Create self-signed keypair with no prompts, 2048, 15 years

create_keypair.sh

#!/bin/bash
name=$1
if [ -z $name ]
then
  name="self-signed"
fi

openssl req -x509 -days 5479 -nodes -newkey rsa:2048 -keyout $name.key -out $name.pem -config <( cat << EOF
[ req ]
default_bits        = 2048
prompt              = no
distinguished_name  = req_distinguished_name
string_mask         = utf8only
default_md          = sha256
[ req_distinguished_name ]
C=US
ST=ST
L=L
O=O
OU=OU
CN=CN
EOF
)