Generate CA with ssl keys

Makefile

# 5 years
validDays:=1825

priv:
        openssl req -new -sha256 -nodes -out server/server.csr -newkey rsa:2048 -keyout server/server.key -config server.csr.cnf

cert:
        openssl x509 -req -in server/server.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out server/server.crt -days $(validDays) -sha256 -extfile v3.ext


_rootca:
        openssl genrsa -des3 -out rootCA.key 2048

_rootcakey:
        openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 1460 -out rootCA.pem

v3.ext

authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
subjectAltName = @alt_names

[alt_names]
DNS.1=sub1.domain.tld
DNS.2=sub2.domain.tld