#!/bin/sh # generate CA openssl genrsa -out myCA.key 4096 openssl req -x509 -new -key myCA.key -out myCA.crt -days 730 -subj /CN="Go Swagger" # generate server cert and key openssl genrsa -out mycert1.key 4096 openssl req -new -out mycert1.req -key mycert1.key -subj /CN="goswagger.local" openssl x509 -req -in mycert1.req -out mycert1.crt -CAkey myCA.key -CA myCA.crt -days 365 -CAcreateserial -CAserial serial # generate client cert, key and bundle openssl genrsa -out myclient.key 4096 openssl req -new -key myclient.key -out myclient.csr openssl x509 -req -days 730 -in myclient.csr -out myclient.crt -CAkey myCA.key -CA myCA.crt -days 365 -CAcreateserial -CAserial serial openssl pkcs12 -export -clcerts -in myclient.crt -inkey myclient.key -out myclient.p12