This configuration file does not ship with the version of openssl I pulled for some reason. Found a default openssl.cnf
- generate an RSA private key
openssl genrsa -des3 -passout pass:x -out server.pass.key 2048
- write out the RSA private key
openssl rsa -passin pass:x -in server.pass.key -out server.key
- create the certificate signing request (CSR) for the server or common name;
openssl req -new -key server.key -out server.csr -config openssl.cnf -subj "/C=US/ST=TX/L=Allen/O=WatchGuard Video/CN=localhost"
- generate the x509 certificate from the request (this certificate will work in Root, but not WebHosting because no private key yet); this is normally handled by certificate CA
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt