SSL certificates in a jiffy

Quick guide to generating self-signed certificates for use with Apache et al.
Replace <servername> with the fully qualified name of the server you're generating the key for.

  1. Generate the key
    openssl genrsa -des3 -out <servername>.key
  2. Generate the certificate signing request
    openssl req -new -key <servername>.key -out <servername>.csr
    Put the server name when prompted for your name
  3. Remove the password from the key file
    cp <servername>.key <servername>
    openssl rsa -in <servername> -out <servername>.key
  4. Generate the certificate
    openssl x509 -req -days 365 -in <servername>.csr -signkey <servername>.key -out <servername>.crt