Uni. Metz Workshop X.509 certificate generate a CA Generate a RSA key pair for the CA openssl genrsa -out ca.key 2048 Sign the RSA key of the CA in order to provide a self-signed CA openssl req -new -x509 -days 365 -key ca.key -out ca.crt generate server key openssl genrsa -out server.key 2048 openssl req -new -key server.key -out server.csr sign server certificate request openssl x509 -req -days 365 -CAcreateserial -CA ca.crt -CAkey ca.key -in server.csr -out server.crt verification openssl verify -CAfile ca.crt -purpose sslserver server.crt openssl verify -CAfile ca.crt -purpose sslclient gateway.crt