectAltName=DNS:[local.dev]')) \
    -sha256 \
    -days 3650