Create sample SSL Client and Server Certificates

sample-ssl-client-server-cert.sh

#!/usr/bin/env bash

openssl genrsa -aes256 -passout pass:changeme -out ca.pass.key 4096
openssl rsa -passin pass:changeme -in ca.pass.key -out ca.key
openssl req -new -x509 -days 365 -key ca.key -out ca.crt
openssl genrsa -aes256 -passout pass:changeme -out server.pass.key 4096
openssl rsa -passin pass:changeme -in server.pass.key -out server.key
openssl req -new -key server.key -out server.csr
openssl x509 -CAcreateserial -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key -out server.crt
openssl genrsa -aes256 -passout pass:changeme -out client.pass.key 4096
openssl rsa -passin pass:changeme -in client.pass.key -out client.key
openssl req -new -key client.key -out client.csr
openssl x509 -req -days 365 -in client.csr -CA ca.crt -CAkey ca.key -out client.crt
cat client.key client.crt ca.crt > client.pem
openssl pkcs12 -export -out client.pfx -inkey client.key -in client.pem -certfile ca.crt