Create SSL certificates signed by local root certificate. Place in /user/local/etc/apache/ssl with the root and site certs and run from that folder

create-site-cert

#! /bin/bash

# Create a private key and certificate, signed by the local root certificate
# http://datacenteroverlords.com/2012/03/01/creating-your-own-ssl-certificate-authority/

if [ -z $1 ]
then
        echo "key name is required as an argument"
        exit 1
fi

# create private key
openssl genrsa -out $1.key 2048

# Create signing request
openssl req -new -key $1.key -out $1.csr

# Create certificate
openssl x509 -req -in $1.csr -CA root-ca.pem -CAkey root-ca.key -CAcreateserial -out $1.crt -days 900

# Delete the signing request since it's no longer needed
rm $1.csr