Create a certification authority and certify a self-signed certificate using openssl

cert.sh

# Create the CA key
openssl genrsa -out ca.key 4096
# Create the CA cert
openssl req -new -x509 -days 1826 -key ca.key -out ca.crt
# Create the certif key
openssl genrsa -out ia.key 4096
# Create the certification request
openssl req -new -key ia.key -out ia.csr
# Create the final certificate
openssl x509 -req -days 730 -in ia.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out ia.crt


# Usage example in Apache Vhost
# SSLCertificateFile /etc/apache2/ssl/ia.crt
# SSLCertificateKeyFile /etc/apache2/ssl/ia.key
# SSLCertificateChainFile /etc/apache2/ssl/ca.crt