Create a “Root CA” certificate

  1. Generate a key file for “Root CA”
openssl genrsa –aes256 -out ca/private/ca.key 4096

chmod 400
openssl rsa -noout -text -in ca/private/ca.key
  1. Generate a certificate file for “Root CA”
openssl req -config ca/ca.conf -key ca/private/ca.key -new -x509 -days 3650 -sha256 -extensions v3_ca -out ca/certs/ca.crt

chmod 444
openssl x509 -noout -text -in ca/certs/ca.crt