Generate self signed certificates

gen_cert.sh

# Provide output directory path as argument
OUTPATH=$1


# Generate CA key:
openssl genrsa -des3 -out $OUTPATH/ca.key 4096

# Generate CA certificate:
openssl req -new -x509 -days 365 -key $OUTPATH/ca.key -out $OUTPATH/ca.crt

# Generate server key:
openssl genrsa -des3 -out $OUTPATH/server.key 4096

# Generate server signing request:
openssl req -new -key $OUTPATH/server.key -out $OUTPATH/server.csr

# Self-sign server certificate:
openssl x509 -req -days 365 -in $OUTPATH/server.csr -CA $OUTPATH/ca.crt -CAkey $OUTPATH/ca.key -set_serial 01 -out $OUTPATH/server.crt

# Remove passphrase from the server key:
openssl rsa -in $OUTPATH/server.key -out $OUTPATH/server.key