Create a self-signed Certificate authority Create an RSA key Use the genrsa command to create the server private key with the following properties:
The key is protected with the symetric AES256 algorithm. (protecting the key is not mandatory) The key is 2048 bits long. Here is the command:
$ openssl genrsa -aes256 -out private/server.key 2048 Generating RSA private key, 2048 bit long modulus ...............................................................................................+++ ..+++ unable to write 'random state' e is 65537 (0x10001) Enter pass phrase for test.