#!/usr/bin/env bash
openssl genrsa -des3 -passout pass:x -out rootCA.key 2048
openssl rsa -passin pass:x -in rootCA.key -out server.key
mv rootCA.key rootCA_withpass.key
cp server.key rootCA.key
openssl req -new -key rootCA.key -out server.csr -config <( cat server_csr.cnf )
openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 1024 -out rootCA.pem -config <( cat server_csr.cnf )