Apache self signed certificate HOWTO
Generate the keys for the Certificate Authority (the key that will do the signing)
openssl genrsa -aes256 -out ca.key 4096
openssl req -new -x509 -days 3650 -key ca.key -out ca.crtGenerate the private key for your server
openssl genrsa -aes256 -out server.key 4096Create a CSR (certificate signing request) to get signed by the CA
openssl req -new -key server.key -out server.csrSign your csr with the key you made in the first step
openssl x509 -req -days 3650 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crtOptionally remove the password from your key (if you do this protect your key!!!)
openssl rsa -in server.key -out server.key.nopassAdd these lines to your Apache config
SSLEngine on
SSLCertificateFile /www/ssl.crt/server.crt
SSLCertificateKeyFile /www/ssl.key/server.key