markdown Chrome中的dev和foo域扩展程序强制重定向到HTTPS备注

Posted 2021-05-06

openssl req \
    -newkey rsa:2048 \
    -x509 \
    -nodes \
    -keyout server.key \
    -new \
    -out server.crt \
    -subj /CN=canadadry-carbonate.dev \
    -reqexts SAN \
    -extensions SAN \
    -config <(cat /System/Library/OpenSSL/openssl.cnf \
        <(printf '[SAN]\nsubjectAltName=DNS:your-dev-domain-here.dev')) \
    -sha256 \
    -days 3650

Setup HTTPS with self signed cert. Load the page and recieve ERR_CERT_AUTHORITY_INVALID error. Type `badidea` anywhere on the Chrome warning page. Seriously!

* https://tech.slashdot.org/story/17/09/18/192227/chrome-to-force-domains-ending-with-dev-and-foo-to-https-via-preloaded-hsts
* https://ma.ttias.be/chrome-force-dev-domains-https-via-preloaded-hsts/
* https://stackoverflow.com/questions/7580508/getting-chrome-to-accept-self-signed-localhost-certificate
* https://serverfault.com/questions/845766/generating-a-self-signed-cert-with-openssl-that-works-in-chrome-58
* https://github.com/webpack/webpack-dev-server/issues/854
* https://stapp.space/hsts-error-in-chrome/
* https://techglimpse.com/chrome-https-website-hsts-failed/