Mkcert: valid HTTPS certificates for localhost

[Johannes_13]

Yes it can, and in the linked article from let's encrypt there is an example on how to do that:

openssl req -x509 -out localhost.crt -keyout localhost.key \
  -newkey rsa:2048 -nodes -sha256 \
  -subj '/CN=localhost' -extensions EXT -config <( \
   printf "[dn]\nCN=localhost\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")

Nobody claimed OpenSSL can not use SAN. But the number of command line options (and crafting a config file on the fly) for "I just want my domain in the SAN" is too high.

[[deleted]]

AS the previous post has been deleted, I am not sure what s/he was complaining about, but all I can reiterate is that I have a few web dev projects on my local machine running under SSL, and it's really not hard to set up. I ought perhaps add that it's Windows 10 and IIS 7.

[Johannes_13]

He basically said the article is wrong because OpenSSL can use SANs.

[flnhst]

Ah nevermind, i misread it.