Create a Self-Signed Certificate with SANs

The internal primary dashboard needs HTTPS for a test environment. A self-signed certificate is fine there.

Task

In /home/student/tls/, create:

• primary.key: a private key (RSA of at least 2048 bits, or EC P-256) that only its owner can read
• primary.crt: a self-signed certificate for that key, valid for at least 365 days and at most 398

The certificate must have the common name primary.internal and be valid for these names (Subject Alternative Names): primary.internal, www.primary.internal and the IP address 127.0.0.1.