Create self-signed certificates with OpenSSL Root CA Create Root CA key (enable password with '-des3' option) $ openssl genrsa -des3 -out root.key 4096 Create Root CA