Create a Local CA root certificate.

simple-local-ca-cert.sh

#!/usr/bin/env bash

# Create the CA root signing key
openssl genrsa -out "./ca.key" 2048

# Create the CA root certificate
openssl req -x509 -new -nodes \
            -days 3650 \
            -reqexts v3_req \
            -extensions v3_ca \
            -subj "/CN=Local CA Root" \
            -key "./ca.key" \
            -out "./ca.pem"

echo "Local CA root certificate (ca.pem) and key (ca.key) have been created."