#!/bin/bash # Generate CA secret key openssl genrsa -aes256 -out ca.key -passout pass:foo 4096 # Generate CA certificate openssl req -x509 -new -nodes -key certs/ca.key -sha256 -days 1826 -out certs/ca.crt -passin pass:foo -subj '/CN=MyOrg Root CA/C=AT/ST=Vienna/L=Vienna/O=MyOrg'