generate self-signed rsa certificate (4096)

gen_rsa_cert.sh

#!/bin/bash

if [ $# -ne 1 ]; then
	echo "usage: <hostname>"
	exit 1
fi

CN=$1
openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:4096 -out ${CN}.key
openssl req -new -sha256 -key ${CN}.key -out ${CN}.csr \
 -subj "/C=OK/ST=ciao/L=ciao/O=ciao/OU=OK/CN=${CN}"
openssl x509 -req -days 1095 -in ${CN}.csr -signkey ${CN}.key -out ${CN}.crt