# Create a RSA 2048 bit public/private key pair and a self-signed certificate
# Certificate: public key data plus meta data (expiration date, -sub parameters, signature algorithm sha256WithRSAEncryption)
openssl req -new -x509 -nodes -newkey rsa:2048 -days 365 -keyout server.key -out server.crt -sha256 -subj "/C=DE/ST=Bavaria/L=Munich/OU=MyDepartment/O=MyCompany/CN=server"
# public/private key are stored in file server.key and the certificate in file server.crt
#
# Pack the data in a PKCS12 key store
# Key store password: 123456
openssl pkcs12 -export -in server.crt -inkey server.key -name server -out server.p12 -passout pass:123456
#
# No key store password
openssl pkcs12 -export -in server.crt -inkey server.key -name server -out server.p12 -passout pass: