Q: How to create a ssl certificate for use with httpd?

A: # openssl genrsa -aes128 -out /etc/ssl/server.key 4096
# openssl req -new -key /etc/ssl/server.key -out /etc/ssl/server.csr
# openssl x509 -req -days 3650 -in /etc/ssl/server.csr -signkey /etc/ssl/server.key -out /etc/ssl/server.crt
# openssl rsa -in /etc/ssl/server.key -out /etc/ssl/server.key.insecure
# mv /etc/ssl/server.key /etc/ssl/server.key.secure
# mv /etc/ssl/server.key.insecure /etc/ssl/server.key
# cp /etc/ssl/server.key /etc/httpd/ssl
# cp /etc/ssl/server.crt /etc/httpd/ssl