[openssl] Self-Signed certificates #tags: x509, ssl, tls, openssl

sslkeygen.sh

# generate encryption key .pem or .key
openssl genrsa 2048 > $1.key

# generate selfsigned certificate .crt optionally
openssl req -x509 -new -nodes -days $2 -key $1.key -subj "/CN=$1" > $1.pem

openssl genrsa 2048 > $1_device.key

# generate certificate sign request .pem or .csr
openssl req -new -key $1_device.key -subj "/CN=$1" > $1_device.csr

# generate selfsigned certificate and CA
openssl x509 -req -days $2 -in $1_device.csr -CA $1.pem -CAkey $1.key -CAcreateserial > $1.crt