Generate a self-signed SSL certificate for web server

gensslcert.sh

#!/bin/bash

set -e
outpemfile="${1:-cert.pem}"
tmpprefix="/tmp/gensslcert-$$"
openssl genrsa -des3 -out "$tmpprefix.key" 2048
openssl req -new -key "$tmpprefix.key" -out "$tmpprefix.csr"
openssl rsa -in "$tmpprefix.key" -out "$outpemfile"
rm -f "$tmpprefix.key"
openssl x509 -req -days 365 -in "$tmpprefix.csr" -signkey "$outpemfile" -out "$tmpprefix.crt"
cat "$tmpprefix.crt" >> "$outpemfile"
set +e
chmod 600 "$outpemfile"
rm -f "$tmpprefix.crt" "$tmpprefix.csr"