This script automatically generates a self-signed ssl certificate and removes its passphrase.

self_signed_ssl.sh

#!/bin/bash

ssl_dir="./ssl"

mkdir -p $ssl_dir
pass=`pwgen -n 100 -1`
openssl genrsa -des3 -out $ssl_dir/server.key -passout pass:$pass 2048
openssl req -new -key $ssl_dir/server.key -out $ssl_dir/server.csr -passin pass:$pass
cp $ssl_dir/server.key $ssl_dir/server.key.org
openssl rsa -in $ssl_dir/server.key.org -out $ssl_dir/server.key -passin pass:$pass
openssl x509 -req -days 3650 -in $ssl_dir/server.csr -signkey $ssl_dir/server.key -out $ssl_dir/server.crt
rm $ssl_dir/server.csr $ssl_dir/server.key.org