1 # To create a RSA root cerificate need to following two steps:

     2 

     3 1. Create a private key for the CA:

     4 

     5 openssl req -nodes -newkey rsa:1024 -keyout <key file> -out <CA req file> -config <config file>

     6 The config file is input parameter, and should be present in advance.

     7 

     8 Example: openssl req -nodes -newkey rsa:1024 -keyout cakey.pem -out careq.pem -config rsa.config

     9 

    10 2. Create the CA certificate:

    11 

    12 openssl x509 -req -in <CA req> -extfile <config file> -extensions v3_ca -signkey <key file> -out <CA cert file>  -days 3650

    13 

    14 Example: openssl x509 -req -in careq.pem -extfile rsa.config -extensions v3_ca -signkey cakey.pem -out cacert.pem  -days 3650

    15