openssl genrsa -des3 -out fichero.key 2048
-des3
para generarla sin contraseñaopenssl req -new -key fichero.key -out fichero.csr
$ openssl req -in fichero.csr -noout -text
openssl x509 -req -days 365 -in fichero.csr -signkey fichero.key -out fichero.crt
$ openssl x509 -in fichero.crt -noout -text
<VirtualHost xxx.xxx.xxx.xxx:443> ServerAdmin hostmaster@domain.none ServerName secure.domain.none SSLEngine on SSLProtocol all -SSLv2 SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW SSLCertificateFile /etc/httpd/certs/x.cer SSLCertificateKeyFile /etc/httpd/certs/x.key SSLCACertificateFile /etc/httpd/certs/xAuth.cer DocumentRoot /home/www/secure.domain.none/ <Directory /home/www/secure.domain.none/> Options Indexes FollowSymLinks MultiViews AllowOverride None Order allow,deny allow from all </Directory> ErrorLog /var/log/httpd/secure.domain.none.errors.log CustomLog /var/log/httpd/secure.domain.none.access.log combined # Possible values include: debug, info, notice, warn, error, crit, # alert, emerg. LogLevel debug ServerSignature Off </VirtualHost>
http://www.thegeekstuff.com/2009/07/linux-apache-mod-ssl-generate-key-csr-crt-file/