source: https://gist.github.com/jed/6147872

ssl-wildcard-dev.sh

cat > openssl.cnf <<-EOF
  [req]
  distinguished_name = req_distinguished_name
  x509_extensions = v3_req
  prompt = no
  [req_distinguished_name]
  CN = *.${PWD##*/}.dev
  [v3_req]
  keyUsage = keyEncipherment, dataEncipherment
  extendedKeyUsage = serverAuth
  subjectAltName = @alt_names
  [alt_names]
  DNS.1 = *.${PWD##*/}.dev
  DNS.2 = ${PWD##*/}.dev
EOF

openssl req \
  -new \
  -newkey rsa:2048 \
  -sha1 \
  -days 3650 \
  -nodes \
  -x509 \
  -keyout $(brew --prefix)/etc/nginx/ssl/${PWD##*/}.key \
  -out $(brew --prefix)/etc/nginx/ssl/${PWD##*/}.crt \
  -config openssl.cnf

rm openssl.cnf