openssl.sh

#!/usr/bin/env sh

------------------------------------------

openssl genrsa -out jbzoo-com-ca.key 2048
openssl req -x509 -new -key jbzoo-com-ca.key -days 10000 -out jbzoo-com-ca.crt

openssl genrsa -out jbzoo-com-server.key 2048
openssl req -new -key jbzoo-com-server.key -out jbzoo-com-server.csr
openssl x509 -req -in jbzoo-com-server.csr -CA jbzoo-com-ca.crt -sha256 -CAkey jbzoo-com-ca.key -CAcreateserial -out jbzoo-com-server.crt -days 5000

chmod 400 jbzoo-com-ca.crt; chmod 400 jbzoo-com-ca.key

# see
openssl x509 -in jbzoo-com-server.crt -text -noout | less