Create a self signed SSL Certificate

self-sign-ssl.sh

#!/bin/bash

openssl genrsa -des3 -out server.key 2048
openssl req -new -key server.key -out server.csr
cp server.key server.key.org
openssl rsa -in server.key.org -out server.key
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
mv server.crt ssl.crt
mv server.key ssl.key
rm server.key.org server.csr
openssl pkcs12 -export -clcerts -in ssl.crt -inkey ssl.key -out client.p12
openssl pkcs12 -in client.p12 -out client.pem -clcerts

How to run

• To run this, scp this to your server

scp -i /path/to/key.pem /path/to/self-sign-ssl.sh user@hostname:/~

• Login using that user, set executable bit and make sure permissions are always correct

ssh -i /path/to/key.pem user@hostname
chmod +x ~/self-sign-ssl.sh
./~/self-sign-ssl.sh

• Don't enter a passphrase if you want to automate stuff
• Enter details correctly, make sure the domain name matches
• Use the generated certificate and key file