Create dev-root-CA signed server certificate on macOS for local development purposes

create-server-crt.sh

#!/bin/bash
#

set -e

[[ $# -eq 2 ]] || {
        echo -ne "\nUsage: $(basename $0) CERT_HOST_FQDN CERT_HOST_IP\n\n"
        exit 1
}

CERT_HOST="$1"
CERT_IP="$2"

openssl genrsa -out certs/${CERT_HOST}-key.pem 4096

openssl req \
        -new \
        -sha256 \
        -subj "/CN=${CERT_HOST}" \
        -key certs/${CERT_HOST}-key.pem \
        -out certs/${CERT_HOST}-csr.pem \

openssl x509 \
        -req \
        -sha256 \
        -days 365 \
        -in certs/${CERT_HOST}-csr.pem \
        -out certs/${CERT_HOST}-crt.pem \
        -CA certs/dev-root-CA-crt.pem \
        -CAkey certs/dev-root-CA-key.pem \
        -CAcreateserial \
        -extfile <(printf "subjectAltName=DNS:${CERT_HOST},IP:${CERT_IP}\nextendedKeyUsage=serverAuth") \

openssl x509 -in certs/${CERT_HOST}-crt.pem -noout -text > certs/${CERT_HOST}-crt.txt

echo "Certificate saved to certs/${CERT_HOST}-crt.pem"
echo "Certificate information in certs/${CERT_HOST}-crt.txt"