• “Initialise Certificate Agency” button

• mkdir /etc/sslca ; cd /etc/sslca

• edit /usr/share/ssl/openssl.cnf to taste (eg name, default_bits, change default path from demoCA to /etc/sslca, change validity (3650 days)

• /usr/bin/openssl req -x509 -days 1460 -newkey rsa:1024 -keyout caKey.pem.locked -out caCert.pem -passin pass:foobar -passout pass:foobar

Notes: