Improve self-signed certificate generation.

[tochi-y]

Current self-signed certificate generation has 2 improvements.

• Example of CommonName value like '*.personium.example' is not documented.
• Subject alternative names are not set, so chrome (later 58) makes the error.

To set subject alternative names, following procedures are necessary.

# cat << EOS > san.txt
> subjectAltName = DNS:personium.example, DNS:*.personium.example
> EOS
# openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt -extfile san.txt

[tochi-y]

114 closed this.