dir
/opt/openssl/openssl.cnf
dir
mkdir certs crl newcerts private
echo "01" > serial
touch index.txt
openssl req -new -x509 -newkey rsa:2048 -keyout private/cakey.pem \
-out cacert.pem -days 730
openssl
private/cakey.pem
chown root chmod +400
openssl x509 –in cacert.pem –outform der \
–out cacert.der
