generate lnd key with custom dns

generate.sh

# do this once for server private key:
openssl ecparam -genkey -name prime256v1 -out tls.key

# both server and all clients have to use the same cert file tls.cert
openssl req -new -sha256 \
    -key tls.key \
    -subj "/CN=localhost/O=lnd" \
    -reqexts SAN \
    -config <(cat /etc/ssl/openssl.cnf \
        <(printf "\n[SAN]\nsubjectAltName=DNS:localhost,DNS:aaaa,DNS:bbbb,IP:192.168.1.xxx")) \
    -out csr.csr
openssl req -x509 -sha256 -days 36500 \
    -key tls.key \
    -in csr.csr -out tls.cert \
    -extensions SAN \
    -config <(cat /etc/ssl/openssl.cnf \
        <(printf "\n[SAN]\nsubjectAltName=DNS:localhost,DNS:aaa,DNS:bbbb,IP:192.168.1.xxx"))
openssl x509 -in tls.cert -text -noout