create https authorized certs

index.sh

# from http://engineering.circle.com/https-authorized-certs-with-node-js/

# generate ca
wget https://raw.githubusercontent.com/anders94/https-authorized-clients/master/keys/ca.cnf
openssl req -new -x509 -days 9999 -config ca.cnf -keyout ca-key.pem -out ca-crt.pem

# generate private key for server
openssl genrsa -out server-key.pem 4096

# generate server certificate, remember to update the CN (common name)
wget https://raw.githubusercontent.com/anders94/https-authorized-clients/master/keys/server.cnf
openssl req -new -config server.cnf -key server-key.pem -out server-csr.pem

# sign it
openssl x509 -req -extfile server.cnf -days 999 -passin "pass:password" -in server-csr.pem -CA ca-crt.pem -CAkey ca-key.pem -CAcreateserial -out server-crt.pem

# bundle it into pfx
# from https://nodejs.org/api/tls.html
openssl pkcs12 -export -in server-crt.pem -inkey server-key.pem -certfile ca-crt.pem -out server.pfx