Latest Chrome on Mac doesn't allow forcing through self signed certificate

[nhooyr]

Latest chrome on Mac, just no option to continue

Some research suggests there may be something wrong about our self signed certificate. Something to do with subjectAltName not being set?

[nhooyr]

Works in Safari btw, I can force through.

[keiththomps]

I was running into this a few months ago when running on a CentOS 7 server and trying to connect from Catalina. You need a new enough version of OpenSSL (I used 1.1.1). The following will generate a cert that meets the requirements in case this is useful for anyone else:

/usr/local/ssl/bin/openssl req -newkey rsa:2048 -nodes \
  -x509 -days 365 \
  -out cert.pem \
  -keyout key.pem \
  -config /etc/pki/tls/openssl.cnf \
  -subj "/C=US/ST=Ohio/L=Columbus/O=Business./CN=Server" \
  -addext extendedKeyUsage=serverAuth \
  -addext subjectAltName=DNS:localhost

[nhooyr]

Awesome!

Let's add this to the FAQ or make code-server automatically generate it correctly.

[nhooyr]

Related to https://7402.org/blog/2019/new-self-signed-ssl-cert-ios-13.html

[nhooyr]

I ended up fixing this in #2255