gistfile1

$ openssl req -new -nodes -out req.pem
$ openssl req -x509 -days 3650 -in req.pem -key privkey.pem -out cert.pem
$ openssl dhparam -out dh.pem 2048
$ mv privkey.pem rsa.key
$ chmod og-rwx req.pem cert.pem rsa.key


ssl_private_key = "etc/ssl/rsa.key";
ssl_cert = "etc/ssl/cert.pem";
ssl_dh_params = "etc/ssl/dh.pem";
ssld_count = 1;