http://www.freebsdmadeeasy.com/tutorials/freebsd/create-a-ca-with-openssl.php http://www.freebsdmadeeasy.com/tutorials/web-server/apache-ssl-certs.php
Set up directory structure for CA and configure openssl.cnf.
Set OPENSSL_CONF environment variable - alternative to specifying -config argument each time.