How to create Self Signed Certificates

.....or a blatant plagerism from the O'Reilly LDAP book edited down to the bare minimum.



  1. /usr/lib/ssl/misc/CA.pl -newcert

  2. /usr/bin/openssl rsa -in newreq.pem -out newkey.pem

  3. mv newkey.pem serverkey.pem

  4. Edit newreq.pem and remove the “key” section. Leaving in the “cert” section.

  5. mv newreq.pem servercert.pem

  6. chmod 600 serverkey.pem